psfalcon
psfalcon copied to clipboard
[ BUG ] `New-FalconIoaRule` generates `400` error when following wiki example
Describe the bug Unable to create a custom IOA rule inside of of an IOA group following the New-FalconIoaRule wiki example.
New-FalconIoaRule
is failing to pass field_values
as an array when submitting the rule creation request, causing a 400
response.
Environment (please complete the following information):
- OS: Windows 11
- PowerShell: 5.1
- PSFalcon: 2.2.6
This bug has been fixed for the next release. If you'd like to resolve it for your local module before release, you can replace public\ioarules.ps1
using the steps outlined below.
Import-Module -Name PSFalcon
$ModulePath = (Show-FalconModule).ModulePath
(Invoke-WebRequest -Uri https://raw.githubusercontent.com/CrowdStrike/psfalcon/9f90b0a63a2d6196a8a380a713ca92ac26f0562d/public/ioarules.ps1 -UseBasicParsing).Content > (Join-Path (Join-Path $ModulePath public) ioarules.ps1)
This fix is included in the 2.2.7 release.