psfalcon icon indicating copy to clipboard operation
psfalcon copied to clipboard

[ BUG ] `Import-FalconConfig` generates `IoaRule` or `IoaGroup` property-related error

Open bk-cs opened this issue 10 months ago • 1 comments

Describe the bug When importing IoaRule, a The property 'enabled' cannot be found on this object error is generated, or you may be prompted to enter a comment when an IoaRule is being created.

When modifying an IoaGroup a 400: rule group version missing error may appear.

To Reproduce Use Import-FalconConfig with IoaGroup.

Expected behavior The IoaRule should add enabled properties when they are required, and append a comment automatically, when necessary. If modifying an IoaGroup, a proper version should be automatically supplied.

Environment (please complete the following information):

  • PSFalcon: 2.2.8

bk-cs avatar Jan 14 '25 18:01 bk-cs

Changes have been added to the next release to resolve this issue. If you'd like to resolve it for your local module before release, you can replace public\psf-config.ps1 using the steps outlined below.

Import-Module -Name PSFalcon
$ModulePath = (Show-FalconModule).ModulePath
(Invoke-WebRequest -Uri https://raw.githubusercontent.com/CrowdStrike/psfalcon/refs/heads/dev/public/psf-config.ps1 -UseBasicParsing).Content > (Join-Path (Join-Path $ModulePath public) psf-config.ps1)

Please ensure that you close and re-open PowerShell and re-import PSFalcon before testing.

bk-cs avatar Jan 14 '25 18:01 bk-cs

This fix was included in the 2.2.9 release. Closing issue now that the release is available.

bk-cs avatar Sep 13 '25 01:09 bk-cs