psfalcon
psfalcon copied to clipboard
[ BUG ] `Import-FalconConfig` generates `IoaRule` or `IoaGroup` property-related error
Describe the bug
When importing IoaRule, a The property 'enabled' cannot be found on this object error is generated, or you may be prompted to enter a comment when an IoaRule is being created.
When modifying an IoaGroup a 400: rule group version missing error may appear.
To Reproduce
Use Import-FalconConfig with IoaGroup.
Expected behavior
The IoaRule should add enabled properties when they are required, and append a comment automatically, when necessary. If modifying an IoaGroup, a proper version should be automatically supplied.
Environment (please complete the following information):
- PSFalcon: 2.2.8
Changes have been added to the next release to resolve this issue. If you'd like to resolve it for your local module before release, you can replace public\psf-config.ps1 using the steps outlined below.
Import-Module -Name PSFalcon
$ModulePath = (Show-FalconModule).ModulePath
(Invoke-WebRequest -Uri https://raw.githubusercontent.com/CrowdStrike/psfalcon/refs/heads/dev/public/psf-config.ps1 -UseBasicParsing).Content > (Join-Path (Join-Path $ModulePath public) psf-config.ps1)
Please ensure that you close and re-open PowerShell and re-import PSFalcon before testing.
This fix was included in the 2.2.9 release. Closing issue now that the release is available.