CrowdStrike / psfalcon

PowerShell for CrowdStrike's OAuth2 APIs
The Unlicense
350 stars 66 forks source link

[ BUG ] `New-FalconScheduledScan` not sending `endpoint_notification` boolean #364

Closed bk-cs closed 9 months ago

bk-cs commented 10 months ago

Describe the bug When using New-FalconScheduledScan, the value of endpoint_notification (via the Notification parameter) is not being sent

Environment (please complete the following information):

bk-cs commented 10 months ago

This is fixed in the v2.2.6 release. To fix this issue in your local module modify the Public\ods.ps1 file under the New-FalconScheduledScan function and change...

Format = @{
  Body = @{
    root = @('file_paths','host_groups','max_file_size','max_duration','pause_duration',
      'cloud_ml_level_detection','cloud_ml_level_prevention','sensor_ml_level_detection',
      'sensor_ml_level_prevention','cpu_priority','scan_exclusions','description',
      'schedule','ignored_by_channel_file')
  }
}

To include endpoint_notification:

Format = @{
  Body = @{
    root = @('file_paths','host_groups','max_file_size','max_duration','pause_duration',
      'cloud_ml_level_detection','cloud_ml_level_prevention','sensor_ml_level_detection',
      'sensor_ml_level_prevention','cpu_priority','scan_exclusions','description',
      'schedule','ignored_by_channel_file','endpoint_notification')
  }
}
bk-cs commented 9 months ago

Resolved in 2.2.6 release which has been published to GitHub and will be published on the PowerShell Gallery soon.