2.1.8

[bk-cs]

New Commands

• sensor-update-policies.ps1
  'Get-FalconKernel'

Command Changes

• Added 'cswindiag' command to 'Invoke-FalconRtr' and 'Invoke-FalconAdminCommand'.

• Changed 'Limit' maximum for 'Get-FalconVulnerability' to 400 to match API.

• Added support for local Humio instances within 'Register-FalconEventCollector' while maintaining auto-
  complete for Humio Cloud. Thank you @kra-ts!

• Added 'No queued Real-time Response sessions available' error when using 'Get-FalconQueue' when there are
  no queued sessions.

• Added automatic Json conversion of 'stdout' and 'stderr' output when using 'runscript' with
  'Invoke-FalconRtr', simplifying the use of results from scripts that were designed for Falcon Workflows.

• Added 'iOS' and 'Android' as valid values for 'platform_name' for 'Edit-FalconPreventionPolicy' and
  'New-FalconPreventionPolicy'.

• Added pipeline support for 'Remove-FalconPutFile' and 'Remove-FalconScript'.

• Added the undocumented 'detection_suppress' and 'detection_unsuppress' to 'Invoke-FalconHostAction'.

Resolved Issues

• Issue [ BUG ] Export-FalconReport does not export correct results from Get-FalconUser #187: Fixed typo which was causing array values to only show a single value (instead of all values)
  when using 'Export-FalconReport'.

---

This discussion was created from the release 2.1.8.