-
Notifications
You must be signed in to change notification settings - Fork 82
Remove AzSentinelHuntingRule
Remove Azure Sentinal Hunting Rules
Remove-AzSentinelHuntingRule [-SubscriptionId <String>] -WorkspaceName <String> [-RuleName <String[]>]
[-WhatIf] [-Confirm] [<CommonParameters>]
With this function you can remove Azure Sentinal hunting rules from Powershell, if you don't provide andy Hunting rule name all rules will be removed
Remove-AzSentinelHuntingRule -WorkspaceName "" -RuleName ""
In this example the defined hunting rule will be removed from Azure Sentinel
Remove-AzSentinelHuntingRule -WorkspaceName "" -RuleName "","", ""
In this example you can define multiple hunting rules that will be removed
Remove-AzSentinelHuntingRule -WorkspaceName ""
In this example no hunting rule is specified, all hunting rules will be removed one by one. For each rule you need to confirm the action
Enter the subscription ID, if no subscription ID is provided then current AZContext subscription will be used
Type: String
Parameter Sets: (All)
Aliases:
Required: False
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: FalseEnter the Workspace name
Type: String
Parameter Sets: (All)
Aliases:
Required: True
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: FalseEnter the name of the rule that you wnat to remove
Type: String[]
Parameter Sets: (All)
Aliases:
Required: False
Position: Named
Default value: None
Accept pipeline input: True (ByValue)
Accept wildcard characters: FalseShows what would happen if the cmdlet runs. The cmdlet is not run.
Type: SwitchParameter
Parameter Sets: (All)
Aliases: wi
Required: False
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: FalsePrompts you for confirmation before running the cmdlet.
Type: SwitchParameter
Parameter Sets: (All)
Aliases: cf
Required: False
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: FalseThis cmdlet supports the common parameters: -Debug, -ErrorAction, -ErrorVariable, -InformationAction, -InformationVariable, -OutVariable, -OutBuffer, -PipelineVariable, -Verbose, -WarningAction, and -WarningVariable. For more information, see about_CommonParameters.