Get-PowerSponseRule
April 2, 2019 ยท View on GitHub
SYNOPSIS
Reads the specified CoRe rule and prints the result.
SYNTAX
Get-PowerSponseRule [[-RuleFile] <String>] [[-method] <String>] [-WhatIf] [-Confirm] [<CommonParameters>]
DESCRIPTION
Reads the specified CoRe rule and prints the result. This can be used to test the CoRe rule syntax.
EXAMPLES
Example 1
PS C:\> Get-PowerSponseRule .\rules\emotet-20190325.xml
Read given CoRe rule.
Example 2
PS C:\> Get-PowerSponseRule .\rules\emotet-20190325.xml | select -ExpandProperty action | fl
Read given CoRe rule and show all the defined actions and used parameters.
PARAMETERS
-Confirm
Prompts you for confirmation before running the cmdlet.
Type: SwitchParameter
Parameter Sets: (All)
Aliases: cf
Required: False
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False
-RuleFile
Rule file to read the rules.
Type: String
Parameter Sets: (All)
Aliases:
Required: False
Position: 0
Default value: None
Accept pipeline input: False
Accept wildcard characters: False
-WhatIf
Shows what would happen if the cmdlet runs. The cmdlet is not run.
Type: SwitchParameter
Parameter Sets: (All)
Aliases: wi
Required: False
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False
-method
Method to use by the function for parsing the CoRe rules. If no method is given, use the file extension.
Type: String
Parameter Sets: (All)
Aliases:
Accepted values: xml, json
Required: False
Position: 2
Default value: None
Accept pipeline input: False
Accept wildcard characters: False
CommonParameters
This cmdlet supports the common parameters: -Debug, -ErrorAction, -ErrorVariable, -InformationAction, -InformationVariable, -OutVariable, -OutBuffer, -PipelineVariable, -Verbose, -WarningAction, and -WarningVariable. For more information, see about_CommonParameters (http://go.microsoft.com/fwlink/?LinkID=113216).