New-CMDetectionClauseMacBundle

Creates a detection clause mac bundle

Syntax

New-CMDetectionClauseMacBundle
   -BundleId <String>
   -ExpressionOperator <RuleExpressionOperator>
   -PropertyType <SettingDataType>
   [-Value]
   -ExpectedValue <String>
   [-DisableWildcardHandling]
   [-ForceWildcardHandling]
   [<CommonParameters>]

Examples

Example 1

PS C:\>

Required Parameters

-BundleId
Type:String
Position:Named
Default value:None
Accept pipeline input:False
Accept wildcard characters:False
-ExpectedValue
Type:String
Position:Named
Default value:None
Accept pipeline input:False
Accept wildcard characters:False
-ExpressionOperator
Type:RuleExpressionOperator
Parameter Sets:IsEquals, GreaterEquals, GreaterThan, LessEquals, LessThan
Position:Named
Default value:None
Accept pipeline input:False
Accept wildcard characters:False
-PropertyType
Type:SettingDataType
Parameter Sets:Version, String
Position:Named
Default value:None
Accept pipeline input:False
Accept wildcard characters:False

Optional Parameters

-DisableWildcardHandling

DisableWildcardHandling treats wildcard characters as literal character values. Cannot be combined with ForceWildcardHandling.

Type:SwitchParameter
Position:Named
Default value:None
Accept pipeline input:False
Accept wildcard characters:False
-ForceWildcardHandling

ForceWildcardHandling processes wildcard characters and may lead to unexpected behavior (not recommended). Cannot be combined with DisableWildcardHandling.

Type:SwitchParameter
Position:Named
Default value:None
Accept pipeline input:False
Accept wildcard characters:False
-Value
Type:SwitchParameter
Position:Named
Default value:None
Accept pipeline input:False
Accept wildcard characters:False

Inputs

None

Outputs

System.Object