New-CMDetectionClauseMacPackage

Creates a detection clause mac package

Syntax

New-CMDetectionClauseMacPackage
   -ExpressionOperator <RuleExpressionOperator>
   -PackageId <String>
   [-Value]
   -ExpectedValue <String>
   [-DisableWildcardHandling]
   [-ForceWildcardHandling]
   [<CommonParameters>]

Examples

Example 1

PS C:\>

Required Parameters

-ExpectedValue
Type:String
Position:Named
Default value:None
Accept pipeline input:False
Accept wildcard characters:False
-ExpressionOperator
Type:RuleExpressionOperator
Parameter Sets:IsEquals
Position:Named
Default value:None
Accept pipeline input:False
Accept wildcard characters:False
-PackageId
Type:String
Position:Named
Default value:None
Accept pipeline input:False
Accept wildcard characters:False

Optional Parameters

-DisableWildcardHandling

DisableWildcardHandling treats wildcard characters as literal character values. Cannot be combined with ForceWildcardHandling.

Type:SwitchParameter
Position:Named
Default value:None
Accept pipeline input:False
Accept wildcard characters:False
-ForceWildcardHandling

ForceWildcardHandling processes wildcard characters and may lead to unexpected behavior (not recommended). Cannot be combined with DisableWildcardHandling.

Type:SwitchParameter
Position:Named
Default value:None
Accept pipeline input:False
Accept wildcard characters:False
-Value
Type:SwitchParameter
Position:Named
Default value:None
Accept pipeline input:False
Accept wildcard characters:False

Inputs

None

Outputs

System.Object