Public/Update-CbPolicy.ps1
|
<#
.SYNOPSIS Updates Carbon Black policy on a device within Carbon Black. Official Carbon Black documentation: https://developer.carbonblack.com/reference/carbon-black-cloud/platform/latest/devices-api/#update-policy .PARAMETER SensorID Sensor ID of device to update policy on. This is the safest method and ensures you target the correct device. .PARAMETER ComputerName Name of the device to update policy on. Use at your own risk, if there are multiple devices named similar to the value specified you may target a device you don't intend to. Highly recommend using in conjunction with -WhatIf first to ensure that the intended device is targeted. .EXAMPLE Update-CbPolicy -SensorID 12345678 -PolicyID 12345 .EXAMPLE Update-CbPolicy -ComputerName "tim-pc" -PolicyID 12345 #> function Update-CbPolicy { [CmdletBinding(SupportsShouldProcess)] param ( [Parameter(ParameterSetName='ComputerName', Mandatory=$true)] [string]$ComputerName, [Parameter(ParameterSetName='SensorID', Mandatory=$true)] [int]$SensorID, [Parameter(ParameterSetName='SensorID', Mandatory=$true)] [Parameter(ParameterSetName='ComputerName', Mandatory=$true)] [int]$PolicyID ) $jsonBody = "{ ""action_type"": ""UPDATE_POLICY"", ""options"": { ""policy_id"": ""$PolicyID"" } }" $psObjBody = $jsonBody | ConvertFrom-Json if ($SensorID) { $psObjBody | Add-Member -Name "device_id" -Value @($SensorID) -MemberType NoteProperty $device = Get-CbDevice -SensorID $SensorID } if ($ComputerName) { try { $device = Get-CbDevice -Search $ComputerName } catch { throw "Unable to find device." break } $psObjBody | Add-Member -Name "device_id" -Value @($device.id) -MemberType NoteProperty } $jsonBody = $psObjBody | ConvertTo-Json $Parameters = @{ UriPreOrgKey = "/appservices/v6/orgs/" UriPostOrgKey = "/device_actions" Method = "Post" Body = $jsonBody } if ($PSCmdlet.ShouldProcess($device.name, "change Policy ID to $PolicyID")) { $result = Invoke-CbMethod @Parameters $result } } |