Functions/EventSecurity/Set-PASPTARemediation.ps1

Function Set-PASPTARemediation {
    <#
.SYNOPSIS
Updates automatic remediation settings in PTA

.DESCRIPTION
Updates automatic remediation settings configured in PTA

.PARAMETER changePassword_SuspectedCredentialsTheft
Indicate if Change Password on Suspected Credential Theft the command is active

.PARAMETER changePassword_OverPassTheHash
Indicate if the Change Password on Over Pass The Hash command is active

.PARAMETER reconcilePassword_SuspectedPasswordChange
Indicate if the Reconcile Password on Suspected Password Change command is active

.PARAMETER pendAccount_UnmanagedPrivilegedAccount
Indicate if the Add Unmanaged Accounts to Pending Accounts command is active

.EXAMPLE
Set-PASPTARemediation -changePassword_SuspectedCredentialsTheft $true

Enables the "Change password on Suspected Credentials Theft" rule.
.EXAMPLE
Set-PASPTARemediation -reconcilePassword_SuspectedPasswordChange $false

Disables the "reconcile on suspected password change" rule.

.NOTES
Minimum Version CyberArk 10.4

.LINK
https://pspas.pspete.dev/commands/Set-PASPTARemediation
#>

    [CmdletBinding(SupportsShouldProcess)]
    param(
        [parameter(
            Mandatory = $false,
            ValueFromPipelinebyPropertyName = $true
        )]
        [boolean]$changePassword_SuspectedCredentialsTheft,

        [parameter(
            Mandatory = $false,
            ValueFromPipelinebyPropertyName = $true
        )]
        [boolean]$changePassword_OverPassTheHash,

        [parameter(
            Mandatory = $false,
            ValueFromPipelinebyPropertyName = $true
        )]
        [boolean]$reconcilePassword_SuspectedPasswordChange,

        [parameter(
            Mandatory = $false,
            ValueFromPipelinebyPropertyName = $true
        )]
        [boolean]$pendAccount_UnmanagedPrivilegedAccount

    )

    BEGIN {

        Assert-VersionRequirement -RequiredVersion 10.4

    }#begin

    PROCESS {

        #Get all parameters that will be sent in the request
        $boundParameters = $PSBoundParameters | Get-PASParameter

        #Create URL for Request
        $URI = "$Script:BaseURI/API/pta/API/Settings/AutomaticRemediations/"


        #Create body of request
        $body = $boundParameters | ConvertTo-Json

        if ($PSCmdlet.ShouldProcess("PTA", "Update Automatic Remediation Config")) {

            #send request to PAS web service
            $result = Invoke-PASRestMethod -Uri $URI -Method PATCH -Body $Body -WebSession $Script:WebSession

            If ($null -ne $result) {

                #Return Results
                $result.automaticRemediation | Add-ObjectDetail -typename "psPAS.CyberArk.Vault.PTA.Remediation"

            }

        }

    }#process

    END { }#end

}