Crowdstrike-falconpy

Issues resolved
+ Fixed: https://github.com/CrowdStrike/falconpy/issues/181 by adding the parameters to the create and update ioc functions.

---

Added features and functionality
+ Added: IOC API Service Class (`ioc.py`)
* indicator_combined_v1
* indicator_get_v1
* indicator_create_v1
* indicator_delete_v1
* indicator_update_v1
* indicator_search_v1
+ Added: Kubernetes Protection API Service Class (`kubernetes_protection.py`)
* GetAWSAccountsMixin0
* CreateAWSAccount
* DeleteAWSAccountsMixin0
* UpdateAWSAccount
* GetLocations
* GetHelmValuesYaml
* RegenerateAPIKey
* GetClusters
* TriggerScan
+ Added: Recon API Service Class (`recon.py`)
* AggregateNotificationsV1
* PreviewRuleV1
* GetActionsV1
* CreateActionsV1
* DeleteActionV1
* UpdateActionV1
* GetNotificationsDetailedTranslatedV1
* GetNotificationsDetailedV1
* GetNotificationsTranslatedV1
* GetNotificationsV1
* DeleteNotificationsV1
* UpdateNotificationsV1
* GetRulesV1
* CreateRulesV1
* DeleteRulesV1
* UpdateRulesV1
* QueryActionsV1
* QueryActionsV1
* QueryNotificationsV1
* QueryRulesV1
+ Added: Response Policies API Service Class (`response_policies.py`)
* queryCombinedRTResponsePolicyMembers
* queryCombinedRTResponsePolicies
* performRTResponsePoliciesAction
* setRTResponsePoliciesPrecedence
* getRTResponsePolicies
* createRTResponsePolicies
* deleteRTResponsePolicies
* updateRTResponsePolicies
* queryRTResponsePolicyMembers
* queryRTResponsePolicies
+ Updated: CSPM Registration API Service Class (`cspm_registration.py`)
* Refactored to utilized updated pattern for Service Classes
* Added: PatchCSPMAwsAccount function
* Added: UpdateCSPMAzureTenantDefaultSubscriptionID function
* Added: GetIOAEvents function
* Added: GetIOAUsers function
* Updated: Unit tests
+ Updated: Discover for Cloud Registration API Service Class (`d4c_registration.py`)
* Refactored to remove unnecessary private method call / import of the sys library
+ Updated: IOA Exclusions API Service Class (`ioa_exclusions.py`)
* Refactored to remove unnecessary private method call / import of the sys library
+ Updated: IOCs API Service Class (`iocs.py`)
* Refactored to utilized updated pattern for Service Classes
* Updated: Deprecated multiple endpoints as part of the release of the new IOC Service Class (`_endpoint/_iocs.py`)
+ Updated: Falcon Complete Dashboard API Service Class (`falcon_complete_dashboard.py`)
* Refactored to remove unnecessary private method call / import of the sys library
+ Updated: Falcon Flight Control API Service Class (`mssp.py`)
* Refactored to remove unnecessary private method call / import of the sys library
+ Updated: Installation Tokens API Service Class (`installation_tokens.py`)
* Refactored to remove unnecessary private method call / import of the sys library
+ Updated: Malquery API Service Class (`malquery.py`)
* Refactored to remove unnecessary private method call / import of the sys library
+ Updated: ML Exclusions API Service Class (`ml_exclusions.py`)
* Refactored to remove unnecessary private method call / import of the sys library
+ Updated: Overwatch Dashboard API Service Class (`overwatch_dashboard.py`)
* Refactored to remove unnecessary private method call / import of the sys library
+ Updated: Prevention Policies API Service Class (`prevention_policy.py`)
* Refactored to utilized updated pattern for Service Classes
* Updated: Added _add-rule-group_ and _remove-rule-group_ actions to __action_name__ parameter for performPreventionPoliciesAction function. (`_endpoint/_prevention_policy.py`)
+ Updated: Sensor Visibility Exclusions API Service Class (`sensor_visibility_exclusions.py`)
* Refactored to remove unnecessary private method call / import of the sys library

Other
+ Added: CSPM Registration API sample - CSPM registration policy export (mccbryan3)

---

Added features and functionality
+ Added: Timeout support - Float / tuple that is passed to the requests library when performing
requests to the API. Can specify timeouts for connect, read and global.

Issues resolved
+ Fixed: Service Class proxy functionality support

Other
+ Timeout functionality unit tests (`test_timeout.py`)

---

Added features and functionality
+ Added: Proxy support - dictionary of proxies that are passed to the requests library when
performing requests to the API.
+ Related to discussion post [154](https://github.com/CrowdStrike/falconpy/discussions/154)

---

Issues resolved
+ Fixed: Parsing issue with __ids__ argument within MSSP.getChildren (Flight Control Service Class)
* Resolved by migrating `mssp.py` source to the new pattern being tested for Service Classes.
* Closes [144](https://github.com/CrowdStrike/falconpy/issues/144)

---

Added features and functionality

> New Service Class pattern - Query String parameters can now be passed as function arguments.

> This functionality is currently only available in the following new Service Classes while
> regression testing is underway.

+ Added: D4C Registration API Service Class (`d4c_registration.py`)
* GetCSPMAzureAccount
* CreateCSPMAzureAccount
* UpdateCSPMAzureAccountClientID
* GetCSPMAzureUserScriptsAttachment
* GetCSPMAzureUserScripts
* GetCSPMCGPAccount
* GetCSPMGCPAccount (redirects to GetCSPMCGPAccount)
* CreateCSPMGCPAccount
* GetCSPMGCPUserScriptsAttachment
* GetCSPMGCPUserScripts
- Added unit tests (`test_d4c_registration.py`)
+ Added: Installation Tokens API Service Class (`installation_tokens.py`)
* audit_events_read
* customer_settings_read
* tokens_read
* tokens_create
* tokens_delete
* tokens_update
* audit_events_query
* tokens_query
- Added unit tests (`test_installation_tokens.py`)
+ Added: IOA Exclusions API Service Class (`ioa_exclusions.py`)
* getIOAExclusionsV1
* createIOAExclusionsV1
* deleteIOAExclusionsV1
* updateIOAExclusionsV1
* queryIOAExclusionsV1
- Added unit tests (`test_ioa_exclusions.py`)
+ Added: Falcon Complete Dashboard API Service Class (`falcon_complete_dashboard.py`)
* AggregateAllowList
* AggregateBlockList
* AggregateDetections
* AggregateDeviceCountCollection
* AggregateEscalations
* AggregateFCIncidents
* AggregateRemediations
* QueryAllowListFilter
* QueryBlockListFilter
* QueryDetectionIdsByFilter
* GetDeviceCountCollectionQueriesByFilter
* QueryEscalationsFilter
* QueryIncidentIdsByFilter
* QueryRemediationsFilter
- Added unit tests (`test_falcon_complete_dashboard.py`)
+ Added: MalQuery API Service Class (`malquery.py`)
+ GetMalQueryQuotasV1
+ PostMalQueryFuzzySearchV1
+ GetMalQueryDownloadV1
+ GetMalQueryMetadataV1
+ GetMalQueryRequestV1
+ GetMalQueryEntitiesSamplesFetchV1
+ PostMalQueryEntitiesSamplesMultidownloadV1
+ PostMalQueryExactSearchV1
+ PostMalQueryHuntV1
* Added unit tests (`test_malquery.py`)
+ Added: ML Exclusions API Service Class (`ml_exclusions.py`)
* getMLExclusionsV1
* createMLExclusionsV1
* deleteMLExclusionsV1
* updateMLExclusionsV1
* queryMLExclusionsV1
- Added unit tests (`test_ml_exclusions.py`)
+ Added: Overwatch Dashboard API Service Class (`overwatch_dashboard.py`)
* AggregatesDetectionsGlobalCounts
* AggregatesEventsCollections
* AggregatesEvents
* AggregatesIncidentsGlobalCounts
* AggregatesOWEventsGlobalCounts
- Added unit tests (`test_overwatch_dashboard.py`)
+ Added: Sensor Visibility Exclusions API Service Class (`sensor_visibility_exclusions.py`)
* getSensorVisibilityExclusionsV1
* createSVExclusionsV1
* deleteSensorVisibilityExclusionsV1
* updateSensorVisibilityExclusionsV1
* querySensorVisibilityExclusionsV1
- Added unit tests (`test_sensor_visibility_exclusions.py`)

Other
+ Added: args_to_params function (`_util.py`) - Allows developers to specify parameter dictionary elements as function arguments
Example
python
import json
from falconpy.ml_exclusions import ML_Exclusions as FalconML
falcon = FalconML(creds={"client_id": client_ID, "client_secret": client_secret})
print(json.dumps(falcon.queryMLExclusionsV1(limit=10, offset=20, sort="value.asc"), indent=4))

- Unrecognized parameter values are discarded
- Initial testing in a limited number of Service Classes

---

Version 0.4.6-spotlight-remediations-patch-1
Added features and functionality
+ Added: Missing method to Spotlight_Vulnerabilities Service Class (`spotlight_vulnerabilities.py`)
* getRemediations
- Added unit test to existing test series (`test_spotlight_vulnerabilities.py`)

---