Crowdstrike-falconpy

Added features and functionality
+ Added: Nine new operations added to the __FirewallManagement__ Service Class. (`get_network_location_details`, `update_network_locations_metadata`, `update_network_locations_precedence`, `get_network_locations`, `create_network_locations`, `update_network_locations`, `upsert_network_locations`, `delete_network_locations`, `query_network_locations`)
- `firewall_management.py`
- `_endpoint/_firewall_management.py`
> Adds two new payload handlers.
- `_payload/_firewall.py`
> Unit testing expanded to complete code coverage.
- `tests/test_firewall_management.py`

+ Added: Five new operations added to the Flight Control (__MSSP__) Service Class. (`getChildrenV2`, `getCIDGroupMembersByV2`, `getCIDGroupByIdV2`, `getUserGroupMembersByIDV2`, `getUserGroupsByIDV2`)
- `mssp.py`
- `_endpoint/_mssp.py`
> Unit testing expanded to complete code coverage.
- `tests/test_mssp.py`

+ Added: One new operation added to the __Hosts__ Service Class. (`entities_perform_action`)
- `hosts.py`
- `_endpoint/_hosts.py`
> One new payload handler was added.
- `_payload/_generic.py`
> Unit testing expanded to complete code coverage.
- `tests/test_hosts.py`

+ Added: One new operation added to the __InstallationTokens__ Service Class. (`customer_settings_update`)
- `installation_tokens.py`
- `_endpoint/_installation_tokens.py`
> One new payload handler was added.
- `_payload/_generic.py`
> Unit testing expanded to complete code coverage.
- `tests/test_installation_tokens.py`

+ Added: Two new operations added to the __Intel__ Service Class. (`GetVulnerabilities`, `QueryVulnerabilities`)
- `intel.py`
- `_endpoint/_intel.py`
> Unit testing expanded to complete code coverage.
- `tests/test_intel.py`

+ Added: New __ODS__ Service Class (On Demand Scan) with fifteen new operations. (`aggregate_scans`, `aggregate_scheduled_scans`, `get_malicious_files_by_id`, `cancel_scans`, `get_scan_host_metadata_by_ids`, `scans_report`, `get_scans_by_scan_ids`, `scans_report`, `get_scheduled_scans_by_scan_ids`, `schedule_scan`, `delete_scheduled_scans`, `query_malicious_files`, `query_scan_host_metadata`, `query_scans`, `query_scheduled_scans`)
- `__init__.py`
- `ods.py`
- `_endpoint/__init__.py`
- `_endpoint/_ods.py`
- `_endpoint/deprecated/__init__.py`
- `_endpoint/deprecated/_ods.py`
> Two new payload handlers were added.
- `_payload/_ods.py`
> New unit testing implemented to confirm functionality and complete code coverage.
- `tests/test_ods.py`

+ Added: Seven new operations added to the __Recon__ Service Class. (`AggregateNotificationsExposedDataRecordsV1`, `GetFileContentForExportJobsV1`, `GetExportJobsV1`, `CreateExportJobsV1`, `DeleteExportJobsV1`, `GetNotificationsExposedDataRecordsV1`, `QueryNotificationsExposedDataRecordsV1`)
- `recon.py`
- `_endpoint/_recon.py`
> One new payload handler was added.
- `_payload/_recon.py`
> Unit testing expanded to complete code coverage.
- `tests/test_recon.py`

+ Added: Seven new operations added to the __SampleUploads__ Service Class. (`ArchiveListV1`, `ArchiveGetV1`, `ArchiveDeleteV1`, `ArchiveUploadV2`, `ExtractionListV1`, `ExtractionGetV1`, `ExtractionCreateV1`)
- `sample_uploads.py`
- `_endpoint/_sample_uploads.py`
> One new payload handler was added.
- `_payload/_sample_uploads.py`
> Unit testing expanded to complete code coverage.
- `tests/test_sample_uploads.py`
- `tests/testfile.zip`

Other
+ Changed: Due to updates in the latest Ubuntu version used in GitHub actions, unit testing for Python 3.6 has been split off to a stand alone workflow.
+ Added: Python 3.11 support.
- `setup.py`
---

Issues resolved
+ Fixed: Invalid `body` payload when leveraging the Uber Class to call the `RTR_DeleteSession` operation. Closes 839.
- `_uber_default_preference.py`

---

Added features and functionality
+ Added: New __TailoredIntelligence__ Service Class.
- `__init__.py`
- `tailored_intelligence.py`
- `_endpoint/__init__.py`
- `_endpoint/_tailored_intelligence.py`
- `tests/test_tailored_intelligence.py`
> Unit testing expanded to complete code coverage.
+ Added: `GetD4CAwsAccount`, `CreateD4CAwsAccount`, `DeleteD4CAwsAccount`, `GetD4CAwsConsoleSetupURLs`, `GetD4CAWSAccountScriptsAttachment`, and `GetHorizonD4CScripts` operations to the __D4CRegistration__ Service Class.
- `d4c_registration.py`
- `_endpoint/_d4c_registration.py`
- `_payload/__init__.py`
- `_payload/_d4c_registration.py`
> Adds one new payload handler.
- `tests/test_d4c_registration.py`
> Unit testing expanded to complete code coverage.
+ Added: `update_policy_container_v1`, `create_rule_group_validation`, `update_rule_group_validation`, and `validate_filepath_pattern` operations to the __FirewallManagement__ Service Class.
- `firewall_management.py`
- `_endpoint/_firewall_management.py`
> The legacy operation `update_policy_container` now points to the updated endpoint `/fwmgr/entities/policies/v2`.
- `_payload/__init__.py`
- `_payload/_firewall.py`
> Adds two new payload handlers.
- `tests/test_firewall_management.py`
> Unit testing expanded to complete code coverage.
+ Added: `indicator_aggregate_v1`, `action_get_v1`, `GetIndicatorsReport`, `action_query_v1`, `ioc_type_query_v1`, `platform_query_v1`, and `severity_query_v1` operations to the __IOC__ Service Class.
- `ioc.py`
- `_endpoint/_ioc.py`
- `_payload/__init__.py`
- `_payload/_ioc.py`
> Adds one new payload handler.
- `tests/test_ioc.py`
> Unit testing expanded to complete code coverage.
+ Added: _from_parent_ parameter to the `indicator_delete_v1` operation within the __IOC__ Service Class.
- `ioc.py`
- `_endpoint/_ioc.py`
+ Added: _timeout_ and _timeout_duration_ parameters to the `RTR_InitSession` operation within the __RealTimeResponse__ Service Class.
- `real_time_response.py`
- `_endpoint/_real_time_response.py`
+ Added: _host_timeout_duration_ parameter to the `BatchAdminCmd` operation within the __RealTimeResponseAdmin__ Service Class.
- `real_time_response_admin.py`
- `_endpoint/_real_time_response_admin.py`
+ Added: Maximum and minimum limits for the _limit_ parameter used by the `QueryNotificationsV1` operation within the __Recon__ Service Class.
- `_endpoint/_recon.py`
+ Added: New `ReadImageVulnerabilities` operation to the __FalconContainer__ Service Class.
- `falcon_container.py`
- `_endpoint/_falcon_container.py`
- `_payload/__init__.py`
- `_payload/_container.py`
> Adds one new payload handler.
- `tests/test_falcon_container.py`
> Unit testing expanded to complete code coverage.

Other
+ Updated: Updated the description, changed datatype from `string` to `int` and added maximum / minimum limits for the _offset_ parameter used by the `QueryActionsV1` operation within the __Recon__ Service Class.
- `_endpoint/_recon.py`
+ Removed: `X-CS-USERNAME` parameter from all operations within the __IOC__ Service Class.
- `_endpoint/_ioc.py`
+ Updated: _query_rule_groups_full_ and _query_rule_groupsMixin0_ operations - Removed `description` as an available field from enum. Updated operation description.
- `_endpoint/_custom_ioa.py`
+ Updated: Changed _collectionFormat_ value from `csv` to `multi` for multiple operations within the `_endpoint` module.
- `_endpoint/_ioa_exclusions.py` (_getIOAExclusionsV1_, _deleteIOAExclusionsV1_)
- `_endpoint/_ml_exclusions.py` (_getMLExclusionsV1_, _deleteMLExclusionsV1_)
- `_endpoint/_sensor_visibility_exclusions.py` (_getSensorVisibilityExclusionsV1_, _deleteSensorVisibilityExclusionsV1_)
+ Updated: Removed _maxLength_ and _minLength_ values for multiple operations within the `_endpoint` module.
- `_endpoint/_device_control_policies.py` (_getDeviceControlPolicies_, _deleteDeviceControlPolicies_)
- `_endpoint/_firewall_policies.py` (_getFirewallPolicies_, _deleteFirewallPolicies_)
- `_endpoint/_host_group.py` (_getHostGroups_, _deleteHostGroups_)
- `_endpoint/_prevention_policies.py` (_getPreventionPolicies_, _deletePreventionPolicies_)
- `_endpoint/_response_policies.py` (_getRTResponsePolicies_, _deleteRTResponsePolicies_)
- `_endpoint/_sensor_update_policies.py` (_getSensorUpdatePolicies_, _deleteSensorUpdatePolicies_, _getSensorUpdatePoliciesV2_)
+ Updated: GovCloud headers are now returned when providing GovCloud credentials to a commercial cloud region. Deprecated fallback handler within `autodiscover_region` method.
- `_util.py`
> This code will be retained for now. As of this version, GovCloud region autodiscovery is __not__ supported.
+ Updated: Pinned `setuptools` version to 65.5.1 ([SNYK-PYTHON-SETUPTOOLS-3113904](https://security.snyk.io/vuln/SNYK-PYTHON-SETUPTOOLS-3113904)).
- `requirements-dev.txt`

---

Added features and functionality
+ Added: Specify `N-1` and `N-2` within the Sensor Download sample. Closes 793.
- `samples/sensor_download/download_sensor.py`

Issues resolved
+ Fixed: Invalid `body` payload passed when leveraging the Uber Class to call the `RTR_GetExtractedFileContents` operation. Closes 788.
- `_uber_default_preference.py`

+ Fixed: Invalid data type comparison in RTR dump memory sample.
- `samples/rtr/pid-dump/rtr_dump_memory.py`

+ Fixed: Invalid arguments provided to `execute_admin_command` method within RTR dump memory sample. Closes 789.
- `samples/rtr/pid-dump/rtr_dump_memory.py`


---

Added features and functionality
+ Added: Easy Object Authentication syntax. You no longer need to specify the `auth_object` attribute of the Service Class you are using to authenticate to subsequent Service Classes. Legacy Object Authentication is still (and will always be) fully supported.
python
import os
from falconpy import Hosts
from falconpy import HostGroup

Old Syntax
hosts = Hosts(client_id=os.getenv("FALCON_CLIENT_ID"),
client_secret=os.getenv("FALCON_CLIENT_SECRET")
)
hostgroups = HostGroup(auth_object=hosts.auth_object)

New Syntax
hosts = Hosts(client_id=os.getenv("FALCON_CLIENT_ID"),
client_secret=os.getenv("FALCON_CLIENT_SECRET")
)
hostgroups = HostGroup(auth_object=hosts)

- `_service_class.py`
- `tests/test_authentications.py`

Other
+ Changed: Updated development package module name to be `falconpydev` to prevent confusion with the production package module name.
- `dev_setup.py`

---

Added features and functionality
+ Added: Added alias for `post_device_details_v2` to Hosts Service Class. Closes 773.
- `hosts.py`
- `tests/manual/test_get_device_details.py`

Issues resolved
+ Fixed: Typo in docstring for `perform_incident_action` method. Closes 776.
- `incidents.py`
+ Fixed: Added `host_timeout_duration` documentation to docstrings within operations in the Real Time Response Service Class.
- `real_time_response.py`

Other
+ Updated: Adjusted unit testing to cover new API returns.
- `tests/falcon_container.py`
- `tests/kubernetes_protection.py`

---