crimson-falcon 0.1.2
Sign up to get free protection for your applications and to get access to all the features.
- checksums.yaml +7 -0
- data/LICENSE +24 -0
- data/README.md +4409 -0
- data/Rakefile +10 -0
- data/crimson-falcon.gemspec +60 -0
- data/lib/crimson-falcon/api/alerts_api.rb +320 -0
- data/lib/crimson-falcon/api/cloud_connect_aws_api.rb +628 -0
- data/lib/crimson-falcon/api/cspm_registration_api.rb +1848 -0
- data/lib/crimson-falcon/api/custom_ioa_api.rb +1292 -0
- data/lib/crimson-falcon/api/d4c_registration_api.rb +1233 -0
- data/lib/crimson-falcon/api/detects_api.rb +320 -0
- data/lib/crimson-falcon/api/device_control_policies_api.rb +895 -0
- data/lib/crimson-falcon/api/discover_api.rb +936 -0
- data/lib/crimson-falcon/api/discover_iot_api.rb +185 -0
- data/lib/crimson-falcon/api/event_schema_api.rb +224 -0
- data/lib/crimson-falcon/api/event_streams_api.rb +184 -0
- data/lib/crimson-falcon/api/falcon_complete_dashboard_api.rb +977 -0
- data/lib/crimson-falcon/api/falcon_container_api.rb +99 -0
- data/lib/crimson-falcon/api/falcon_container_cli_api.rb +110 -0
- data/lib/crimson-falcon/api/falcon_container_image_api.rb +371 -0
- data/lib/crimson-falcon/api/falconx_sandbox_api.rb +1037 -0
- data/lib/crimson-falcon/api/field_schema_api.rb +169 -0
- data/lib/crimson-falcon/api/filevantage_api.rb +181 -0
- data/lib/crimson-falcon/api/firewall_management_api.rb +2264 -0
- data/lib/crimson-falcon/api/firewall_policies_api.rb +785 -0
- data/lib/crimson-falcon/api/host_group_api.rb +711 -0
- data/lib/crimson-falcon/api/hosts_api.rb +860 -0
- data/lib/crimson-falcon/api/identity_protection_api.rb +106 -0
- data/lib/crimson-falcon/api/incidents_api.rb +461 -0
- data/lib/crimson-falcon/api/installation_tokens_api.rb +550 -0
- data/lib/crimson-falcon/api/installation_tokens_settings_api.rb +110 -0
- data/lib/crimson-falcon/api/intel_api.rb +1365 -0
- data/lib/crimson-falcon/api/ioa_exclusions_api.rb +374 -0
- data/lib/crimson-falcon/api/ioc_api.rb +911 -0
- data/lib/crimson-falcon/api/iocs_api.rb +332 -0
- data/lib/crimson-falcon/api/kubernetes_protection_api.rb +1395 -0
- data/lib/crimson-falcon/api/malquery_api.rb +611 -0
- data/lib/crimson-falcon/api/message_center_api.rb +734 -0
- data/lib/crimson-falcon/api/ml_exclusions_api.rb +374 -0
- data/lib/crimson-falcon/api/mobile_enrollment_api.rb +120 -0
- data/lib/crimson-falcon/api/mssp_api.rb +1954 -0
- data/lib/crimson-falcon/api/oauth2_api.rb +191 -0
- data/lib/crimson-falcon/api/ods_api.rb +1037 -0
- data/lib/crimson-falcon/api/overwatch_dashboard_api.rb +362 -0
- data/lib/crimson-falcon/api/prevention_policies_api.rb +774 -0
- data/lib/crimson-falcon/api/public_assessments_api.rb +126 -0
- data/lib/crimson-falcon/api/quarantine_api.rb +440 -0
- data/lib/crimson-falcon/api/quick_scan_api.rb +305 -0
- data/lib/crimson-falcon/api/real_time_response_admin_api.rb +1029 -0
- data/lib/crimson-falcon/api/real_time_response_api.rb +1622 -0
- data/lib/crimson-falcon/api/recon_api.rb +1759 -0
- data/lib/crimson-falcon/api/report_executions_api.rb +304 -0
- data/lib/crimson-falcon/api/response_policies_api.rb +774 -0
- data/lib/crimson-falcon/api/sample_uploads_api.rb +810 -0
- data/lib/crimson-falcon/api/scheduled_reports_api.rb +242 -0
- data/lib/crimson-falcon/api/sensor_download_api.rb +357 -0
- data/lib/crimson-falcon/api/sensor_update_policies_api.rb +1344 -0
- data/lib/crimson-falcon/api/sensor_visibility_exclusions_api.rb +374 -0
- data/lib/crimson-falcon/api/spotlight_evaluation_logic_api.rb +248 -0
- data/lib/crimson-falcon/api/spotlight_vulnerabilities_api.rb +329 -0
- data/lib/crimson-falcon/api/tailored_intelligence_api.rb +378 -0
- data/lib/crimson-falcon/api/user_management_api.rb +1510 -0
- data/lib/crimson-falcon/api/zero_trust_assessment_api.rb +232 -0
- data/lib/crimson-falcon/api_client.rb +546 -0
- data/lib/crimson-falcon/api_error.rb +80 -0
- data/lib/crimson-falcon/cloud.rb +64 -0
- data/lib/crimson-falcon/configuration.rb +191 -0
- data/lib/crimson-falcon/models/api_action_resp_v1.rb +276 -0
- data/lib/crimson-falcon/models/api_action_v1.rb +276 -0
- data/lib/crimson-falcon/models/api_aggregates_response.rb +271 -0
- data/lib/crimson-falcon/models/api_audit_event_details_resource_v1.rb +314 -0
- data/lib/crimson-falcon/models/api_audit_event_details_response_v1.rb +276 -0
- data/lib/crimson-falcon/models/api_bulk_update_req_v1.rb +353 -0
- data/lib/crimson-falcon/models/api_cred_payload.rb +258 -0
- data/lib/crimson-falcon/models/api_customer_settings_patch_request_v1.rb +251 -0
- data/lib/crimson-falcon/models/api_customer_settings_resource_v1.rb +253 -0
- data/lib/crimson-falcon/models/api_customer_settings_response_v1.rb +276 -0
- data/lib/crimson-falcon/models/api_exposed_data_file_details_v1.rb +287 -0
- data/lib/crimson-falcon/models/api_exposed_data_record_financial_v1.rb +259 -0
- data/lib/crimson-falcon/models/api_exposed_data_record_location_v1.rb +284 -0
- data/lib/crimson-falcon/models/api_exposed_data_record_social_v1.rb +311 -0
- data/lib/crimson-falcon/models/api_image_lookup_request.rb +271 -0
- data/lib/crimson-falcon/models/api_indicator_create_req_v1.rb +358 -0
- data/lib/crimson-falcon/models/api_indicator_create_reqs_v1.rb +255 -0
- data/lib/crimson-falcon/models/api_indicator_query_resp_v1.rb +276 -0
- data/lib/crimson-falcon/models/api_indicator_resp_v1.rb +276 -0
- data/lib/crimson-falcon/models/api_indicator_update_req_v1.rb +344 -0
- data/lib/crimson-falcon/models/api_indicator_update_reqs_v1.rb +269 -0
- data/lib/crimson-falcon/models/api_indicator_v1.rb +434 -0
- data/lib/crimson-falcon/models/api_indicators_query_meta.rb +276 -0
- data/lib/crimson-falcon/models/api_indicators_query_paging.rb +276 -0
- data/lib/crimson-falcon/models/api_indicators_report_request.rb +267 -0
- data/lib/crimson-falcon/models/api_indicators_sorted_search.rb +272 -0
- data/lib/crimson-falcon/models/api_message_center_activity_response.rb +276 -0
- data/lib/crimson-falcon/models/api_message_center_attachment_upload_response.rb +276 -0
- data/lib/crimson-falcon/models/api_message_center_cases_response.rb +276 -0
- data/lib/crimson-falcon/models/api_metadata_req_v1.rb +239 -0
- data/lib/crimson-falcon/models/api_metadata_v1.rb +311 -0
- data/lib/crimson-falcon/models/api_notification_exposed_data_record_entities_response_v1.rb +276 -0
- data/lib/crimson-falcon/models/api_notification_exposed_data_record_v1.rb +632 -0
- data/lib/crimson-falcon/models/api_pattern_v1.rb +258 -0
- data/lib/crimson-falcon/models/api_patterns_response.rb +271 -0
- data/lib/crimson-falcon/models/api_platforms_response.rb +271 -0
- data/lib/crimson-falcon/models/api_post_enrollment_details.rb +260 -0
- data/lib/crimson-falcon/models/api_post_enrollment_details_response.rb +271 -0
- data/lib/crimson-falcon/models/api_rule_create_v1.rb +344 -0
- data/lib/crimson-falcon/models/api_rule_details_v1.rb +286 -0
- data/lib/crimson-falcon/models/api_rule_group_create_request_v1.rb +286 -0
- data/lib/crimson-falcon/models/api_rule_group_modify_request_v1.rb +314 -0
- data/lib/crimson-falcon/models/api_rule_group_v1.rb +458 -0
- data/lib/crimson-falcon/models/api_rule_groups_response.rb +271 -0
- data/lib/crimson-falcon/models/api_rule_type_v1.rb +346 -0
- data/lib/crimson-falcon/models/api_rule_types_response.rb +271 -0
- data/lib/crimson-falcon/models/api_rule_update_v1.rb +344 -0
- data/lib/crimson-falcon/models/api_rule_updates_request_v1.rb +288 -0
- data/lib/crimson-falcon/models/api_rule_v1.rb +556 -0
- data/lib/crimson-falcon/models/api_rules_get_request_v1.rb +246 -0
- data/lib/crimson-falcon/models/api_rules_response.rb +271 -0
- data/lib/crimson-falcon/models/api_token_create_request_v1.rb +260 -0
- data/lib/crimson-falcon/models/api_token_details_resource_v1.rb +356 -0
- data/lib/crimson-falcon/models/api_token_details_response_v1.rb +276 -0
- data/lib/crimson-falcon/models/api_token_patch_request_v1.rb +260 -0
- data/lib/crimson-falcon/models/api_user_metadata_response.rb +276 -0
- data/lib/crimson-falcon/models/api_user_role_ids_response.rb +276 -0
- data/lib/crimson-falcon/models/api_user_role_response.rb +276 -0
- data/lib/crimson-falcon/models/api_validation_request_field_v1.rb +288 -0
- data/lib/crimson-falcon/models/api_validation_request_v1.rb +246 -0
- data/lib/crimson-falcon/models/api_validation_response_v1.rb +271 -0
- data/lib/crimson-falcon/models/base_policy_members_resp_v1.rb +278 -0
- data/lib/crimson-falcon/models/base_set_policy_precedence_req_v1.rb +297 -0
- data/lib/crimson-falcon/models/binservapi_msa_put_file_response.rb +271 -0
- data/lib/crimson-falcon/models/client_archive_create_response_v1.rb +276 -0
- data/lib/crimson-falcon/models/client_archive_list_files_response_v1.rb +276 -0
- data/lib/crimson-falcon/models/client_archive_with_files_v1.rb +329 -0
- data/lib/crimson-falcon/models/client_extraction_create_request_v1.rb +259 -0
- data/lib/crimson-falcon/models/client_extraction_create_response_v1.rb +276 -0
- data/lib/crimson-falcon/models/client_extraction_file_parameters_v1.rb +257 -0
- data/lib/crimson-falcon/models/client_extraction_file_result_v1.rb +290 -0
- data/lib/crimson-falcon/models/client_extraction_list_files_response_v1.rb +276 -0
- data/lib/crimson-falcon/models/client_extraction_with_files_v1.rb +287 -0
- data/lib/crimson-falcon/models/client_query_samples_request.rb +241 -0
- data/lib/crimson-falcon/models/client_sample_metadata_response_v2.rb +276 -0
- data/lib/crimson-falcon/models/client_sample_metadata_v2.rb +253 -0
- data/lib/crimson-falcon/models/common_cid_audit_result.rb +288 -0
- data/lib/crimson-falcon/models/common_os_audit.rb +288 -0
- data/lib/crimson-falcon/models/core_entities_response.rb +274 -0
- data/lib/crimson-falcon/models/detection_aggregate_indicator.rb +297 -0
- data/lib/crimson-falcon/models/detection_aggregate_threat_intel.rb +239 -0
- data/lib/crimson-falcon/models/detection_enrichment.rb +250 -0
- data/lib/crimson-falcon/models/detection_enrichment_host.rb +293 -0
- data/lib/crimson-falcon/models/detection_host_network.rb +257 -0
- data/lib/crimson-falcon/models/detection_inventory_enrichment.rb +261 -0
- data/lib/crimson-falcon/models/detects_alert.rb +563 -0
- data/lib/crimson-falcon/models/detects_behavior.rb +686 -0
- data/lib/crimson-falcon/models/detects_device_detail_indexed.rb +664 -0
- data/lib/crimson-falcon/models/detects_host_info.rb +255 -0
- data/lib/crimson-falcon/models/detects_parent_details.rb +286 -0
- data/lib/crimson-falcon/models/detects_quarantined_file.rb +266 -0
- data/lib/crimson-falcon/models/detectsapi_patch_entities_alerts_v2_request.rb +257 -0
- data/lib/crimson-falcon/models/detectsapi_post_entities_alerts_v1_request.rb +246 -0
- data/lib/crimson-falcon/models/detectsapi_post_entities_alerts_v1_response.rb +271 -0
- data/lib/crimson-falcon/models/device_control_create_policies_v1.rb +248 -0
- data/lib/crimson-falcon/models/device_control_create_policy_req_v1.rb +323 -0
- data/lib/crimson-falcon/models/device_control_exception_req_v1.rb +342 -0
- data/lib/crimson-falcon/models/device_control_exception_resp_v1.rb +371 -0
- data/lib/crimson-falcon/models/device_control_policy_v1.rb +445 -0
- data/lib/crimson-falcon/models/device_control_req_update_default_dc_policy_v1.rb +239 -0
- data/lib/crimson-falcon/models/device_control_resp_v1.rb +277 -0
- data/lib/crimson-falcon/models/device_control_resp_v2.rb +277 -0
- data/lib/crimson-falcon/models/device_control_settings_req_v1.rb +359 -0
- data/lib/crimson-falcon/models/device_control_settings_resp_v1.rb +347 -0
- data/lib/crimson-falcon/models/device_control_update_policies_req_v1.rb +248 -0
- data/lib/crimson-falcon/models/device_control_update_policy_req_v1.rb +280 -0
- data/lib/crimson-falcon/models/device_control_usb_class_exceptions_req_v1.rb +311 -0
- data/lib/crimson-falcon/models/device_control_usb_class_exceptions_response.rb +311 -0
- data/lib/crimson-falcon/models/device_control_usb_custom_notification.rb +260 -0
- data/lib/crimson-falcon/models/device_control_usb_custom_notifications.rb +248 -0
- data/lib/crimson-falcon/models/device_device.rb +1028 -0
- data/lib/crimson-falcon/models/device_device_meta.rb +248 -0
- data/lib/crimson-falcon/models/device_device_policy.rb +332 -0
- data/lib/crimson-falcon/models/device_managed_app.rb +244 -0
- data/lib/crimson-falcon/models/device_managed_apps.rb +284 -0
- data/lib/crimson-falcon/models/device_mapped_device_policies.rb +401 -0
- data/lib/crimson-falcon/models/deviceapi_device_details_response_swagger.rb +276 -0
- data/lib/crimson-falcon/models/deviceapi_device_paging.rb +276 -0
- data/lib/crimson-falcon/models/deviceapi_device_response.rb +276 -0
- data/lib/crimson-falcon/models/deviceapi_device_swagger.rb +1001 -0
- data/lib/crimson-falcon/models/deviceapi_group_meta.rb +248 -0
- data/lib/crimson-falcon/models/deviceapi_group_response_v1.rb +374 -0
- data/lib/crimson-falcon/models/deviceapi_groups_response_v1.rb +276 -0
- data/lib/crimson-falcon/models/deviceapi_login_detail_v1.rb +274 -0
- data/lib/crimson-falcon/models/deviceapi_login_history_response_v1.rb +276 -0
- data/lib/crimson-falcon/models/deviceapi_login_info_v1.rb +248 -0
- data/lib/crimson-falcon/models/deviceapi_network_address_history_response_v1.rb +276 -0
- data/lib/crimson-falcon/models/deviceapi_network_address_history_v1.rb +274 -0
- data/lib/crimson-falcon/models/deviceapi_network_address_v1.rb +257 -0
- data/lib/crimson-falcon/models/deviceapi_request_meta.rb +276 -0
- data/lib/crimson-falcon/models/deviceapi_update_device_details_response_v1.rb +276 -0
- data/lib/crimson-falcon/models/deviceapi_update_device_tags_request_v1.rb +276 -0
- data/lib/crimson-falcon/models/deviceapi_update_device_tags_swagger_v1.rb +271 -0
- data/lib/crimson-falcon/models/domain_access_token_response_v1.rb +293 -0
- data/lib/crimson-falcon/models/domain_account_access_result.rb +267 -0
- data/lib/crimson-falcon/models/domain_action_entities_response_v1.rb +276 -0
- data/lib/crimson-falcon/models/domain_action_parameter.rb +295 -0
- data/lib/crimson-falcon/models/domain_action_user_roles_request.rb +268 -0
- data/lib/crimson-falcon/models/domain_action_v1.rb +412 -0
- data/lib/crimson-falcon/models/domain_activity_creation_request.rb +286 -0
- data/lib/crimson-falcon/models/domain_actor_document.rb +629 -0
- data/lib/crimson-falcon/models/domain_actors_response.rb +276 -0
- data/lib/crimson-falcon/models/domain_aggregates_response.rb +276 -0
- data/lib/crimson-falcon/models/domain_api_combined_findings_response_v1.rb +271 -0
- data/lib/crimson-falcon/models/domain_api_detection_document.rb +525 -0
- data/lib/crimson-falcon/models/domain_api_error.rb +269 -0
- data/lib/crimson-falcon/models/domain_api_evaluation_logic_comparisons_v1.rb +260 -0
- data/lib/crimson-falcon/models/domain_api_evaluation_logic_entity_comparison_v1.rb +286 -0
- data/lib/crimson-falcon/models/domain_api_evaluation_logic_item_v1.rb +332 -0
- data/lib/crimson-falcon/models/domain_api_evaluation_logic_state_comparison_v1.rb +260 -0
- data/lib/crimson-falcon/models/domain_api_evaluation_logic_v1.rb +300 -0
- data/lib/crimson-falcon/models/domain_api_finding_facet_v1.rb +323 -0
- data/lib/crimson-falcon/models/domain_api_finding_rule_v1.rb +359 -0
- data/lib/crimson-falcon/models/domain_api_finding_with_rule_v1.rb +275 -0
- data/lib/crimson-falcon/models/domain_api_host_group.rb +253 -0
- data/lib/crimson-falcon/models/domain_api_host_info_facet_v1.rb +406 -0
- data/lib/crimson-falcon/models/domain_api_mitre_attack_tactic_v1.rb +264 -0
- data/lib/crimson-falcon/models/domain_api_mitre_mitigation_v1.rb +253 -0
- data/lib/crimson-falcon/models/domain_api_mitre_technique_v1.rb +264 -0
- data/lib/crimson-falcon/models/domain_api_query_meta_v1.rb +276 -0
- data/lib/crimson-falcon/models/domain_api_query_paging_v1.rb +272 -0
- data/lib/crimson-falcon/models/domain_api_remediation_ids.rb +241 -0
- data/lib/crimson-falcon/models/domain_api_remediation_v2.rb +314 -0
- data/lib/crimson-falcon/models/domain_api_vulnerability_app_v2.rb +244 -0
- data/lib/crimson-falcon/models/domain_api_vulnerability_cve_details_facet_v2.rb +394 -0
- data/lib/crimson-falcon/models/domain_api_vulnerability_cvecisa_info.rb +253 -0
- data/lib/crimson-falcon/models/domain_api_vulnerability_extended_app_v2.rb +271 -0
- data/lib/crimson-falcon/models/domain_api_vulnerability_host_facet_v2.rb +442 -0
- data/lib/crimson-falcon/models/domain_api_vulnerability_remediation_facet_v2.rb +252 -0
- data/lib/crimson-falcon/models/domain_api_vulnerability_suppression_info_v2.rb +253 -0
- data/lib/crimson-falcon/models/domain_api_vulnerability_v2.rb +379 -0
- data/lib/crimson-falcon/models/domain_assessment.rb +286 -0
- data/lib/crimson-falcon/models/domain_assessment_items.rb +262 -0
- data/lib/crimson-falcon/models/domain_assessment_paging.rb +276 -0
- data/lib/crimson-falcon/models/domain_assessments_by_score_response.rb +276 -0
- data/lib/crimson-falcon/models/domain_assessments_response.rb +276 -0
- data/lib/crimson-falcon/models/domain_audit_response.rb +276 -0
- data/lib/crimson-falcon/models/domain_aws_account_v2.rb +605 -0
- data/lib/crimson-falcon/models/domain_aws_configuration.rb +270 -0
- data/lib/crimson-falcon/models/domain_awsd4_c_account_v1.rb +290 -0
- data/lib/crimson-falcon/models/domain_awsd4_c_organization_account_v1.rb +269 -0
- data/lib/crimson-falcon/models/domain_azure_client_service_principal_v1.rb +367 -0
- data/lib/crimson-falcon/models/domain_azure_resource_permission.rb +280 -0
- data/lib/crimson-falcon/models/domain_azure_role_assignment.rb +271 -0
- data/lib/crimson-falcon/models/domain_base_api_vulnerability_v2.rb +379 -0
- data/lib/crimson-falcon/models/domain_batch_execute_command_request.rb +302 -0
- data/lib/crimson-falcon/models/domain_batch_get_cmd_status_response.rb +276 -0
- data/lib/crimson-falcon/models/domain_batch_get_command_request.rb +274 -0
- data/lib/crimson-falcon/models/domain_batch_get_command_response.rb +288 -0
- data/lib/crimson-falcon/models/domain_batch_init_session_request.rb +274 -0
- data/lib/crimson-falcon/models/domain_batch_init_session_response.rb +290 -0
- data/lib/crimson-falcon/models/domain_batch_refresh_session_request.rb +260 -0
- data/lib/crimson-falcon/models/domain_batch_refresh_session_response.rb +276 -0
- data/lib/crimson-falcon/models/domain_behavior.rb +492 -0
- data/lib/crimson-falcon/models/domain_benchmark.rb +272 -0
- data/lib/crimson-falcon/models/domain_botnet_config_source.rb +356 -0
- data/lib/crimson-falcon/models/domain_botnet_inject.rb +260 -0
- data/lib/crimson-falcon/models/domain_breach_details_v1.rb +247 -0
- data/lib/crimson-falcon/models/domain_breached_item_v1.rb +452 -0
- data/lib/crimson-falcon/models/domain_case_creation_request.rb +318 -0
- data/lib/crimson-falcon/models/domain_case_creation_request_v2.rb +313 -0
- data/lib/crimson-falcon/models/domain_child_link.rb +310 -0
- data/lib/crimson-falcon/models/domain_children_response_v1.rb +260 -0
- data/lib/crimson-falcon/models/domain_cid_group.rb +276 -0
- data/lib/crimson-falcon/models/domain_cid_group_members.rb +260 -0
- data/lib/crimson-falcon/models/domain_cid_group_members_request_v1.rb +246 -0
- data/lib/crimson-falcon/models/domain_cid_group_members_response_v1.rb +276 -0
- data/lib/crimson-falcon/models/domain_cid_groups_request_v1.rb +246 -0
- data/lib/crimson-falcon/models/domain_cid_groups_response_v1.rb +276 -0
- data/lib/crimson-falcon/models/domain_cid_policy_assignments.rb +463 -0
- data/lib/crimson-falcon/models/domain_command_execute_request.rb +314 -0
- data/lib/crimson-falcon/models/domain_command_execute_response.rb +272 -0
- data/lib/crimson-falcon/models/domain_command_execute_response_wrapper.rb +276 -0
- data/lib/crimson-falcon/models/domain_condition.rb +290 -0
- data/lib/crimson-falcon/models/domain_create_action_request.rb +307 -0
- data/lib/crimson-falcon/models/domain_create_user_request.rb +275 -0
- data/lib/crimson-falcon/models/domain_credentials.rb +244 -0
- data/lib/crimson-falcon/models/domain_csix_label.rb +272 -0
- data/lib/crimson-falcon/models/domain_csix_relation.rb +295 -0
- data/lib/crimson-falcon/models/domain_ddos_attack_source.rb +428 -0
- data/lib/crimson-falcon/models/domain_ddos_target_details.rb +381 -0
- data/lib/crimson-falcon/models/domain_detailed_notification_v1.rb +276 -0
- data/lib/crimson-falcon/models/domain_detects_entities_patch_request.rb +288 -0
- data/lib/crimson-falcon/models/domain_device.rb +552 -0
- data/lib/crimson-falcon/models/domain_discover_api_account.rb +441 -0
- data/lib/crimson-falcon/models/domain_discover_api_account_entities_response.rb +271 -0
- data/lib/crimson-falcon/models/domain_discover_api_active_discovery_host.rb +255 -0
- data/lib/crimson-falcon/models/domain_discover_api_active_discovery_network.rb +246 -0
- data/lib/crimson-falcon/models/domain_discover_api_application.rb +476 -0
- data/lib/crimson-falcon/models/domain_discover_api_application_entities_response.rb +271 -0
- data/lib/crimson-falcon/models/domain_discover_api_application_host.rb +430 -0
- data/lib/crimson-falcon/models/domain_discover_api_bios_hashes_data.rb +250 -0
- data/lib/crimson-falcon/models/domain_discover_api_device_slot.rb +320 -0
- data/lib/crimson-falcon/models/domain_discover_api_disk_size.rb +250 -0
- data/lib/crimson-falcon/models/domain_discover_api_field_metadata.rb +243 -0
- data/lib/crimson-falcon/models/domain_discover_api_host.rb +1358 -0
- data/lib/crimson-falcon/models/domain_discover_api_host_entities_response.rb +271 -0
- data/lib/crimson-falcon/models/domain_discover_api_host_triage.rb +290 -0
- data/lib/crimson-falcon/models/domain_discover_api_login.rb +471 -0
- data/lib/crimson-falcon/models/domain_discover_api_login_entities_response.rb +271 -0
- data/lib/crimson-falcon/models/domain_discover_api_mount_storage_info.rb +260 -0
- data/lib/crimson-falcon/models/domain_discover_api_network_interface.rb +281 -0
- data/lib/crimson-falcon/models/domain_discover_apiio_t_host.rb +1141 -0
- data/lib/crimson-falcon/models/domain_discover_apiio_t_host_entities_response.rb +271 -0
- data/lib/crimson-falcon/models/domain_discover_apios_security.rb +330 -0
- data/lib/crimson-falcon/models/domain_discover_params.rb +258 -0
- data/lib/crimson-falcon/models/domain_disposition.rb +258 -0
- data/lib/crimson-falcon/models/domain_e_crime_kill_chain.rb +410 -0
- data/lib/crimson-falcon/models/domain_entities_patch_request.rb +259 -0
- data/lib/crimson-falcon/models/domain_entity.rb +271 -0
- data/lib/crimson-falcon/models/domain_entity_action_request.rb +260 -0
- data/lib/crimson-falcon/models/domain_environment_score.rb +295 -0
- data/lib/crimson-falcon/models/domain_errors_only.rb +260 -0
- data/lib/crimson-falcon/models/domain_event.rb +405 -0
- data/lib/crimson-falcon/models/domain_event_entities_response.rb +271 -0
- data/lib/crimson-falcon/models/domain_event_histogram.rb +314 -0
- data/lib/crimson-falcon/models/domain_execution_metadata_summary.rb +286 -0
- data/lib/crimson-falcon/models/domain_execution_metadata_v1.rb +328 -0
- data/lib/crimson-falcon/models/domain_export_job_entities_response_v1.rb +276 -0
- data/lib/crimson-falcon/models/domain_export_job_id_response_v1.rb +276 -0
- data/lib/crimson-falcon/models/domain_export_job_metadata_v1.rb +286 -0
- data/lib/crimson-falcon/models/domain_export_job_v1.rb +258 -0
- data/lib/crimson-falcon/models/domain_exposed_data_record_financial_v1.rb +274 -0
- data/lib/crimson-falcon/models/domain_exposed_data_record_location_v1.rb +314 -0
- data/lib/crimson-falcon/models/domain_exposed_data_record_social_v1.rb +342 -0
- data/lib/crimson-falcon/models/domain_external_api_registry.rb +407 -0
- data/lib/crimson-falcon/models/domain_external_credential_response.rb +314 -0
- data/lib/crimson-falcon/models/domain_external_query_response.rb +266 -0
- data/lib/crimson-falcon/models/domain_external_registry_list_response.rb +266 -0
- data/lib/crimson-falcon/models/domain_external_registry_response.rb +264 -0
- data/lib/crimson-falcon/models/domain_field.rb +288 -0
- data/lib/crimson-falcon/models/domain_field_validation.rb +313 -0
- data/lib/crimson-falcon/models/domain_field_value.rb +306 -0
- data/lib/crimson-falcon/models/domain_file.rb +258 -0
- data/lib/crimson-falcon/models/domain_file_count.rb +275 -0
- data/lib/crimson-falcon/models/domain_file_details_v1.rb +287 -0
- data/lib/crimson-falcon/models/domain_file_v2.rb +426 -0
- data/lib/crimson-falcon/models/domain_gcp_account_v1.rb +463 -0
- data/lib/crimson-falcon/models/domain_image.rb +262 -0
- data/lib/crimson-falcon/models/domain_incident.rb +551 -0
- data/lib/crimson-falcon/models/domain_init_request.rb +272 -0
- data/lib/crimson-falcon/models/domain_init_response.rb +322 -0
- data/lib/crimson-falcon/models/domain_init_response_wrapper.rb +276 -0
- data/lib/crimson-falcon/models/domain_key_value_pair.rb +258 -0
- data/lib/crimson-falcon/models/domain_kill_chain.rb +374 -0
- data/lib/crimson-falcon/models/domain_last_scheduled_execution.rb +276 -0
- data/lib/crimson-falcon/models/domain_last_unscheduled_execution.rb +286 -0
- data/lib/crimson-falcon/models/domain_launch_export_job_request_v1.rb +300 -0
- data/lib/crimson-falcon/models/domain_launch_export_job_response_v1.rb +276 -0
- data/lib/crimson-falcon/models/domain_list_files_response_wrapper.rb +276 -0
- data/lib/crimson-falcon/models/domain_list_files_v2_response_wrapper.rb +276 -0
- data/lib/crimson-falcon/models/domain_list_sessions_response_msa.rb +276 -0
- data/lib/crimson-falcon/models/domain_malicious_file.rb +343 -0
- data/lib/crimson-falcon/models/domain_matched_breach_summary_v1.rb +381 -0
- data/lib/crimson-falcon/models/domain_matched_rule.rb +260 -0
- data/lib/crimson-falcon/models/domain_meta_info.rb +276 -0
- data/lib/crimson-falcon/models/domain_msa_detect_summaries_response.rb +276 -0
- data/lib/crimson-falcon/models/domain_msa_environment_score_response.rb +276 -0
- data/lib/crimson-falcon/models/domain_msa_external_behavior_response.rb +276 -0
- data/lib/crimson-falcon/models/domain_msa_external_incident_response.rb +276 -0
- data/lib/crimson-falcon/models/domain_msa_incident_perform_action_response.rb +276 -0
- data/lib/crimson-falcon/models/domain_msa_incident_query_response.rb +276 -0
- data/lib/crimson-falcon/models/domain_msa_qf_response.rb +276 -0
- data/lib/crimson-falcon/models/domain_mssp_role_request_v1.rb +246 -0
- data/lib/crimson-falcon/models/domain_mssp_role_response_v1.rb +276 -0
- data/lib/crimson-falcon/models/domain_mssp_roles.rb +288 -0
- data/lib/crimson-falcon/models/domain_multi_command_execute_response.rb +246 -0
- data/lib/crimson-falcon/models/domain_multi_command_execute_response_wrapper.rb +274 -0
- data/lib/crimson-falcon/models/domain_multi_pulse_sensor_response.rb +274 -0
- data/lib/crimson-falcon/models/domain_multi_status_sensor_response.rb +371 -0
- data/lib/crimson-falcon/models/domain_news_document.rb +506 -0
- data/lib/crimson-falcon/models/domain_news_response.rb +276 -0
- data/lib/crimson-falcon/models/domain_notification_config.rb +302 -0
- data/lib/crimson-falcon/models/domain_notification_details_response_v1.rb +276 -0
- data/lib/crimson-falcon/models/domain_notification_details_v1.rb +352 -0
- data/lib/crimson-falcon/models/domain_notification_entities_response_v1.rb +276 -0
- data/lib/crimson-falcon/models/domain_notification_id_response.rb +276 -0
- data/lib/crimson-falcon/models/domain_notification_v1.rb +534 -0
- data/lib/crimson-falcon/models/domain_notifications.rb +269 -0
- data/lib/crimson-falcon/models/domain_pastebin_text_source.rb +299 -0
- data/lib/crimson-falcon/models/domain_permission.rb +258 -0
- data/lib/crimson-falcon/models/domain_platform.rb +258 -0
- data/lib/crimson-falcon/models/domain_policy_info.rb +716 -0
- data/lib/crimson-falcon/models/domain_policy_setting_by_account_and_region.rb +296 -0
- data/lib/crimson-falcon/models/domain_public_indicator_v3.rb +518 -0
- data/lib/crimson-falcon/models/domain_public_indicators_v3_response.rb +276 -0
- data/lib/crimson-falcon/models/domain_queries_patch_request.rb +266 -0
- data/lib/crimson-falcon/models/domain_query_response.rb +276 -0
- data/lib/crimson-falcon/models/domain_queued_session_command.rb +337 -0
- data/lib/crimson-falcon/models/domain_queued_session_job.rb +358 -0
- data/lib/crimson-falcon/models/domain_queued_session_response_wrapper.rb +276 -0
- data/lib/crimson-falcon/models/domain_quota.rb +258 -0
- data/lib/crimson-falcon/models/domain_recon_api_error.rb +287 -0
- data/lib/crimson-falcon/models/domain_recon_api_error_detail.rb +272 -0
- data/lib/crimson-falcon/models/domain_register_actions_request.rb +260 -0
- data/lib/crimson-falcon/models/domain_registry_credentials_response.rb +276 -0
- data/lib/crimson-falcon/models/domain_report_execution_launch_request_v1.rb +244 -0
- data/lib/crimson-falcon/models/domain_report_execution_retry_request_v1.rb +244 -0
- data/lib/crimson-falcon/models/domain_report_execution_summary_v1.rb +332 -0
- data/lib/crimson-falcon/models/domain_report_execution_v1.rb +477 -0
- data/lib/crimson-falcon/models/domain_report_executions_response_v1.rb +276 -0
- data/lib/crimson-falcon/models/domain_report_metadata.rb +313 -0
- data/lib/crimson-falcon/models/domain_report_params.rb +339 -0
- data/lib/crimson-falcon/models/domain_result_metadata.rb +398 -0
- data/lib/crimson-falcon/models/domain_role.rb +295 -0
- data/lib/crimson-falcon/models/domain_role_ids.rb +246 -0
- data/lib/crimson-falcon/models/domain_rule.rb +352 -0
- data/lib/crimson-falcon/models/domain_rule_entities_response.rb +271 -0
- data/lib/crimson-falcon/models/domain_rule_meta_info.rb +297 -0
- data/lib/crimson-falcon/models/domain_rule_preview_request.rb +258 -0
- data/lib/crimson-falcon/models/domain_rule_query_response_v1.rb +278 -0
- data/lib/crimson-falcon/models/domain_rule_quota.rb +275 -0
- data/lib/crimson-falcon/models/domain_rules_entities_response_v1.rb +278 -0
- data/lib/crimson-falcon/models/domain_rules_response.rb +276 -0
- data/lib/crimson-falcon/models/domain_scan.rb +537 -0
- data/lib/crimson-falcon/models/domain_scan_host_metadata.rb +352 -0
- data/lib/crimson-falcon/models/domain_scan_metadata.rb +325 -0
- data/lib/crimson-falcon/models/domain_scan_profile.rb +506 -0
- data/lib/crimson-falcon/models/domain_scan_profile_metadata.rb +262 -0
- data/lib/crimson-falcon/models/domain_scan_schedule_data_v1.rb +271 -0
- data/lib/crimson-falcon/models/domain_schedule.rb +272 -0
- data/lib/crimson-falcon/models/domain_scheduled_report_v1.rb +511 -0
- data/lib/crimson-falcon/models/domain_scheduled_reports_result_v1.rb +276 -0
- data/lib/crimson-falcon/models/domain_script_help.rb +332 -0
- data/lib/crimson-falcon/models/domain_search_after_meta.rb +276 -0
- data/lib/crimson-falcon/models/domain_search_after_paging.rb +272 -0
- data/lib/crimson-falcon/models/domain_sensor_installer_v1.rb +378 -0
- data/lib/crimson-falcon/models/domain_sensor_installers_v1.rb +276 -0
- data/lib/crimson-falcon/models/domain_session.rb +516 -0
- data/lib/crimson-falcon/models/domain_session_response_wrapper.rb +276 -0
- data/lib/crimson-falcon/models/domain_signal_properties.rb +356 -0
- data/lib/crimson-falcon/models/domain_signal_property.rb +300 -0
- data/lib/crimson-falcon/models/domain_simple_actor.rb +291 -0
- data/lib/crimson-falcon/models/domain_spapi_combined_vulnerabilities_response.rb +271 -0
- data/lib/crimson-falcon/models/domain_spapi_evaluation_logic_combined_response_v1.rb +271 -0
- data/lib/crimson-falcon/models/domain_spapi_evaluation_logic_entities_response_v1.rb +271 -0
- data/lib/crimson-falcon/models/domain_spapi_query_meta.rb +285 -0
- data/lib/crimson-falcon/models/domain_spapi_query_paging.rb +272 -0
- data/lib/crimson-falcon/models/domain_spapi_query_response.rb +271 -0
- data/lib/crimson-falcon/models/domain_spapi_remediation_entities_response_v2.rb +271 -0
- data/lib/crimson-falcon/models/domain_spapi_vulnerabilities_entities_response_v2.rb +271 -0
- data/lib/crimson-falcon/models/domain_status_response.rb +313 -0
- data/lib/crimson-falcon/models/domain_status_response_wrapper.rb +276 -0
- data/lib/crimson-falcon/models/domain_tweet_source.rb +299 -0
- data/lib/crimson-falcon/models/domain_update_action_request.rb +316 -0
- data/lib/crimson-falcon/models/domain_update_notification_request_v1.rb +275 -0
- data/lib/crimson-falcon/models/domain_update_results.rb +252 -0
- data/lib/crimson-falcon/models/domain_update_rule_request_v1.rb +335 -0
- data/lib/crimson-falcon/models/domain_update_user_fields.rb +248 -0
- data/lib/crimson-falcon/models/domain_update_user_request.rb +248 -0
- data/lib/crimson-falcon/models/domain_user.rb +293 -0
- data/lib/crimson-falcon/models/domain_user_action.rb +285 -0
- data/lib/crimson-falcon/models/domain_user_action_request.rb +262 -0
- data/lib/crimson-falcon/models/domain_user_create_request.rb +266 -0
- data/lib/crimson-falcon/models/domain_user_grants.rb +345 -0
- data/lib/crimson-falcon/models/domain_user_group.rb +276 -0
- data/lib/crimson-falcon/models/domain_user_group_members.rb +260 -0
- data/lib/crimson-falcon/models/domain_user_group_members_request_v1.rb +246 -0
- data/lib/crimson-falcon/models/domain_user_group_members_response_v1.rb +276 -0
- data/lib/crimson-falcon/models/domain_user_groups_request_v1.rb +246 -0
- data/lib/crimson-falcon/models/domain_user_groups_response_v1.rb +276 -0
- data/lib/crimson-falcon/models/domain_user_metadata.rb +285 -0
- data/lib/crimson-falcon/models/domain_user_role.rb +281 -0
- data/lib/crimson-falcon/models/domain_value_item.rb +258 -0
- data/lib/crimson-falcon/models/domain_vulnerability.rb +371 -0
- data/lib/crimson-falcon/models/domain_vulnerability_actor.rb +248 -0
- data/lib/crimson-falcon/models/domain_vulnerability_affected_product.rb +248 -0
- data/lib/crimson-falcon/models/domain_vulnerability_related_threat.rb +250 -0
- data/lib/crimson-falcon/models/domain_vulnerability_report.rb +248 -0
- data/lib/crimson-falcon/models/domain_vulnerability_response.rb +276 -0
- data/lib/crimson-falcon/models/domain_xdr_data.rb +244 -0
- data/lib/crimson-falcon/models/domain_xdr_params.rb +372 -0
- data/lib/crimson-falcon/models/domain_zero_trust_simple_assessment.rb +258 -0
- data/lib/crimson-falcon/models/empowerapi_msa_pf_response_v1.rb +271 -0
- data/lib/crimson-falcon/models/empowerapi_msa_pf_response_v2.rb +271 -0
- data/lib/crimson-falcon/models/empowerapi_remote_command_put_file_v1.rb +413 -0
- data/lib/crimson-falcon/models/empowerapi_remote_command_put_file_v2.rb +459 -0
- data/lib/crimson-falcon/models/entities_ods_cancel_scan_request.rb +246 -0
- data/lib/crimson-falcon/models/entities_ods_scan_host_response.rb +271 -0
- data/lib/crimson-falcon/models/entities_ods_scan_malicious_file_response.rb +271 -0
- data/lib/crimson-falcon/models/entities_ods_scan_request.rb +478 -0
- data/lib/crimson-falcon/models/entities_ods_scan_response.rb +271 -0
- data/lib/crimson-falcon/models/entities_ods_schedule_scan_request.rb +476 -0
- data/lib/crimson-falcon/models/entities_ods_schedule_scan_response.rb +271 -0
- data/lib/crimson-falcon/models/exclusions_create_req_v1.rb +270 -0
- data/lib/crimson-falcon/models/exclusions_exclusion_v1.rb +383 -0
- data/lib/crimson-falcon/models/exclusions_resp_v1.rb +277 -0
- data/lib/crimson-falcon/models/falconx_actor.rb +362 -0
- data/lib/crimson-falcon/models/falconx_actor_summary.rb +257 -0
- data/lib/crimson-falcon/models/falconx_amsi_call.rb +239 -0
- data/lib/crimson-falcon/models/falconx_associated_runtime.rb +248 -0
- data/lib/crimson-falcon/models/falconx_c2.rb +266 -0
- data/lib/crimson-falcon/models/falconx_contacted_host.rb +286 -0
- data/lib/crimson-falcon/models/falconx_dns_request.rb +302 -0
- data/lib/crimson-falcon/models/falconx_entity.rb +266 -0
- data/lib/crimson-falcon/models/falconx_errors_only.rb +269 -0
- data/lib/crimson-falcon/models/falconx_extracted_file.rb +340 -0
- data/lib/crimson-falcon/models/falconx_extracted_interesting_string.rb +275 -0
- data/lib/crimson-falcon/models/falconx_file_access.rb +257 -0
- data/lib/crimson-falcon/models/falconx_file_import.rb +250 -0
- data/lib/crimson-falcon/models/falconx_file_metadata.rb +263 -0
- data/lib/crimson-falcon/models/falconx_handle.rb +257 -0
- data/lib/crimson-falcon/models/falconx_http_request.rb +302 -0
- data/lib/crimson-falcon/models/falconx_incident.rb +250 -0
- data/lib/crimson-falcon/models/falconx_intel_report_v1.rb +263 -0
- data/lib/crimson-falcon/models/falconx_intel_summary_report_v1.rb +241 -0
- data/lib/crimson-falcon/models/falconx_intel_x_report_v1.rb +248 -0
- data/lib/crimson-falcon/models/falconx_malquery_error_v1.rb +248 -0
- data/lib/crimson-falcon/models/falconx_malquery_report_v1.rb +279 -0
- data/lib/crimson-falcon/models/falconx_malquery_resource.rb +302 -0
- data/lib/crimson-falcon/models/falconx_malware_config.rb +365 -0
- data/lib/crimson-falcon/models/falconx_matched_signature.rb +248 -0
- data/lib/crimson-falcon/models/falconx_memory_dump_data.rb +329 -0
- data/lib/crimson-falcon/models/falconx_memory_forensic.rb +248 -0
- data/lib/crimson-falcon/models/falconx_meta_info.rb +253 -0
- data/lib/crimson-falcon/models/falconx_mitre_attack.rb +308 -0
- data/lib/crimson-falcon/models/falconx_mitre_attack_parent.rb +257 -0
- data/lib/crimson-falcon/models/falconx_parameter.rb +275 -0
- data/lib/crimson-falcon/models/falconx_process.rb +390 -0
- data/lib/crimson-falcon/models/falconx_process_flag.rb +248 -0
- data/lib/crimson-falcon/models/falconx_query_response.rb +276 -0
- data/lib/crimson-falcon/models/falconx_quota.rb +272 -0
- data/lib/crimson-falcon/models/falconx_registry.rb +284 -0
- data/lib/crimson-falcon/models/falconx_related_indicator.rb +275 -0
- data/lib/crimson-falcon/models/falconx_report_v1.rb +456 -0
- data/lib/crimson-falcon/models/falconx_report_v1_response.rb +276 -0
- data/lib/crimson-falcon/models/falconx_sandbox_parameters_v1.rb +329 -0
- data/lib/crimson-falcon/models/falconx_sandbox_report_v1.rb +722 -0
- data/lib/crimson-falcon/models/falconx_sandbox_summary_report_v1.rb +380 -0
- data/lib/crimson-falcon/models/falconx_script_call.rb +288 -0
- data/lib/crimson-falcon/models/falconx_signature.rb +320 -0
- data/lib/crimson-falcon/models/falconx_stream.rb +286 -0
- data/lib/crimson-falcon/models/falconx_submission_parameters_v1.rb +261 -0
- data/lib/crimson-falcon/models/falconx_submission_v1.rb +342 -0
- data/lib/crimson-falcon/models/falconx_submission_v1_response.rb +276 -0
- data/lib/crimson-falcon/models/falconx_summary_report_v1.rb +409 -0
- data/lib/crimson-falcon/models/falconx_summary_report_v1_response.rb +276 -0
- data/lib/crimson-falcon/models/falconx_suricata_alert.rb +284 -0
- data/lib/crimson-falcon/models/falconx_threat_graph_indicator_v1.rb +266 -0
- data/lib/crimson-falcon/models/falconx_threat_graph_report_v1.rb +241 -0
- data/lib/crimson-falcon/models/falconx_url_data.rb +257 -0
- data/lib/crimson-falcon/models/falconx_version_info.rb +248 -0
- data/lib/crimson-falcon/models/firewall_create_firewall_policies_req_v1.rb +248 -0
- data/lib/crimson-falcon/models/firewall_create_firewall_policy_req_v1.rb +314 -0
- data/lib/crimson-falcon/models/firewall_policy_v1.rb +461 -0
- data/lib/crimson-falcon/models/firewall_resp_v1.rb +277 -0
- data/lib/crimson-falcon/models/firewall_update_firewall_policies_req_v1.rb +248 -0
- data/lib/crimson-falcon/models/firewall_update_firewall_policy_req_v1.rb +265 -0
- data/lib/crimson-falcon/models/flightcontrolapi_get_roles_response.rb +271 -0
- data/lib/crimson-falcon/models/flightcontrolapi_user_grant_response.rb +271 -0
- data/lib/crimson-falcon/models/flightcontrolapi_user_response.rb +271 -0
- data/lib/crimson-falcon/models/fwmgr_api_aggregates_response.rb +271 -0
- data/lib/crimson-falcon/models/fwmgr_api_events_response.rb +271 -0
- data/lib/crimson-falcon/models/fwmgr_api_filepath_test_request.rb +258 -0
- data/lib/crimson-falcon/models/fwmgr_api_filepath_test_result.rb +272 -0
- data/lib/crimson-falcon/models/fwmgr_api_firewall_fields_response.rb +271 -0
- data/lib/crimson-falcon/models/fwmgr_api_firewall_fields_v1.rb +288 -0
- data/lib/crimson-falcon/models/fwmgr_api_json_diff.rb +281 -0
- data/lib/crimson-falcon/models/fwmgr_api_meta_info.rb +285 -0
- data/lib/crimson-falcon/models/fwmgr_api_network_location_create_request_v1.rb +392 -0
- data/lib/crimson-falcon/models/fwmgr_api_network_location_modify_metadata_request_v1.rb +302 -0
- data/lib/crimson-falcon/models/fwmgr_api_network_location_modify_precedence_request_v1.rb +260 -0
- data/lib/crimson-falcon/models/fwmgr_api_network_location_modify_request_v1.rb +442 -0
- data/lib/crimson-falcon/models/fwmgr_api_network_location_summaries_response.rb +271 -0
- data/lib/crimson-falcon/models/fwmgr_api_network_location_summary_v1.rb +350 -0
- data/lib/crimson-falcon/models/fwmgr_api_network_locations_metadata_v1.rb +272 -0
- data/lib/crimson-falcon/models/fwmgr_api_network_locations_response.rb +271 -0
- data/lib/crimson-falcon/models/fwmgr_api_network_locations_v1.rb +479 -0
- data/lib/crimson-falcon/models/fwmgr_api_platforms_response.rb +271 -0
- data/lib/crimson-falcon/models/fwmgr_api_policy_container_upsert_request_v1.rb +362 -0
- data/lib/crimson-falcon/models/fwmgr_api_policy_containers_response.rb +271 -0
- data/lib/crimson-falcon/models/fwmgr_api_query_paging.rb +276 -0
- data/lib/crimson-falcon/models/fwmgr_api_query_response.rb +271 -0
- data/lib/crimson-falcon/models/fwmgr_api_rule_create_request_v1.rb +492 -0
- data/lib/crimson-falcon/models/fwmgr_api_rule_group_create_request_v1.rb +302 -0
- data/lib/crimson-falcon/models/fwmgr_api_rule_group_modify_request_v1.rb +320 -0
- data/lib/crimson-falcon/models/fwmgr_api_rule_group_v1.rb +430 -0
- data/lib/crimson-falcon/models/fwmgr_api_rule_groups_response.rb +271 -0
- data/lib/crimson-falcon/models/fwmgr_api_rules_response.rb +271 -0
- data/lib/crimson-falcon/models/fwmgr_api_validate_filepath_response.rb +271 -0
- data/lib/crimson-falcon/models/fwmgr_api_workaround_ui_field_value.rb +291 -0
- data/lib/crimson-falcon/models/fwmgr_domain_address_range.rb +253 -0
- data/lib/crimson-falcon/models/fwmgr_domain_connection_type.rb +258 -0
- data/lib/crimson-falcon/models/fwmgr_domain_dns_resolution_targets.rb +246 -0
- data/lib/crimson-falcon/models/fwmgr_domain_dns_resolution_targets_with_polling.rb +255 -0
- data/lib/crimson-falcon/models/fwmgr_domain_dns_target.rb +255 -0
- data/lib/crimson-falcon/models/fwmgr_domain_field.rb +288 -0
- data/lib/crimson-falcon/models/fwmgr_domain_https_hosts.rb +246 -0
- data/lib/crimson-falcon/models/fwmgr_domain_https_hosts_with_polling.rb +255 -0
- data/lib/crimson-falcon/models/fwmgr_domain_icmp.rb +258 -0
- data/lib/crimson-falcon/models/fwmgr_domain_icmp_targets.rb +246 -0
- data/lib/crimson-falcon/models/fwmgr_domain_icmp_targets_with_polling.rb +255 -0
- data/lib/crimson-falcon/models/fwmgr_domain_monitoring.rb +258 -0
- data/lib/crimson-falcon/models/fwmgr_domain_platform.rb +258 -0
- data/lib/crimson-falcon/models/fwmgr_domain_port_range.rb +258 -0
- data/lib/crimson-falcon/models/fwmgr_domain_value_item.rb +258 -0
- data/lib/crimson-falcon/models/fwmgr_domain_wireless_type.rb +274 -0
- data/lib/crimson-falcon/models/fwmgr_firewall_address_range.rb +253 -0
- data/lib/crimson-falcon/models/fwmgr_firewall_field_value.rb +306 -0
- data/lib/crimson-falcon/models/fwmgr_firewall_flags.rb +272 -0
- data/lib/crimson-falcon/models/fwmgr_firewall_icmp.rb +258 -0
- data/lib/crimson-falcon/models/fwmgr_firewall_match_event_response.rb +706 -0
- data/lib/crimson-falcon/models/fwmgr_firewall_monitoring.rb +258 -0
- data/lib/crimson-falcon/models/fwmgr_firewall_policy_container_v1.rb +407 -0
- data/lib/crimson-falcon/models/fwmgr_firewall_port_range.rb +258 -0
- data/lib/crimson-falcon/models/fwmgr_firewall_rule_group_summary_v1.rb +372 -0
- data/lib/crimson-falcon/models/fwmgr_firewall_rule_v1.rb +605 -0
- data/lib/crimson-falcon/models/fwmgr_msa_aggregate_query_request.rb +478 -0
- data/lib/crimson-falcon/models/fwmgr_msa_aggregation_result.rb +269 -0
- data/lib/crimson-falcon/models/fwmgr_msa_aggregation_result_item.rb +327 -0
- data/lib/crimson-falcon/models/fwmgr_msa_date_range_spec.rb +258 -0
- data/lib/crimson-falcon/models/fwmgr_msa_range_spec.rb +258 -0
- data/lib/crimson-falcon/models/fwmgr_msaspec_error.rb +267 -0
- data/lib/crimson-falcon/models/fwmgr_msaspec_meta_info.rb +285 -0
- data/lib/crimson-falcon/models/fwmgr_msaspec_paging.rb +272 -0
- data/lib/crimson-falcon/models/fwmgr_msaspec_query_response.rb +271 -0
- data/lib/crimson-falcon/models/fwmgr_msaspec_response_fields.rb +255 -0
- data/lib/crimson-falcon/models/fwmgr_msaspec_writes.rb +244 -0
- data/lib/crimson-falcon/models/host_groups_create_group_req_v1.rb +315 -0
- data/lib/crimson-falcon/models/host_groups_create_groups_req_v1.rb +248 -0
- data/lib/crimson-falcon/models/host_groups_host_group_v1.rb +390 -0
- data/lib/crimson-falcon/models/host_groups_members_resp_v1.rb +278 -0
- data/lib/crimson-falcon/models/host_groups_resp_v1.rb +277 -0
- data/lib/crimson-falcon/models/host_groups_update_group_req_v1.rb +276 -0
- data/lib/crimson-falcon/models/host_groups_update_groups_req_v1.rb +248 -0
- data/lib/crimson-falcon/models/ioa_cloud_account_id.rb +257 -0
- data/lib/crimson-falcon/models/ioa_enrichments.rb +248 -0
- data/lib/crimson-falcon/models/ioa_event_aggregate.rb +340 -0
- data/lib/crimson-falcon/models/ioa_exclusions_ioa_exclusion_create_req_v1.rb +353 -0
- data/lib/crimson-falcon/models/ioa_exclusions_ioa_exclusion_resp_v1.rb +428 -0
- data/lib/crimson-falcon/models/ioa_exclusions_ioa_exclusion_update_req_v1.rb +367 -0
- data/lib/crimson-falcon/models/ioa_exclusions_ioa_exclusions_resp_v1.rb +277 -0
- data/lib/crimson-falcon/models/ioa_rule_groups_rule_group_v1.rb +451 -0
- data/lib/crimson-falcon/models/iocapi_ioc_devices_count.rb +295 -0
- data/lib/crimson-falcon/models/iocapi_msa_reply_devices_ran_on.rb +276 -0
- data/lib/crimson-falcon/models/iocapi_msa_reply_ioc_devices_count.rb +276 -0
- data/lib/crimson-falcon/models/iocapi_msa_reply_processes_ran_on.rb +276 -0
- data/lib/crimson-falcon/models/iocapi_pagination_meta.rb +266 -0
- data/lib/crimson-falcon/models/iocapi_response_meta.rb +276 -0
- data/lib/crimson-falcon/models/k8sreg_account_permissions_status.rb +258 -0
- data/lib/crimson-falcon/models/k8sreg_api_key.rb +244 -0
- data/lib/crimson-falcon/models/k8sreg_aws_account_resp.rb +385 -0
- data/lib/crimson-falcon/models/k8sreg_aws_cluster_item_resp.rb +262 -0
- data/lib/crimson-falcon/models/k8sreg_azure_acct_cluster_item_resp.rb +244 -0
- data/lib/crimson-falcon/models/k8sreg_azure_bash_script.rb +260 -0
- data/lib/crimson-falcon/models/k8sreg_azure_sub_entity.rb +258 -0
- data/lib/crimson-falcon/models/k8sreg_azure_subscription_resp.rb +330 -0
- data/lib/crimson-falcon/models/k8sreg_azure_tenant_config.rb +267 -0
- data/lib/crimson-falcon/models/k8sreg_azure_tenant_info.rb +260 -0
- data/lib/crimson-falcon/models/k8sreg_cluster_resp.rb +412 -0
- data/lib/crimson-falcon/models/k8sreg_create_aws_acc_req.rb +246 -0
- data/lib/crimson-falcon/models/k8sreg_create_aws_acc_req_resources.rb +258 -0
- data/lib/crimson-falcon/models/k8sreg_create_aws_acc_resp.rb +276 -0
- data/lib/crimson-falcon/models/k8sreg_create_azure_sub_req.rb +246 -0
- data/lib/crimson-falcon/models/k8sreg_get_aws_accounts_resp.rb +276 -0
- data/lib/crimson-falcon/models/k8sreg_get_azure_bash_script_resp.rb +276 -0
- data/lib/crimson-falcon/models/k8sreg_get_azure_subscriptions_resp.rb +276 -0
- data/lib/crimson-falcon/models/k8sreg_get_azure_tenant_config_resp.rb +276 -0
- data/lib/crimson-falcon/models/k8sreg_get_azure_tenant_info_resp.rb +276 -0
- data/lib/crimson-falcon/models/k8sreg_get_clusters_resp.rb +276 -0
- data/lib/crimson-falcon/models/k8sreg_get_locations_resp.rb +276 -0
- data/lib/crimson-falcon/models/k8sreg_get_scripts_resp.rb +276 -0
- data/lib/crimson-falcon/models/k8sreg_list_cluster_cloud_item_resp.rb +326 -0
- data/lib/crimson-falcon/models/k8sreg_list_cluster_cloud_resp.rb +276 -0
- data/lib/crimson-falcon/models/k8sreg_location_resp.rb +258 -0
- data/lib/crimson-falcon/models/k8sreg_regen_api_key_resp.rb +276 -0
- data/lib/crimson-falcon/models/k8sreg_version_resp.rb +267 -0
- data/lib/crimson-falcon/models/main_available_stream_v2.rb +286 -0
- data/lib/crimson-falcon/models/main_discovery_response_v2.rb +271 -0
- data/lib/crimson-falcon/models/main_session_token.rb +258 -0
- data/lib/crimson-falcon/models/malquery_external_exact_search_parameters_v1.rb +256 -0
- data/lib/crimson-falcon/models/malquery_external_hunt_options.rb +304 -0
- data/lib/crimson-falcon/models/malquery_external_hunt_parameters_v1.rb +254 -0
- data/lib/crimson-falcon/models/malquery_external_query_response.rb +273 -0
- data/lib/crimson-falcon/models/malquery_external_resource.rb +401 -0
- data/lib/crimson-falcon/models/malquery_fuzzy_options.rb +250 -0
- data/lib/crimson-falcon/models/malquery_fuzzy_search_meta_info.rb +310 -0
- data/lib/crimson-falcon/models/malquery_fuzzy_search_parameters_v1.rb +255 -0
- data/lib/crimson-falcon/models/malquery_fuzzy_search_response.rb +273 -0
- data/lib/crimson-falcon/models/malquery_multi_download_request_v1.rb +247 -0
- data/lib/crimson-falcon/models/malquery_query_error.rb +276 -0
- data/lib/crimson-falcon/models/malquery_query_meta_info.rb +301 -0
- data/lib/crimson-falcon/models/malquery_rate_limits_meta.rb +374 -0
- data/lib/crimson-falcon/models/malquery_rate_limits_response.rb +260 -0
- data/lib/crimson-falcon/models/malquery_request_meta_info.rb +361 -0
- data/lib/crimson-falcon/models/malquery_request_response.rb +273 -0
- data/lib/crimson-falcon/models/malquery_sample_metadata.rb +310 -0
- data/lib/crimson-falcon/models/malquery_sample_metadata_response.rb +278 -0
- data/lib/crimson-falcon/models/malquery_samples_metadata_meta_info.rb +289 -0
- data/lib/crimson-falcon/models/malquery_search_parameter.rb +260 -0
- data/lib/crimson-falcon/models/malquery_stats.rb +305 -0
- data/lib/crimson-falcon/models/malquery_user_request_count.rb +258 -0
- data/lib/crimson-falcon/models/messages_activity.rb +346 -0
- data/lib/crimson-falcon/models/messages_alert.rb +272 -0
- data/lib/crimson-falcon/models/messages_attachment.rb +314 -0
- data/lib/crimson-falcon/models/messages_author.rb +309 -0
- data/lib/crimson-falcon/models/messages_case.rb +466 -0
- data/lib/crimson-falcon/models/messages_detection.rb +258 -0
- data/lib/crimson-falcon/models/messages_incident.rb +258 -0
- data/lib/crimson-falcon/models/mlscannerapi_meta_info.rb +294 -0
- data/lib/crimson-falcon/models/mlscannerapi_query_response.rb +276 -0
- data/lib/crimson-falcon/models/mlscannerapi_quota.rb +272 -0
- data/lib/crimson-falcon/models/mlscannerapi_samples_scan_parameters.rb +246 -0
- data/lib/crimson-falcon/models/mlscannerapi_samples_scan_result.rb +297 -0
- data/lib/crimson-falcon/models/mlscannerapi_scan_v1_response.rb +276 -0
- data/lib/crimson-falcon/models/mlscannerapi_scanned_sample.rb +262 -0
- data/lib/crimson-falcon/models/model_argument.rb +442 -0
- data/lib/crimson-falcon/models/model_file.rb +356 -0
- data/lib/crimson-falcon/models/model_session_log.rb +342 -0
- data/lib/crimson-falcon/models/models_access_health_details.rb +265 -0
- data/lib/crimson-falcon/models/models_application_library.rb +293 -0
- data/lib/crimson-falcon/models/models_application_package_info_type.rb +260 -0
- data/lib/crimson-falcon/models/models_aws_account_access_health.rb +239 -0
- data/lib/crimson-falcon/models/models_aws_account_request_v1.rb +300 -0
- data/lib/crimson-falcon/models/models_aws_account_v1.rb +408 -0
- data/lib/crimson-falcon/models/models_aws_accounts_v1.rb +276 -0
- data/lib/crimson-falcon/models/models_aws_customer_settings_request_v1.rb +250 -0
- data/lib/crimson-falcon/models/models_base_response_v1.rb +260 -0
- data/lib/crimson-falcon/models/models_create_aws_accounts_v1.rb +246 -0
- data/lib/crimson-falcon/models/models_customer_configurations_v1.rb +276 -0
- data/lib/crimson-falcon/models/models_modify_aws_customer_settings_v1.rb +246 -0
- data/lib/crimson-falcon/models/models_package_info_type.rb +320 -0
- data/lib/crimson-falcon/models/models_update_aws_accounts_v1.rb +246 -0
- data/lib/crimson-falcon/models/models_verify_access_response_v1.rb +276 -0
- data/lib/crimson-falcon/models/msa_affected_entity.rb +258 -0
- data/lib/crimson-falcon/models/msa_aggregate_query_request.rb +478 -0
- data/lib/crimson-falcon/models/msa_aggregates_response.rb +276 -0
- data/lib/crimson-falcon/models/msa_aggregation_result.rb +269 -0
- data/lib/crimson-falcon/models/msa_aggregation_result_item.rb +327 -0
- data/lib/crimson-falcon/models/msa_api_error.rb +267 -0
- data/lib/crimson-falcon/models/msa_base_entities_response.rb +260 -0
- data/lib/crimson-falcon/models/msa_date_range_spec.rb +258 -0
- data/lib/crimson-falcon/models/msa_entities_response.rb +274 -0
- data/lib/crimson-falcon/models/msa_entity_action_request.rb +241 -0
- data/lib/crimson-falcon/models/msa_entity_action_request_v2.rb +257 -0
- data/lib/crimson-falcon/models/msa_errors_only.rb +260 -0
- data/lib/crimson-falcon/models/msa_facet.rb +287 -0
- data/lib/crimson-falcon/models/msa_facets_response.rb +276 -0
- data/lib/crimson-falcon/models/msa_ids_request.rb +246 -0
- data/lib/crimson-falcon/models/msa_meta_info.rb +285 -0
- data/lib/crimson-falcon/models/msa_paging.rb +272 -0
- data/lib/crimson-falcon/models/msa_query_response.rb +276 -0
- data/lib/crimson-falcon/models/msa_range_spec.rb +258 -0
- data/lib/crimson-falcon/models/msa_reply_affected_entities.rb +276 -0
- data/lib/crimson-falcon/models/msa_reply_meta_only.rb +255 -0
- data/lib/crimson-falcon/models/msa_resources.rb +244 -0
- data/lib/crimson-falcon/models/msaspec_action_parameter.rb +258 -0
- data/lib/crimson-falcon/models/msaspec_error.rb +267 -0
- data/lib/crimson-falcon/models/msaspec_ids_request.rb +246 -0
- data/lib/crimson-falcon/models/msaspec_meta_info.rb +285 -0
- data/lib/crimson-falcon/models/msaspec_paging.rb +272 -0
- data/lib/crimson-falcon/models/msaspec_query_response.rb +271 -0
- data/lib/crimson-falcon/models/msaspec_response_fields.rb +255 -0
- data/lib/crimson-falcon/models/msaspec_writes.rb +244 -0
- data/lib/crimson-falcon/models/oauth2_access_token_request.rb +270 -0
- data/lib/crimson-falcon/models/patterndisposition_pattern_disposition.rb +538 -0
- data/lib/crimson-falcon/models/policy_sensor_update_schedule.rb +274 -0
- data/lib/crimson-falcon/models/policy_sensor_update_scheduler.rb +274 -0
- data/lib/crimson-falcon/models/prevention_category_resp_v1.rb +263 -0
- data/lib/crimson-falcon/models/prevention_create_policies_req_v1.rb +248 -0
- data/lib/crimson-falcon/models/prevention_create_policy_req_v1.rb +326 -0
- data/lib/crimson-falcon/models/prevention_policy_v1.rb +466 -0
- data/lib/crimson-falcon/models/prevention_resp_v1.rb +277 -0
- data/lib/crimson-falcon/models/prevention_setting_req_v1.rb +261 -0
- data/lib/crimson-falcon/models/prevention_setting_resp_v1.rb +335 -0
- data/lib/crimson-falcon/models/prevention_update_policies_req_v1.rb +248 -0
- data/lib/crimson-falcon/models/prevention_update_policy_req_v1.rb +283 -0
- data/lib/crimson-falcon/models/processesapi_msa_process_detail_response.rb +276 -0
- data/lib/crimson-falcon/models/processesapi_process_detail.rb +356 -0
- data/lib/crimson-falcon/models/public_acl.rb +268 -0
- data/lib/crimson-falcon/models/public_after.rb +248 -0
- data/lib/crimson-falcon/models/public_attribute.rb +258 -0
- data/lib/crimson-falcon/models/public_basic.rb +257 -0
- data/lib/crimson-falcon/models/public_before.rb +248 -0
- data/lib/crimson-falcon/models/public_change.rb +587 -0
- data/lib/crimson-falcon/models/public_dacl.rb +251 -0
- data/lib/crimson-falcon/models/public_dacl_entity.rb +284 -0
- data/lib/crimson-falcon/models/public_diff.rb +239 -0
- data/lib/crimson-falcon/models/public_diff_hash.rb +239 -0
- data/lib/crimson-falcon/models/public_diff_type.rb +239 -0
- data/lib/crimson-falcon/models/public_get_changes_response.rb +271 -0
- data/lib/crimson-falcon/models/public_group.rb +248 -0
- data/lib/crimson-falcon/models/public_host.rb +295 -0
- data/lib/crimson-falcon/models/public_host_group.rb +239 -0
- data/lib/crimson-falcon/models/public_owner.rb +248 -0
- data/lib/crimson-falcon/models/public_permissions.rb +267 -0
- data/lib/crimson-falcon/models/public_permissions_lin.rb +290 -0
- data/lib/crimson-falcon/models/public_policy.rb +248 -0
- data/lib/crimson-falcon/models/public_policy_rule.rb +239 -0
- data/lib/crimson-falcon/models/public_policy_rule_group.rb +248 -0
- data/lib/crimson-falcon/models/public_prevalence.rb +288 -0
- data/lib/crimson-falcon/models/public_tag.rb +239 -0
- data/lib/crimson-falcon/models/quarantine_quarantined_file.rb +387 -0
- data/lib/crimson-falcon/models/quarantine_quarantined_file_path.rb +266 -0
- data/lib/crimson-falcon/models/reconmsa_api_error.rb +287 -0
- data/lib/crimson-falcon/models/reconmsa_api_error_detail.rb +272 -0
- data/lib/crimson-falcon/models/registration_aws_account_console_url.rb +248 -0
- data/lib/crimson-falcon/models/registration_aws_account_create_request_d4_c_ext_v2.rb +246 -0
- data/lib/crimson-falcon/models/registration_aws_account_create_request_ext_v2.rb +246 -0
- data/lib/crimson-falcon/models/registration_aws_account_d4_c_ext_v2.rb +304 -0
- data/lib/crimson-falcon/models/registration_aws_account_ext_v2.rb +331 -0
- data/lib/crimson-falcon/models/registration_aws_account_patch.rb +303 -0
- data/lib/crimson-falcon/models/registration_aws_account_patch_request.rb +246 -0
- data/lib/crimson-falcon/models/registration_aws_account_response_v2.rb +276 -0
- data/lib/crimson-falcon/models/registration_aws_account_script.rb +239 -0
- data/lib/crimson-falcon/models/registration_aws_provision_get_account_script_response_v2.rb +276 -0
- data/lib/crimson-falcon/models/registration_azure_account_create_request_external_v1.rb +246 -0
- data/lib/crimson-falcon/models/registration_azure_account_external_v1.rb +286 -0
- data/lib/crimson-falcon/models/registration_azure_account_response_v1.rb +276 -0
- data/lib/crimson-falcon/models/registration_azure_account_v1_ext.rb +466 -0
- data/lib/crimson-falcon/models/registration_azure_download_certificate_response_v1.rb +276 -0
- data/lib/crimson-falcon/models/registration_azure_key_v1.rb +294 -0
- data/lib/crimson-falcon/models/registration_azure_provision_get_user_script_response_v1.rb +276 -0
- data/lib/crimson-falcon/models/registration_azure_tenant_configuration_response_v1.rb +276 -0
- data/lib/crimson-falcon/models/registration_azure_tenant_default_subscription_id_response_v1.rb +274 -0
- data/lib/crimson-falcon/models/registration_azure_tenant_ids_response_v1.rb +276 -0
- data/lib/crimson-falcon/models/registration_azure_tenant_ids_response_v1_resources.rb +260 -0
- data/lib/crimson-falcon/models/registration_azure_user_script.rb +255 -0
- data/lib/crimson-falcon/models/registration_external_ioa_event_response.rb +274 -0
- data/lib/crimson-falcon/models/registration_external_ioa_resources.rb +264 -0
- data/lib/crimson-falcon/models/registration_external_iom_event_response.rb +269 -0
- data/lib/crimson-falcon/models/registration_external_iom_event_response_v2.rb +271 -0
- data/lib/crimson-falcon/models/registration_gcp_account_create_request_ext_v1.rb +246 -0
- data/lib/crimson-falcon/models/registration_gcp_account_ext_v1.rb +253 -0
- data/lib/crimson-falcon/models/registration_gcp_account_response_v1.rb +276 -0
- data/lib/crimson-falcon/models/registration_gcp_provision_get_user_script_response_v1.rb +276 -0
- data/lib/crimson-falcon/models/registration_gcp_user_script.rb +255 -0
- data/lib/crimson-falcon/models/registration_ioa_event.rb +617 -0
- data/lib/crimson-falcon/models/registration_iom_event.rb +509 -0
- data/lib/crimson-falcon/models/registration_iom_event_ids_response_v2.rb +276 -0
- data/lib/crimson-falcon/models/registration_iom_event_v2.rb +584 -0
- data/lib/crimson-falcon/models/registration_iom_resources.rb +241 -0
- data/lib/crimson-falcon/models/registration_msa_meta_info_extension.rb +253 -0
- data/lib/crimson-falcon/models/registration_msa_paging_extension.rb +253 -0
- data/lib/crimson-falcon/models/registration_msa_spec_meta_info_extension.rb +253 -0
- data/lib/crimson-falcon/models/registration_policy_ext_v1.rb +332 -0
- data/lib/crimson-falcon/models/registration_policy_request_ext_v1.rb +246 -0
- data/lib/crimson-falcon/models/registration_policy_response_v1.rb +276 -0
- data/lib/crimson-falcon/models/registration_policy_settings_response_v1.rb +276 -0
- data/lib/crimson-falcon/models/registration_scan_schedule_response_v1.rb +276 -0
- data/lib/crimson-falcon/models/registration_scan_schedule_update_request_v1.rb +246 -0
- data/lib/crimson-falcon/models/registration_static_scripts_response.rb +276 -0
- data/lib/crimson-falcon/models/registryassessment_external_cred_payload.rb +244 -0
- data/lib/crimson-falcon/models/registryassessment_external_registry_patch_payload.rb +262 -0
- data/lib/crimson-falcon/models/registryassessment_external_registry_payload.rb +290 -0
- data/lib/crimson-falcon/models/remote_response_create_policies_v1.rb +248 -0
- data/lib/crimson-falcon/models/remote_response_create_policy_req_v1.rb +326 -0
- data/lib/crimson-falcon/models/remote_response_policy_v1.rb +449 -0
- data/lib/crimson-falcon/models/remote_response_resp_v1.rb +277 -0
- data/lib/crimson-falcon/models/remote_response_update_policies_req_v1.rb +248 -0
- data/lib/crimson-falcon/models/remote_response_update_policy_req_v1.rb +283 -0
- data/lib/crimson-falcon/models/resource.rb +252 -0
- data/lib/crimson-falcon/models/resources.rb +274 -0
- data/lib/crimson-falcon/models/sadomain_create_rule_request_v1.rb +335 -0
- data/lib/crimson-falcon/models/sadomain_customer_assets.rb +252 -0
- data/lib/crimson-falcon/models/sadomain_rule.rb +463 -0
- data/lib/crimson-falcon/models/sadomain_submit_for_blocking_info.rb +272 -0
- data/lib/crimson-falcon/models/sadomain_typosquatting_base_domain.rb +309 -0
- data/lib/crimson-falcon/models/sadomain_typosquatting_component.rb +312 -0
- data/lib/crimson-falcon/models/sadomain_typosquatting_parent_domain.rb +275 -0
- data/lib/crimson-falcon/models/sadomain_whois_record.rb +300 -0
- data/lib/crimson-falcon/models/sadomain_whois_registrant.rb +275 -0
- data/lib/crimson-falcon/models/sadomain_whois_registrar.rb +262 -0
- data/lib/crimson-falcon/models/schema_sensor_event.rb +330 -0
- data/lib/crimson-falcon/models/schema_sensor_event_field.rb +286 -0
- data/lib/crimson-falcon/models/schema_sensor_event_response_v1.rb +271 -0
- data/lib/crimson-falcon/models/schema_sensor_field.rb +316 -0
- data/lib/crimson-falcon/models/schema_sensor_field_response_v1.rb +271 -0
- data/lib/crimson-falcon/models/schema_sensor_field_value.rb +272 -0
- data/lib/crimson-falcon/models/sensor_update_build_req_v1.rb +258 -0
- data/lib/crimson-falcon/models/sensor_update_build_resp_v1.rb +321 -0
- data/lib/crimson-falcon/models/sensor_update_builds_resp_v1.rb +277 -0
- data/lib/crimson-falcon/models/sensor_update_create_policies_req_v1.rb +248 -0
- data/lib/crimson-falcon/models/sensor_update_create_policies_req_v2.rb +248 -0
- data/lib/crimson-falcon/models/sensor_update_create_policy_req_v1.rb +313 -0
- data/lib/crimson-falcon/models/sensor_update_create_policy_req_v2.rb +313 -0
- data/lib/crimson-falcon/models/sensor_update_kernel_resp_v1.rb +418 -0
- data/lib/crimson-falcon/models/sensor_update_kernels_resp_v1.rb +277 -0
- data/lib/crimson-falcon/models/sensor_update_policy_v1.rb +445 -0
- data/lib/crimson-falcon/models/sensor_update_policy_v2.rb +445 -0
- data/lib/crimson-falcon/models/sensor_update_resp_v1.rb +277 -0
- data/lib/crimson-falcon/models/sensor_update_resp_v2.rb +277 -0
- data/lib/crimson-falcon/models/sensor_update_settings_req_v1.rb +239 -0
- data/lib/crimson-falcon/models/sensor_update_settings_req_v2.rb +324 -0
- data/lib/crimson-falcon/models/sensor_update_settings_resp_v1.rb +244 -0
- data/lib/crimson-falcon/models/sensor_update_settings_resp_v2.rb +380 -0
- data/lib/crimson-falcon/models/sensor_update_update_policies_req_v1.rb +248 -0
- data/lib/crimson-falcon/models/sensor_update_update_policies_req_v2.rb +248 -0
- data/lib/crimson-falcon/models/sensor_update_update_policy_req_v1.rb +275 -0
- data/lib/crimson-falcon/models/sensor_update_update_policy_req_v2.rb +275 -0
- data/lib/crimson-falcon/models/state_online_state_resp_v1.rb +276 -0
- data/lib/crimson-falcon/models/state_online_state_result_v1.rb +276 -0
- data/lib/crimson-falcon/models/sv_exclusions_create_req_v1.rb +259 -0
- data/lib/crimson-falcon/models/sv_exclusions_resp_v1.rb +277 -0
- data/lib/crimson-falcon/models/sv_exclusions_sv_exclusion_v1.rb +372 -0
- data/lib/crimson-falcon/models/sv_exclusions_update_req_v1.rb +273 -0
- data/lib/crimson-falcon/models/threatgraph_crawl_edges_request.rb +306 -0
- data/lib/crimson-falcon/models/uninstall_token_resp_v1.rb +278 -0
- data/lib/crimson-falcon/models/uninstall_token_reveal_uninstall_token_req_v1.rb +256 -0
- data/lib/crimson-falcon/models/uninstall_token_uninstall_token_v1.rb +276 -0
- data/lib/crimson-falcon/models/upload_sample_v2_request.rb +282 -0
- data/lib/crimson-falcon/version.rb +37 -0
- data/lib/crimson-falcon.rb +962 -0
- data/spec/api/alerts_api_spec.rb +105 -0
- data/spec/api/cloud_connect_aws_api_spec.rb +162 -0
- data/spec/api/cspm_registration_api_spec.rb +362 -0
- data/spec/api/custom_ioa_api_spec.rb +284 -0
- data/spec/api/d4c_registration_api_spec.rb +258 -0
- data/spec/api/detects_api_spec.rb +105 -0
- data/spec/api/device_control_policies_api_spec.rb +203 -0
- data/spec/api/discover_api_spec.rb +217 -0
- data/spec/api/discover_iot_api_spec.rb +82 -0
- data/spec/api/event_schema_api_spec.rb +92 -0
- data/spec/api/event_streams_api_spec.rb +82 -0
- data/spec/api/falcon_complete_dashboard_api_spec.rb +233 -0
- data/spec/api/falcon_container_api_spec.rb +67 -0
- data/spec/api/falcon_container_cli_api_spec.rb +68 -0
- data/spec/api/falcon_container_image_api_spec.rb +115 -0
- data/spec/api/falconx_sandbox_api_spec.rb +240 -0
- data/spec/api/field_schema_api_spec.rb +82 -0
- data/spec/api/filevantage_api_spec.rb +84 -0
- data/spec/api/firewall_management_api_spec.rb +467 -0
- data/spec/api/firewall_policies_api_spec.rb +183 -0
- data/spec/api/host_group_api_spec.rb +172 -0
- data/spec/api/hosts_api_spec.rb +202 -0
- data/spec/api/identity_protection_api_spec.rb +68 -0
- data/spec/api/incidents_api_spec.rb +134 -0
- data/spec/api/installation_tokens_api_spec.rb +151 -0
- data/spec/api/installation_tokens_settings_api_spec.rb +68 -0
- data/spec/api/intel_api_spec.rb +319 -0
- data/spec/api/ioa_exclusions_api_spec.rb +116 -0
- data/spec/api/ioc_api_spec.rb +223 -0
- data/spec/api/iocs_api_spec.rb +109 -0
- data/spec/api/kubernetes_protection_api_spec.rb +282 -0
- data/spec/api/malquery_api_spec.rb +155 -0
- data/spec/api/message_center_api_spec.rb +177 -0
- data/spec/api/ml_exclusions_api_spec.rb +116 -0
- data/spec/api/mobile_enrollment_api_spec.rb +70 -0
- data/spec/api/mssp_api_spec.rb +396 -0
- data/spec/api/oauth2_api_spec.rb +82 -0
- data/spec/api/ods_api_spec.rb +235 -0
- data/spec/api/overwatch_dashboard_api_spec.rb +112 -0
- data/spec/api/prevention_policies_api_spec.rb +182 -0
- data/spec/api/public_assessments_api_spec.rb +72 -0
- data/spec/api/quarantine_api_spec.rb +127 -0
- data/spec/api/quick_scan_api_spec.rb +104 -0
- data/spec/api/real_time_response_admin_api_spec.rb +237 -0
- data/spec/api/real_time_response_api_spec.rb +338 -0
- data/spec/api/recon_api_spec.rb +360 -0
- data/spec/api/report_executions_api_spec.rb +105 -0
- data/spec/api/response_policies_api_spec.rb +182 -0
- data/spec/api/sample_uploads_api_spec.rb +196 -0
- data/spec/api/scheduled_reports_api_spec.rb +94 -0
- data/spec/api/sensor_download_api_spec.rb +117 -0
- data/spec/api/sensor_update_policies_api_spec.rb +279 -0
- data/spec/api/sensor_visibility_exclusions_api_spec.rb +116 -0
- data/spec/api/spotlight_evaluation_logic_api_spec.rb +96 -0
- data/spec/api/spotlight_vulnerabilities_api_spec.rb +108 -0
- data/spec/api/tailored_intelligence_api_spec.rb +120 -0
- data/spec/api/user_management_api_spec.rb +313 -0
- data/spec/api/zero_trust_assessment_api_spec.rb +92 -0
- data/spec/api_client_spec.rb +250 -0
- data/spec/configuration_spec.rb +64 -0
- data/spec/models/api_action_resp_v1_spec.rb +68 -0
- data/spec/models/api_action_v1_spec.rb +68 -0
- data/spec/models/api_aggregates_response_spec.rb +68 -0
- data/spec/models/api_audit_event_details_resource_v1_spec.rb +86 -0
- data/spec/models/api_audit_event_details_response_v1_spec.rb +68 -0
- data/spec/models/api_bulk_update_req_v1_spec.rb +128 -0
- data/spec/models/api_cred_payload_spec.rb +62 -0
- data/spec/models/api_customer_settings_patch_request_v1_spec.rb +62 -0
- data/spec/models/api_customer_settings_resource_v1_spec.rb +62 -0
- data/spec/models/api_customer_settings_response_v1_spec.rb +68 -0
- data/spec/models/api_exposed_data_file_details_v1_spec.rb +74 -0
- data/spec/models/api_exposed_data_record_financial_v1_spec.rb +68 -0
- data/spec/models/api_exposed_data_record_location_v1_spec.rb +86 -0
- data/spec/models/api_exposed_data_record_social_v1_spec.rb +104 -0
- data/spec/models/api_image_lookup_request_spec.rb +68 -0
- data/spec/models/api_indicator_create_req_v1_spec.rb +128 -0
- data/spec/models/api_indicator_create_reqs_v1_spec.rb +62 -0
- data/spec/models/api_indicator_query_resp_v1_spec.rb +68 -0
- data/spec/models/api_indicator_resp_v1_spec.rb +68 -0
- data/spec/models/api_indicator_update_req_v1_spec.rb +122 -0
- data/spec/models/api_indicator_update_reqs_v1_spec.rb +68 -0
- data/spec/models/api_indicator_v1_spec.rb +182 -0
- data/spec/models/api_indicators_query_meta_spec.rb +74 -0
- data/spec/models/api_indicators_query_paging_spec.rb +74 -0
- data/spec/models/api_indicators_report_request_spec.rb +68 -0
- data/spec/models/api_indicators_sorted_search_spec.rb +68 -0
- data/spec/models/api_message_center_activity_response_spec.rb +68 -0
- data/spec/models/api_message_center_attachment_upload_response_spec.rb +68 -0
- data/spec/models/api_message_center_cases_response_spec.rb +68 -0
- data/spec/models/api_metadata_req_v1_spec.rb +56 -0
- data/spec/models/api_metadata_v1_spec.rb +104 -0
- data/spec/models/api_notification_exposed_data_record_entities_response_v1_spec.rb +68 -0
- data/spec/models/api_notification_exposed_data_record_v1_spec.rb +260 -0
- data/spec/models/api_pattern_v1_spec.rb +62 -0
- data/spec/models/api_patterns_response_spec.rb +68 -0
- data/spec/models/api_platforms_response_spec.rb +68 -0
- data/spec/models/api_post_enrollment_details_response_spec.rb +68 -0
- data/spec/models/api_post_enrollment_details_spec.rb +62 -0
- data/spec/models/api_rule_create_v1_spec.rb +98 -0
- data/spec/models/api_rule_details_v1_spec.rb +74 -0
- data/spec/models/api_rule_group_create_request_v1_spec.rb +74 -0
- data/spec/models/api_rule_group_modify_request_v1_spec.rb +86 -0
- data/spec/models/api_rule_group_v1_spec.rb +146 -0
- data/spec/models/api_rule_groups_response_spec.rb +68 -0
- data/spec/models/api_rule_type_v1_spec.rb +98 -0
- data/spec/models/api_rule_types_response_spec.rb +68 -0
- data/spec/models/api_rule_update_v1_spec.rb +98 -0
- data/spec/models/api_rule_updates_request_v1_spec.rb +74 -0
- data/spec/models/api_rule_v1_spec.rb +188 -0
- data/spec/models/api_rules_get_request_v1_spec.rb +56 -0
- data/spec/models/api_rules_response_spec.rb +68 -0
- data/spec/models/api_token_create_request_v1_spec.rb +68 -0
- data/spec/models/api_token_details_resource_v1_spec.rb +104 -0
- data/spec/models/api_token_details_response_v1_spec.rb +68 -0
- data/spec/models/api_token_patch_request_v1_spec.rb +68 -0
- data/spec/models/api_user_metadata_response_spec.rb +68 -0
- data/spec/models/api_user_role_ids_response_spec.rb +68 -0
- data/spec/models/api_user_role_response_spec.rb +68 -0
- data/spec/models/api_validation_request_field_v1_spec.rb +74 -0
- data/spec/models/api_validation_request_v1_spec.rb +56 -0
- data/spec/models/api_validation_response_v1_spec.rb +68 -0
- data/spec/models/base_policy_members_resp_v1_spec.rb +68 -0
- data/spec/models/base_set_policy_precedence_req_v1_spec.rb +66 -0
- data/spec/models/binservapi_msa_put_file_response_spec.rb +68 -0
- data/spec/models/client_archive_create_response_v1_spec.rb +68 -0
- data/spec/models/client_archive_list_files_response_v1_spec.rb +68 -0
- data/spec/models/client_archive_with_files_v1_spec.rb +98 -0
- data/spec/models/client_extraction_create_request_v1_spec.rb +68 -0
- data/spec/models/client_extraction_create_response_v1_spec.rb +68 -0
- data/spec/models/client_extraction_file_parameters_v1_spec.rb +68 -0
- data/spec/models/client_extraction_file_result_v1_spec.rb +80 -0
- data/spec/models/client_extraction_list_files_response_v1_spec.rb +68 -0
- data/spec/models/client_extraction_with_files_v1_spec.rb +80 -0
- data/spec/models/client_query_samples_request_spec.rb +56 -0
- data/spec/models/client_sample_metadata_response_v2_spec.rb +68 -0
- data/spec/models/client_sample_metadata_v2_spec.rb +62 -0
- data/spec/models/common_cid_audit_result_spec.rb +74 -0
- data/spec/models/common_os_audit_spec.rb +74 -0
- data/spec/models/core_entities_response_spec.rb +68 -0
- data/spec/models/detection_aggregate_indicator_spec.rb +92 -0
- data/spec/models/detection_aggregate_threat_intel_spec.rb +56 -0
- data/spec/models/detection_enrichment_host_spec.rb +92 -0
- data/spec/models/detection_enrichment_spec.rb +62 -0
- data/spec/models/detection_host_network_spec.rb +68 -0
- data/spec/models/detection_inventory_enrichment_spec.rb +68 -0
- data/spec/models/detects_alert_spec.rb +260 -0
- data/spec/models/detects_behavior_spec.rb +254 -0
- data/spec/models/detects_device_detail_indexed_spec.rb +326 -0
- data/spec/models/detects_host_info_spec.rb +62 -0
- data/spec/models/detects_parent_details_spec.rb +74 -0
- data/spec/models/detects_quarantined_file_spec.rb +74 -0
- data/spec/models/detectsapi_patch_entities_alerts_v2_request_spec.rb +62 -0
- data/spec/models/detectsapi_post_entities_alerts_v1_request_spec.rb +56 -0
- data/spec/models/detectsapi_post_entities_alerts_v1_response_spec.rb +68 -0
- data/spec/models/device_control_create_policies_v1_spec.rb +56 -0
- data/spec/models/device_control_create_policy_req_v1_spec.rb +84 -0
- data/spec/models/device_control_exception_req_v1_spec.rb +122 -0
- data/spec/models/device_control_exception_resp_v1_spec.rb +134 -0
- data/spec/models/device_control_policy_v1_spec.rb +126 -0
- data/spec/models/device_control_req_update_default_dc_policy_v1_spec.rb +56 -0
- data/spec/models/device_control_resp_v1_spec.rb +68 -0
- data/spec/models/device_control_resp_v2_spec.rb +68 -0
- data/spec/models/device_control_settings_req_v1_spec.rb +94 -0
- data/spec/models/device_control_settings_resp_v1_spec.rb +88 -0
- data/spec/models/device_control_update_policies_req_v1_spec.rb +56 -0
- data/spec/models/device_control_update_policy_req_v1_spec.rb +74 -0
- data/spec/models/device_control_usb_class_exceptions_req_v1_spec.rb +72 -0
- data/spec/models/device_control_usb_class_exceptions_response_spec.rb +72 -0
- data/spec/models/device_control_usb_custom_notification_spec.rb +62 -0
- data/spec/models/device_control_usb_custom_notifications_spec.rb +62 -0
- data/spec/models/device_device_meta_spec.rb +62 -0
- data/spec/models/device_device_policy_spec.rb +110 -0
- data/spec/models/device_device_spec.rb +566 -0
- data/spec/models/device_managed_app_spec.rb +56 -0
- data/spec/models/device_managed_apps_spec.rb +86 -0
- data/spec/models/device_mapped_device_policies_spec.rb +164 -0
- data/spec/models/deviceapi_device_details_response_swagger_spec.rb +68 -0
- data/spec/models/deviceapi_device_paging_spec.rb +74 -0
- data/spec/models/deviceapi_device_response_spec.rb +68 -0
- data/spec/models/deviceapi_device_swagger_spec.rb +548 -0
- data/spec/models/deviceapi_group_meta_spec.rb +62 -0
- data/spec/models/deviceapi_group_response_v1_spec.rb +116 -0
- data/spec/models/deviceapi_groups_response_v1_spec.rb +68 -0
- data/spec/models/deviceapi_login_detail_v1_spec.rb +68 -0
- data/spec/models/deviceapi_login_history_response_v1_spec.rb +68 -0
- data/spec/models/deviceapi_login_info_v1_spec.rb +62 -0
- data/spec/models/deviceapi_network_address_history_response_v1_spec.rb +68 -0
- data/spec/models/deviceapi_network_address_history_v1_spec.rb +68 -0
- data/spec/models/deviceapi_network_address_v1_spec.rb +68 -0
- data/spec/models/deviceapi_request_meta_spec.rb +74 -0
- data/spec/models/deviceapi_update_device_details_response_v1_spec.rb +74 -0
- data/spec/models/deviceapi_update_device_tags_request_v1_spec.rb +68 -0
- data/spec/models/deviceapi_update_device_tags_swagger_v1_spec.rb +68 -0
- data/spec/models/domain_access_token_response_v1_spec.rb +92 -0
- data/spec/models/domain_account_access_result_spec.rb +68 -0
- data/spec/models/domain_action_entities_response_v1_spec.rb +68 -0
- data/spec/models/domain_action_parameter_spec.rb +66 -0
- data/spec/models/domain_action_user_roles_request_spec.rb +74 -0
- data/spec/models/domain_action_v1_spec.rb +122 -0
- data/spec/models/domain_activity_creation_request_spec.rb +74 -0
- data/spec/models/domain_actor_document_spec.rb +242 -0
- data/spec/models/domain_actors_response_spec.rb +68 -0
- data/spec/models/domain_aggregates_response_spec.rb +68 -0
- data/spec/models/domain_api_combined_findings_response_v1_spec.rb +68 -0
- data/spec/models/domain_api_detection_document_spec.rb +188 -0
- data/spec/models/domain_api_error_spec.rb +68 -0
- data/spec/models/domain_api_evaluation_logic_comparisons_v1_spec.rb +62 -0
- data/spec/models/domain_api_evaluation_logic_entity_comparison_v1_spec.rb +74 -0
- data/spec/models/domain_api_evaluation_logic_item_v1_spec.rb +110 -0
- data/spec/models/domain_api_evaluation_logic_state_comparison_v1_spec.rb +62 -0
- data/spec/models/domain_api_evaluation_logic_v1_spec.rb +92 -0
- data/spec/models/domain_api_finding_facet_v1_spec.rb +92 -0
- data/spec/models/domain_api_finding_rule_v1_spec.rb +128 -0
- data/spec/models/domain_api_finding_with_rule_v1_spec.rb +80 -0
- data/spec/models/domain_api_host_group_spec.rb +62 -0
- data/spec/models/domain_api_host_info_facet_v1_spec.rb +158 -0
- data/spec/models/domain_api_mitre_attack_tactic_v1_spec.rb +68 -0
- data/spec/models/domain_api_mitre_mitigation_v1_spec.rb +62 -0
- data/spec/models/domain_api_mitre_technique_v1_spec.rb +68 -0
- data/spec/models/domain_api_query_meta_v1_spec.rb +74 -0
- data/spec/models/domain_api_query_paging_v1_spec.rb +68 -0
- data/spec/models/domain_api_remediation_ids_spec.rb +56 -0
- data/spec/models/domain_api_remediation_v2_spec.rb +86 -0
- data/spec/models/domain_api_vulnerability_app_v2_spec.rb +56 -0
- data/spec/models/domain_api_vulnerability_cve_details_facet_v2_spec.rb +152 -0
- data/spec/models/domain_api_vulnerability_cvecisa_info_spec.rb +62 -0
- data/spec/models/domain_api_vulnerability_extended_app_v2_spec.rb +74 -0
- data/spec/models/domain_api_vulnerability_host_facet_v2_spec.rb +164 -0
- data/spec/models/domain_api_vulnerability_remediation_facet_v2_spec.rb +62 -0
- data/spec/models/domain_api_vulnerability_suppression_info_v2_spec.rb +62 -0
- data/spec/models/domain_api_vulnerability_v2_spec.rb +128 -0
- data/spec/models/domain_assessment_items_spec.rb +62 -0
- data/spec/models/domain_assessment_paging_spec.rb +74 -0
- data/spec/models/domain_assessment_spec.rb +74 -0
- data/spec/models/domain_assessments_by_score_response_spec.rb +68 -0
- data/spec/models/domain_assessments_response_spec.rb +68 -0
- data/spec/models/domain_audit_response_spec.rb +68 -0
- data/spec/models/domain_aws_account_v2_spec.rb +266 -0
- data/spec/models/domain_aws_configuration_spec.rb +74 -0
- data/spec/models/domain_awsd4_c_account_v1_spec.rb +86 -0
- data/spec/models/domain_awsd4_c_organization_account_v1_spec.rb +74 -0
- data/spec/models/domain_azure_client_service_principal_v1_spec.rb +128 -0
- data/spec/models/domain_azure_resource_permission_spec.rb +80 -0
- data/spec/models/domain_azure_role_assignment_spec.rb +74 -0
- data/spec/models/domain_base_api_vulnerability_v2_spec.rb +128 -0
- data/spec/models/domain_batch_execute_command_request_spec.rb +80 -0
- data/spec/models/domain_batch_get_cmd_status_response_spec.rb +68 -0
- data/spec/models/domain_batch_get_command_request_spec.rb +68 -0
- data/spec/models/domain_batch_get_command_response_spec.rb +74 -0
- data/spec/models/domain_batch_init_session_request_spec.rb +68 -0
- data/spec/models/domain_batch_init_session_response_spec.rb +74 -0
- data/spec/models/domain_batch_refresh_session_request_spec.rb +62 -0
- data/spec/models/domain_batch_refresh_session_response_spec.rb +68 -0
- data/spec/models/domain_behavior_spec.rb +212 -0
- data/spec/models/domain_benchmark_spec.rb +68 -0
- data/spec/models/domain_botnet_config_source_spec.rb +98 -0
- data/spec/models/domain_botnet_inject_spec.rb +62 -0
- data/spec/models/domain_breach_details_v1_spec.rb +56 -0
- data/spec/models/domain_breached_item_v1_spec.rb +170 -0
- data/spec/models/domain_case_creation_request_spec.rb +86 -0
- data/spec/models/domain_case_creation_request_v2_spec.rb +86 -0
- data/spec/models/domain_child_link_spec.rb +92 -0
- data/spec/models/domain_children_response_v1_spec.rb +62 -0
- data/spec/models/domain_cid_group_members_request_v1_spec.rb +56 -0
- data/spec/models/domain_cid_group_members_response_v1_spec.rb +68 -0
- data/spec/models/domain_cid_group_members_spec.rb +62 -0
- data/spec/models/domain_cid_group_spec.rb +74 -0
- data/spec/models/domain_cid_groups_request_v1_spec.rb +56 -0
- data/spec/models/domain_cid_groups_response_v1_spec.rb +68 -0
- data/spec/models/domain_cid_policy_assignments_spec.rb +194 -0
- data/spec/models/domain_command_execute_request_spec.rb +86 -0
- data/spec/models/domain_command_execute_response_spec.rb +68 -0
- data/spec/models/domain_command_execute_response_wrapper_spec.rb +68 -0
- data/spec/models/domain_condition_spec.rb +80 -0
- data/spec/models/domain_create_action_request_spec.rb +80 -0
- data/spec/models/domain_create_user_request_spec.rb +80 -0
- data/spec/models/domain_credentials_spec.rb +56 -0
- data/spec/models/domain_csix_label_spec.rb +68 -0
- data/spec/models/domain_csix_relation_spec.rb +80 -0
- data/spec/models/domain_ddos_attack_source_spec.rb +128 -0
- data/spec/models/domain_ddos_target_details_spec.rb +110 -0
- data/spec/models/domain_detailed_notification_v1_spec.rb +74 -0
- data/spec/models/domain_detects_entities_patch_request_spec.rb +86 -0
- data/spec/models/domain_device_spec.rb +254 -0
- data/spec/models/domain_discover_api_account_entities_response_spec.rb +68 -0
- data/spec/models/domain_discover_api_account_spec.rb +170 -0
- data/spec/models/domain_discover_api_active_discovery_host_spec.rb +62 -0
- data/spec/models/domain_discover_api_active_discovery_network_spec.rb +56 -0
- data/spec/models/domain_discover_api_application_entities_response_spec.rb +68 -0
- data/spec/models/domain_discover_api_application_host_spec.rb +164 -0
- data/spec/models/domain_discover_api_application_spec.rb +188 -0
- data/spec/models/domain_discover_api_bios_hashes_data_spec.rb +62 -0
- data/spec/models/domain_discover_api_device_slot_spec.rb +104 -0
- data/spec/models/domain_discover_api_disk_size_spec.rb +62 -0
- data/spec/models/domain_discover_api_field_metadata_spec.rb +56 -0
- data/spec/models/domain_discover_api_host_entities_response_spec.rb +68 -0
- data/spec/models/domain_discover_api_host_spec.rb +698 -0
- data/spec/models/domain_discover_api_host_triage_spec.rb +86 -0
- data/spec/models/domain_discover_api_login_entities_response_spec.rb +68 -0
- data/spec/models/domain_discover_api_login_spec.rb +194 -0
- data/spec/models/domain_discover_api_mount_storage_info_spec.rb +68 -0
- data/spec/models/domain_discover_api_network_interface_spec.rb +80 -0
- data/spec/models/domain_discover_apiio_t_host_entities_response_spec.rb +68 -0
- data/spec/models/domain_discover_apiio_t_host_spec.rb +572 -0
- data/spec/models/domain_discover_apios_security_spec.rb +110 -0
- data/spec/models/domain_discover_params_spec.rb +62 -0
- data/spec/models/domain_disposition_spec.rb +62 -0
- data/spec/models/domain_e_crime_kill_chain_spec.rb +170 -0
- data/spec/models/domain_entities_patch_request_spec.rb +68 -0
- data/spec/models/domain_entity_action_request_spec.rb +62 -0
- data/spec/models/domain_entity_spec.rb +74 -0
- data/spec/models/domain_environment_score_spec.rb +80 -0
- data/spec/models/domain_errors_only_spec.rb +62 -0
- data/spec/models/domain_event_entities_response_spec.rb +68 -0
- data/spec/models/domain_event_histogram_spec.rb +86 -0
- data/spec/models/domain_event_spec.rb +134 -0
- data/spec/models/domain_execution_metadata_summary_spec.rb +74 -0
- data/spec/models/domain_execution_metadata_v1_spec.rb +92 -0
- data/spec/models/domain_export_job_entities_response_v1_spec.rb +68 -0
- data/spec/models/domain_export_job_id_response_v1_spec.rb +68 -0
- data/spec/models/domain_export_job_metadata_v1_spec.rb +74 -0
- data/spec/models/domain_export_job_v1_spec.rb +62 -0
- data/spec/models/domain_exposed_data_record_financial_v1_spec.rb +68 -0
- data/spec/models/domain_exposed_data_record_location_v1_spec.rb +86 -0
- data/spec/models/domain_exposed_data_record_social_v1_spec.rb +98 -0
- data/spec/models/domain_external_api_registry_spec.rb +128 -0
- data/spec/models/domain_external_credential_response_spec.rb +86 -0
- data/spec/models/domain_external_query_response_spec.rb +68 -0
- data/spec/models/domain_external_registry_list_response_spec.rb +68 -0
- data/spec/models/domain_external_registry_response_spec.rb +68 -0
- data/spec/models/domain_field_spec.rb +74 -0
- data/spec/models/domain_field_validation_spec.rb +92 -0
- data/spec/models/domain_field_value_spec.rb +86 -0
- data/spec/models/domain_file_count_spec.rb +80 -0
- data/spec/models/domain_file_details_v1_spec.rb +74 -0
- data/spec/models/domain_file_spec.rb +62 -0
- data/spec/models/domain_file_v2_spec.rb +134 -0
- data/spec/models/domain_gcp_account_v1_spec.rb +170 -0
- data/spec/models/domain_image_spec.rb +68 -0
- data/spec/models/domain_incident_spec.rb +224 -0
- data/spec/models/domain_init_request_spec.rb +68 -0
- data/spec/models/domain_init_response_spec.rb +92 -0
- data/spec/models/domain_init_response_wrapper_spec.rb +68 -0
- data/spec/models/domain_key_value_pair_spec.rb +62 -0
- data/spec/models/domain_kill_chain_spec.rb +146 -0
- data/spec/models/domain_last_scheduled_execution_spec.rb +74 -0
- data/spec/models/domain_last_unscheduled_execution_spec.rb +74 -0
- data/spec/models/domain_launch_export_job_request_v1_spec.rb +80 -0
- data/spec/models/domain_launch_export_job_response_v1_spec.rb +68 -0
- data/spec/models/domain_list_files_response_wrapper_spec.rb +68 -0
- data/spec/models/domain_list_files_v2_response_wrapper_spec.rb +68 -0
- data/spec/models/domain_list_sessions_response_msa_spec.rb +68 -0
- data/spec/models/domain_malicious_file_spec.rb +122 -0
- data/spec/models/domain_matched_breach_summary_v1_spec.rb +128 -0
- data/spec/models/domain_matched_rule_spec.rb +68 -0
- data/spec/models/domain_meta_info_spec.rb +74 -0
- data/spec/models/domain_msa_detect_summaries_response_spec.rb +68 -0
- data/spec/models/domain_msa_environment_score_response_spec.rb +68 -0
- data/spec/models/domain_msa_external_behavior_response_spec.rb +68 -0
- data/spec/models/domain_msa_external_incident_response_spec.rb +68 -0
- data/spec/models/domain_msa_incident_perform_action_response_spec.rb +68 -0
- data/spec/models/domain_msa_incident_query_response_spec.rb +68 -0
- data/spec/models/domain_msa_qf_response_spec.rb +68 -0
- data/spec/models/domain_mssp_role_request_v1_spec.rb +56 -0
- data/spec/models/domain_mssp_role_response_v1_spec.rb +68 -0
- data/spec/models/domain_mssp_roles_spec.rb +74 -0
- data/spec/models/domain_multi_command_execute_response_spec.rb +56 -0
- data/spec/models/domain_multi_command_execute_response_wrapper_spec.rb +68 -0
- data/spec/models/domain_multi_pulse_sensor_response_spec.rb +68 -0
- data/spec/models/domain_multi_status_sensor_response_spec.rb +116 -0
- data/spec/models/domain_news_document_spec.rb +188 -0
- data/spec/models/domain_news_response_spec.rb +68 -0
- data/spec/models/domain_notification_config_spec.rb +80 -0
- data/spec/models/domain_notification_details_response_v1_spec.rb +68 -0
- data/spec/models/domain_notification_details_v1_spec.rb +110 -0
- data/spec/models/domain_notification_entities_response_v1_spec.rb +68 -0
- data/spec/models/domain_notification_id_response_spec.rb +68 -0
- data/spec/models/domain_notification_v1_spec.rb +194 -0
- data/spec/models/domain_notifications_spec.rb +68 -0
- data/spec/models/domain_pastebin_text_source_spec.rb +80 -0
- data/spec/models/domain_permission_spec.rb +62 -0
- data/spec/models/domain_platform_spec.rb +62 -0
- data/spec/models/domain_policy_info_spec.rb +344 -0
- data/spec/models/domain_policy_setting_by_account_and_region_spec.rb +86 -0
- data/spec/models/domain_public_indicator_v3_spec.rb +164 -0
- data/spec/models/domain_public_indicators_v3_response_spec.rb +68 -0
- data/spec/models/domain_queries_patch_request_spec.rb +74 -0
- data/spec/models/domain_query_response_spec.rb +68 -0
- data/spec/models/domain_queued_session_command_spec.rb +98 -0
- data/spec/models/domain_queued_session_job_spec.rb +104 -0
- data/spec/models/domain_queued_session_response_wrapper_spec.rb +68 -0
- data/spec/models/domain_quota_spec.rb +62 -0
- data/spec/models/domain_recon_api_error_detail_spec.rb +68 -0
- data/spec/models/domain_recon_api_error_spec.rb +80 -0
- data/spec/models/domain_register_actions_request_spec.rb +62 -0
- data/spec/models/domain_registry_credentials_response_spec.rb +68 -0
- data/spec/models/domain_report_execution_launch_request_v1_spec.rb +56 -0
- data/spec/models/domain_report_execution_retry_request_v1_spec.rb +56 -0
- data/spec/models/domain_report_execution_summary_v1_spec.rb +98 -0
- data/spec/models/domain_report_execution_v1_spec.rb +170 -0
- data/spec/models/domain_report_executions_response_v1_spec.rb +68 -0
- data/spec/models/domain_report_metadata_spec.rb +92 -0
- data/spec/models/domain_report_params_spec.rb +98 -0
- data/spec/models/domain_result_metadata_spec.rb +122 -0
- data/spec/models/domain_role_ids_spec.rb +56 -0
- data/spec/models/domain_role_spec.rb +80 -0
- data/spec/models/domain_rule_entities_response_spec.rb +68 -0
- data/spec/models/domain_rule_meta_info_spec.rb +86 -0
- data/spec/models/domain_rule_preview_request_spec.rb +62 -0
- data/spec/models/domain_rule_query_response_v1_spec.rb +68 -0
- data/spec/models/domain_rule_quota_spec.rb +68 -0
- data/spec/models/domain_rule_spec.rb +98 -0
- data/spec/models/domain_rules_entities_response_v1_spec.rb +68 -0
- data/spec/models/domain_rules_response_spec.rb +68 -0
- data/spec/models/domain_scan_host_metadata_spec.rb +128 -0
- data/spec/models/domain_scan_metadata_spec.rb +110 -0
- data/spec/models/domain_scan_profile_metadata_spec.rb +68 -0
- data/spec/models/domain_scan_profile_spec.rb +218 -0
- data/spec/models/domain_scan_schedule_data_v1_spec.rb +74 -0
- data/spec/models/domain_scan_spec.rb +242 -0
- data/spec/models/domain_schedule_spec.rb +68 -0
- data/spec/models/domain_scheduled_report_v1_spec.rb +188 -0
- data/spec/models/domain_scheduled_reports_result_v1_spec.rb +68 -0
- data/spec/models/domain_script_help_spec.rb +92 -0
- data/spec/models/domain_search_after_meta_spec.rb +74 -0
- data/spec/models/domain_search_after_paging_spec.rb +68 -0
- data/spec/models/domain_sensor_installer_v1_spec.rb +110 -0
- data/spec/models/domain_sensor_installers_v1_spec.rb +68 -0
- data/spec/models/domain_session_response_wrapper_spec.rb +68 -0
- data/spec/models/domain_session_spec.rb +170 -0
- data/spec/models/domain_signal_properties_spec.rb +104 -0
- data/spec/models/domain_signal_property_spec.rb +80 -0
- data/spec/models/domain_simple_actor_spec.rb +86 -0
- data/spec/models/domain_spapi_combined_vulnerabilities_response_spec.rb +68 -0
- data/spec/models/domain_spapi_evaluation_logic_combined_response_v1_spec.rb +68 -0
- data/spec/models/domain_spapi_evaluation_logic_entities_response_v1_spec.rb +68 -0
- data/spec/models/domain_spapi_query_meta_spec.rb +80 -0
- data/spec/models/domain_spapi_query_paging_spec.rb +68 -0
- data/spec/models/domain_spapi_query_response_spec.rb +68 -0
- data/spec/models/domain_spapi_remediation_entities_response_v2_spec.rb +68 -0
- data/spec/models/domain_spapi_vulnerabilities_entities_response_v2_spec.rb +68 -0
- data/spec/models/domain_status_response_spec.rb +92 -0
- data/spec/models/domain_status_response_wrapper_spec.rb +68 -0
- data/spec/models/domain_tweet_source_spec.rb +80 -0
- data/spec/models/domain_update_action_request_spec.rb +86 -0
- data/spec/models/domain_update_notification_request_v1_spec.rb +68 -0
- data/spec/models/domain_update_results_spec.rb +62 -0
- data/spec/models/domain_update_rule_request_v1_spec.rb +92 -0
- data/spec/models/domain_update_user_fields_spec.rb +62 -0
- data/spec/models/domain_update_user_request_spec.rb +62 -0
- data/spec/models/domain_user_action_request_spec.rb +62 -0
- data/spec/models/domain_user_action_spec.rb +66 -0
- data/spec/models/domain_user_create_request_spec.rb +74 -0
- data/spec/models/domain_user_grants_spec.rb +110 -0
- data/spec/models/domain_user_group_members_request_v1_spec.rb +56 -0
- data/spec/models/domain_user_group_members_response_v1_spec.rb +68 -0
- data/spec/models/domain_user_group_members_spec.rb +62 -0
- data/spec/models/domain_user_group_spec.rb +74 -0
- data/spec/models/domain_user_groups_request_v1_spec.rb +56 -0
- data/spec/models/domain_user_groups_response_v1_spec.rb +68 -0
- data/spec/models/domain_user_metadata_spec.rb +80 -0
- data/spec/models/domain_user_role_spec.rb +74 -0
- data/spec/models/domain_user_spec.rb +92 -0
- data/spec/models/domain_value_item_spec.rb +62 -0
- data/spec/models/domain_vulnerability_actor_spec.rb +62 -0
- data/spec/models/domain_vulnerability_affected_product_spec.rb +62 -0
- data/spec/models/domain_vulnerability_related_threat_spec.rb +62 -0
- data/spec/models/domain_vulnerability_report_spec.rb +62 -0
- data/spec/models/domain_vulnerability_response_spec.rb +68 -0
- data/spec/models/domain_vulnerability_spec.rb +134 -0
- data/spec/models/domain_xdr_data_spec.rb +56 -0
- data/spec/models/domain_xdr_params_spec.rb +110 -0
- data/spec/models/domain_zero_trust_simple_assessment_spec.rb +62 -0
- data/spec/models/empowerapi_msa_pf_response_v1_spec.rb +68 -0
- data/spec/models/empowerapi_msa_pf_response_v2_spec.rb +68 -0
- data/spec/models/empowerapi_remote_command_put_file_v1_spec.rb +164 -0
- data/spec/models/empowerapi_remote_command_put_file_v2_spec.rb +188 -0
- data/spec/models/entities_ods_cancel_scan_request_spec.rb +56 -0
- data/spec/models/entities_ods_scan_host_response_spec.rb +68 -0
- data/spec/models/entities_ods_scan_malicious_file_response_spec.rb +68 -0
- data/spec/models/entities_ods_scan_request_spec.rb +152 -0
- data/spec/models/entities_ods_scan_response_spec.rb +68 -0
- data/spec/models/entities_ods_schedule_scan_request_spec.rb +152 -0
- data/spec/models/entities_ods_schedule_scan_response_spec.rb +68 -0
- data/spec/models/exclusions_create_req_v1_spec.rb +74 -0
- data/spec/models/exclusions_exclusion_v1_spec.rb +116 -0
- data/spec/models/exclusions_resp_v1_spec.rb +68 -0
- data/spec/models/falconx_actor_spec.rb +134 -0
- data/spec/models/falconx_actor_summary_spec.rb +68 -0
- data/spec/models/falconx_amsi_call_spec.rb +56 -0
- data/spec/models/falconx_associated_runtime_spec.rb +62 -0
- data/spec/models/falconx_c2_spec.rb +74 -0
- data/spec/models/falconx_contacted_host_spec.rb +86 -0
- data/spec/models/falconx_dns_request_spec.rb +98 -0
- data/spec/models/falconx_entity_spec.rb +74 -0
- data/spec/models/falconx_errors_only_spec.rb +68 -0
- data/spec/models/falconx_extracted_file_spec.rb +122 -0
- data/spec/models/falconx_extracted_interesting_string_spec.rb +80 -0
- data/spec/models/falconx_file_access_spec.rb +68 -0
- data/spec/models/falconx_file_import_spec.rb +62 -0
- data/spec/models/falconx_file_metadata_spec.rb +68 -0
- data/spec/models/falconx_handle_spec.rb +68 -0
- data/spec/models/falconx_http_request_spec.rb +98 -0
- data/spec/models/falconx_incident_spec.rb +62 -0
- data/spec/models/falconx_intel_report_v1_spec.rb +68 -0
- data/spec/models/falconx_intel_summary_report_v1_spec.rb +56 -0
- data/spec/models/falconx_intel_x_report_v1_spec.rb +62 -0
- data/spec/models/falconx_malquery_error_v1_spec.rb +62 -0
- data/spec/models/falconx_malquery_report_v1_spec.rb +80 -0
- data/spec/models/falconx_malquery_resource_spec.rb +98 -0
- data/spec/models/falconx_malware_config_spec.rb +128 -0
- data/spec/models/falconx_matched_signature_spec.rb +62 -0
- data/spec/models/falconx_memory_dump_data_spec.rb +116 -0
- data/spec/models/falconx_memory_forensic_spec.rb +62 -0
- data/spec/models/falconx_meta_info_spec.rb +62 -0
- data/spec/models/falconx_mitre_attack_parent_spec.rb +68 -0
- data/spec/models/falconx_mitre_attack_spec.rb +98 -0
- data/spec/models/falconx_parameter_spec.rb +80 -0
- data/spec/models/falconx_process_flag_spec.rb +62 -0
- data/spec/models/falconx_process_spec.rb +146 -0
- data/spec/models/falconx_query_response_spec.rb +68 -0
- data/spec/models/falconx_quota_spec.rb +68 -0
- data/spec/models/falconx_registry_spec.rb +86 -0
- data/spec/models/falconx_related_indicator_spec.rb +80 -0
- data/spec/models/falconx_report_v1_response_spec.rb +68 -0
- data/spec/models/falconx_report_v1_spec.rb +194 -0
- data/spec/models/falconx_sandbox_parameters_v1_spec.rb +116 -0
- data/spec/models/falconx_sandbox_report_v1_spec.rb +350 -0
- data/spec/models/falconx_sandbox_summary_report_v1_spec.rb +146 -0
- data/spec/models/falconx_script_call_spec.rb +86 -0
- data/spec/models/falconx_signature_spec.rb +110 -0
- data/spec/models/falconx_stream_spec.rb +86 -0
- data/spec/models/falconx_submission_parameters_v1_spec.rb +68 -0
- data/spec/models/falconx_submission_v1_response_spec.rb +68 -0
- data/spec/models/falconx_submission_v1_spec.rb +122 -0
- data/spec/models/falconx_summary_report_v1_response_spec.rb +68 -0
- data/spec/models/falconx_summary_report_v1_spec.rb +164 -0
- data/spec/models/falconx_suricata_alert_spec.rb +86 -0
- data/spec/models/falconx_threat_graph_indicator_v1_spec.rb +74 -0
- data/spec/models/falconx_threat_graph_report_v1_spec.rb +56 -0
- data/spec/models/falconx_url_data_spec.rb +68 -0
- data/spec/models/falconx_version_info_spec.rb +62 -0
- data/spec/models/firewall_create_firewall_policies_req_v1_spec.rb +56 -0
- data/spec/models/firewall_create_firewall_policy_req_v1_spec.rb +78 -0
- data/spec/models/firewall_policy_v1_spec.rb +132 -0
- data/spec/models/firewall_resp_v1_spec.rb +68 -0
- data/spec/models/firewall_update_firewall_policies_req_v1_spec.rb +56 -0
- data/spec/models/firewall_update_firewall_policy_req_v1_spec.rb +68 -0
- data/spec/models/flightcontrolapi_get_roles_response_spec.rb +68 -0
- data/spec/models/flightcontrolapi_user_grant_response_spec.rb +68 -0
- data/spec/models/flightcontrolapi_user_response_spec.rb +68 -0
- data/spec/models/fwmgr_api_aggregates_response_spec.rb +68 -0
- data/spec/models/fwmgr_api_events_response_spec.rb +68 -0
- data/spec/models/fwmgr_api_filepath_test_request_spec.rb +62 -0
- data/spec/models/fwmgr_api_filepath_test_result_spec.rb +68 -0
- data/spec/models/fwmgr_api_firewall_fields_response_spec.rb +68 -0
- data/spec/models/fwmgr_api_firewall_fields_v1_spec.rb +74 -0
- data/spec/models/fwmgr_api_json_diff_spec.rb +74 -0
- data/spec/models/fwmgr_api_meta_info_spec.rb +80 -0
- data/spec/models/fwmgr_api_network_location_create_request_v1_spec.rb +116 -0
- data/spec/models/fwmgr_api_network_location_modify_metadata_request_v1_spec.rb +80 -0
- data/spec/models/fwmgr_api_network_location_modify_precedence_request_v1_spec.rb +62 -0
- data/spec/models/fwmgr_api_network_location_modify_request_v1_spec.rb +146 -0
- data/spec/models/fwmgr_api_network_location_summaries_response_spec.rb +68 -0
- data/spec/models/fwmgr_api_network_location_summary_v1_spec.rb +110 -0
- data/spec/models/fwmgr_api_network_locations_metadata_v1_spec.rb +68 -0
- data/spec/models/fwmgr_api_network_locations_response_spec.rb +68 -0
- data/spec/models/fwmgr_api_network_locations_v1_spec.rb +164 -0
- data/spec/models/fwmgr_api_platforms_response_spec.rb +68 -0
- data/spec/models/fwmgr_api_policy_container_upsert_request_v1_spec.rb +110 -0
- data/spec/models/fwmgr_api_policy_containers_response_spec.rb +68 -0
- data/spec/models/fwmgr_api_query_paging_spec.rb +74 -0
- data/spec/models/fwmgr_api_query_response_spec.rb +68 -0
- data/spec/models/fwmgr_api_rule_create_request_v1_spec.rb +158 -0
- data/spec/models/fwmgr_api_rule_group_create_request_v1_spec.rb +80 -0
- data/spec/models/fwmgr_api_rule_group_modify_request_v1_spec.rb +86 -0
- data/spec/models/fwmgr_api_rule_group_v1_spec.rb +134 -0
- data/spec/models/fwmgr_api_rule_groups_response_spec.rb +68 -0
- data/spec/models/fwmgr_api_rules_response_spec.rb +68 -0
- data/spec/models/fwmgr_api_validate_filepath_response_spec.rb +68 -0
- data/spec/models/fwmgr_api_workaround_ui_field_value_spec.rb +86 -0
- data/spec/models/fwmgr_domain_address_range_spec.rb +62 -0
- data/spec/models/fwmgr_domain_connection_type_spec.rb +62 -0
- data/spec/models/fwmgr_domain_dns_resolution_targets_spec.rb +56 -0
- data/spec/models/fwmgr_domain_dns_resolution_targets_with_polling_spec.rb +62 -0
- data/spec/models/fwmgr_domain_dns_target_spec.rb +62 -0
- data/spec/models/fwmgr_domain_field_spec.rb +74 -0
- data/spec/models/fwmgr_domain_https_hosts_spec.rb +56 -0
- data/spec/models/fwmgr_domain_https_hosts_with_polling_spec.rb +62 -0
- data/spec/models/fwmgr_domain_icmp_spec.rb +62 -0
- data/spec/models/fwmgr_domain_icmp_targets_spec.rb +56 -0
- data/spec/models/fwmgr_domain_icmp_targets_with_polling_spec.rb +62 -0
- data/spec/models/fwmgr_domain_monitoring_spec.rb +62 -0
- data/spec/models/fwmgr_domain_platform_spec.rb +62 -0
- data/spec/models/fwmgr_domain_port_range_spec.rb +62 -0
- data/spec/models/fwmgr_domain_value_item_spec.rb +62 -0
- data/spec/models/fwmgr_domain_wireless_type_spec.rb +68 -0
- data/spec/models/fwmgr_firewall_address_range_spec.rb +62 -0
- data/spec/models/fwmgr_firewall_field_value_spec.rb +86 -0
- data/spec/models/fwmgr_firewall_flags_spec.rb +68 -0
- data/spec/models/fwmgr_firewall_icmp_spec.rb +62 -0
- data/spec/models/fwmgr_firewall_match_event_response_spec.rb +254 -0
- data/spec/models/fwmgr_firewall_monitoring_spec.rb +62 -0
- data/spec/models/fwmgr_firewall_policy_container_v1_spec.rb +140 -0
- data/spec/models/fwmgr_firewall_port_range_spec.rb +62 -0
- data/spec/models/fwmgr_firewall_rule_group_summary_v1_spec.rb +110 -0
- data/spec/models/fwmgr_firewall_rule_v1_spec.rb +212 -0
- data/spec/models/fwmgr_msa_aggregate_query_request_spec.rb +158 -0
- data/spec/models/fwmgr_msa_aggregation_result_item_spec.rb +110 -0
- data/spec/models/fwmgr_msa_aggregation_result_spec.rb +68 -0
- data/spec/models/fwmgr_msa_date_range_spec_spec.rb +62 -0
- data/spec/models/fwmgr_msa_range_spec_spec.rb +62 -0
- data/spec/models/fwmgr_msaspec_error_spec.rb +68 -0
- data/spec/models/fwmgr_msaspec_meta_info_spec.rb +80 -0
- data/spec/models/fwmgr_msaspec_paging_spec.rb +68 -0
- data/spec/models/fwmgr_msaspec_query_response_spec.rb +68 -0
- data/spec/models/fwmgr_msaspec_response_fields_spec.rb +62 -0
- data/spec/models/fwmgr_msaspec_writes_spec.rb +56 -0
- data/spec/models/host_groups_create_group_req_v1_spec.rb +78 -0
- data/spec/models/host_groups_create_groups_req_v1_spec.rb +56 -0
- data/spec/models/host_groups_host_group_v1_spec.rb +108 -0
- data/spec/models/host_groups_members_resp_v1_spec.rb +68 -0
- data/spec/models/host_groups_resp_v1_spec.rb +68 -0
- data/spec/models/host_groups_update_group_req_v1_spec.rb +74 -0
- data/spec/models/host_groups_update_groups_req_v1_spec.rb +56 -0
- data/spec/models/ioa_cloud_account_id_spec.rb +68 -0
- data/spec/models/ioa_enrichments_spec.rb +62 -0
- data/spec/models/ioa_event_aggregate_spec.rb +116 -0
- data/spec/models/ioa_exclusions_ioa_exclusion_create_req_v1_spec.rb +104 -0
- data/spec/models/ioa_exclusions_ioa_exclusion_resp_v1_spec.rb +134 -0
- data/spec/models/ioa_exclusions_ioa_exclusion_update_req_v1_spec.rb +110 -0
- data/spec/models/ioa_exclusions_ioa_exclusions_resp_v1_spec.rb +68 -0
- data/spec/models/ioa_rule_groups_rule_group_v1_spec.rb +140 -0
- data/spec/models/iocapi_ioc_devices_count_spec.rb +80 -0
- data/spec/models/iocapi_msa_reply_devices_ran_on_spec.rb +68 -0
- data/spec/models/iocapi_msa_reply_ioc_devices_count_spec.rb +68 -0
- data/spec/models/iocapi_msa_reply_processes_ran_on_spec.rb +68 -0
- data/spec/models/iocapi_pagination_meta_spec.rb +74 -0
- data/spec/models/iocapi_response_meta_spec.rb +74 -0
- data/spec/models/k8sreg_account_permissions_status_spec.rb +62 -0
- data/spec/models/k8sreg_api_key_spec.rb +56 -0
- data/spec/models/k8sreg_aws_account_resp_spec.rb +122 -0
- data/spec/models/k8sreg_aws_cluster_item_resp_spec.rb +68 -0
- data/spec/models/k8sreg_azure_acct_cluster_item_resp_spec.rb +56 -0
- data/spec/models/k8sreg_azure_bash_script_spec.rb +62 -0
- data/spec/models/k8sreg_azure_sub_entity_spec.rb +62 -0
- data/spec/models/k8sreg_azure_subscription_resp_spec.rb +92 -0
- data/spec/models/k8sreg_azure_tenant_config_spec.rb +68 -0
- data/spec/models/k8sreg_azure_tenant_info_spec.rb +62 -0
- data/spec/models/k8sreg_cluster_resp_spec.rb +128 -0
- data/spec/models/k8sreg_create_aws_acc_req_resources_spec.rb +62 -0
- data/spec/models/k8sreg_create_aws_acc_req_spec.rb +56 -0
- data/spec/models/k8sreg_create_aws_acc_resp_spec.rb +68 -0
- data/spec/models/k8sreg_create_azure_sub_req_spec.rb +56 -0
- data/spec/models/k8sreg_get_aws_accounts_resp_spec.rb +68 -0
- data/spec/models/k8sreg_get_azure_bash_script_resp_spec.rb +68 -0
- data/spec/models/k8sreg_get_azure_subscriptions_resp_spec.rb +68 -0
- data/spec/models/k8sreg_get_azure_tenant_config_resp_spec.rb +68 -0
- data/spec/models/k8sreg_get_azure_tenant_info_resp_spec.rb +68 -0
- data/spec/models/k8sreg_get_clusters_resp_spec.rb +68 -0
- data/spec/models/k8sreg_get_locations_resp_spec.rb +68 -0
- data/spec/models/k8sreg_get_scripts_resp_spec.rb +68 -0
- data/spec/models/k8sreg_list_cluster_cloud_item_resp_spec.rb +104 -0
- data/spec/models/k8sreg_list_cluster_cloud_resp_spec.rb +68 -0
- data/spec/models/k8sreg_location_resp_spec.rb +62 -0
- data/spec/models/k8sreg_regen_api_key_resp_spec.rb +68 -0
- data/spec/models/k8sreg_version_resp_spec.rb +68 -0
- data/spec/models/main_available_stream_v2_spec.rb +74 -0
- data/spec/models/main_discovery_response_v2_spec.rb +68 -0
- data/spec/models/main_session_token_spec.rb +62 -0
- data/spec/models/malquery_external_exact_search_parameters_v1_spec.rb +62 -0
- data/spec/models/malquery_external_hunt_options_spec.rb +92 -0
- data/spec/models/malquery_external_hunt_parameters_v1_spec.rb +62 -0
- data/spec/models/malquery_external_query_response_spec.rb +68 -0
- data/spec/models/malquery_external_resource_spec.rb +146 -0
- data/spec/models/malquery_fuzzy_options_spec.rb +62 -0
- data/spec/models/malquery_fuzzy_search_meta_info_spec.rb +98 -0
- data/spec/models/malquery_fuzzy_search_parameters_v1_spec.rb +62 -0
- data/spec/models/malquery_fuzzy_search_response_spec.rb +68 -0
- data/spec/models/malquery_multi_download_request_v1_spec.rb +56 -0
- data/spec/models/malquery_query_error_spec.rb +74 -0
- data/spec/models/malquery_query_meta_info_spec.rb +92 -0
- data/spec/models/malquery_rate_limits_meta_spec.rb +110 -0
- data/spec/models/malquery_rate_limits_response_spec.rb +62 -0
- data/spec/models/malquery_request_meta_info_spec.rb +128 -0
- data/spec/models/malquery_request_response_spec.rb +68 -0
- data/spec/models/malquery_sample_metadata_response_spec.rb +68 -0
- data/spec/models/malquery_sample_metadata_spec.rb +98 -0
- data/spec/models/malquery_samples_metadata_meta_info_spec.rb +86 -0
- data/spec/models/malquery_search_parameter_spec.rb +62 -0
- data/spec/models/malquery_stats_spec.rb +80 -0
- data/spec/models/malquery_user_request_count_spec.rb +62 -0
- data/spec/models/messages_activity_spec.rb +104 -0
- data/spec/models/messages_alert_spec.rb +68 -0
- data/spec/models/messages_attachment_spec.rb +86 -0
- data/spec/models/messages_author_spec.rb +86 -0
- data/spec/models/messages_case_spec.rb +146 -0
- data/spec/models/messages_detection_spec.rb +62 -0
- data/spec/models/messages_incident_spec.rb +62 -0
- data/spec/models/mlscannerapi_meta_info_spec.rb +86 -0
- data/spec/models/mlscannerapi_query_response_spec.rb +68 -0
- data/spec/models/mlscannerapi_quota_spec.rb +68 -0
- data/spec/models/mlscannerapi_samples_scan_parameters_spec.rb +56 -0
- data/spec/models/mlscannerapi_samples_scan_result_spec.rb +80 -0
- data/spec/models/mlscannerapi_scan_v1_response_spec.rb +68 -0
- data/spec/models/mlscannerapi_scanned_sample_spec.rb +68 -0
- data/spec/models/model_argument_spec.rb +140 -0
- data/spec/models/model_file_spec.rb +104 -0
- data/spec/models/model_session_log_spec.rb +98 -0
- data/spec/models/models_access_health_details_spec.rb +68 -0
- data/spec/models/models_application_library_spec.rb +92 -0
- data/spec/models/models_application_package_info_type_spec.rb +62 -0
- data/spec/models/models_aws_account_access_health_spec.rb +56 -0
- data/spec/models/models_aws_account_request_v1_spec.rb +92 -0
- data/spec/models/models_aws_account_v1_spec.rb +158 -0
- data/spec/models/models_aws_accounts_v1_spec.rb +68 -0
- data/spec/models/models_aws_customer_settings_request_v1_spec.rb +62 -0
- data/spec/models/models_base_response_v1_spec.rb +62 -0
- data/spec/models/models_create_aws_accounts_v1_spec.rb +56 -0
- data/spec/models/models_customer_configurations_v1_spec.rb +68 -0
- data/spec/models/models_modify_aws_customer_settings_v1_spec.rb +56 -0
- data/spec/models/models_package_info_type_spec.rb +110 -0
- data/spec/models/models_update_aws_accounts_v1_spec.rb +56 -0
- data/spec/models/models_verify_access_response_v1_spec.rb +68 -0
- data/spec/models/msa_affected_entity_spec.rb +62 -0
- data/spec/models/msa_aggregate_query_request_spec.rb +158 -0
- data/spec/models/msa_aggregates_response_spec.rb +68 -0
- data/spec/models/msa_aggregation_result_item_spec.rb +110 -0
- data/spec/models/msa_aggregation_result_spec.rb +68 -0
- data/spec/models/msa_api_error_spec.rb +68 -0
- data/spec/models/msa_base_entities_response_spec.rb +62 -0
- data/spec/models/msa_date_range_spec_spec.rb +62 -0
- data/spec/models/msa_entities_response_spec.rb +68 -0
- data/spec/models/msa_entity_action_request_spec.rb +56 -0
- data/spec/models/msa_entity_action_request_v2_spec.rb +62 -0
- data/spec/models/msa_errors_only_spec.rb +62 -0
- data/spec/models/msa_facet_spec.rb +80 -0
- data/spec/models/msa_facets_response_spec.rb +68 -0
- data/spec/models/msa_ids_request_spec.rb +56 -0
- data/spec/models/msa_meta_info_spec.rb +80 -0
- data/spec/models/msa_paging_spec.rb +68 -0
- data/spec/models/msa_query_response_spec.rb +68 -0
- data/spec/models/msa_range_spec_spec.rb +62 -0
- data/spec/models/msa_reply_affected_entities_spec.rb +68 -0
- data/spec/models/msa_reply_meta_only_spec.rb +62 -0
- data/spec/models/msa_resources_spec.rb +56 -0
- data/spec/models/msaspec_action_parameter_spec.rb +62 -0
- data/spec/models/msaspec_error_spec.rb +68 -0
- data/spec/models/msaspec_ids_request_spec.rb +56 -0
- data/spec/models/msaspec_meta_info_spec.rb +80 -0
- data/spec/models/msaspec_paging_spec.rb +68 -0
- data/spec/models/msaspec_query_response_spec.rb +68 -0
- data/spec/models/msaspec_response_fields_spec.rb +62 -0
- data/spec/models/msaspec_writes_spec.rb +56 -0
- data/spec/models/oauth2_access_token_request_spec.rb +68 -0
- data/spec/models/patterndisposition_pattern_disposition_spec.rb +182 -0
- data/spec/models/policy_sensor_update_schedule_spec.rb +68 -0
- data/spec/models/policy_sensor_update_scheduler_spec.rb +68 -0
- data/spec/models/prevention_category_resp_v1_spec.rb +62 -0
- data/spec/models/prevention_create_policies_req_v1_spec.rb +56 -0
- data/spec/models/prevention_create_policy_req_v1_spec.rb +84 -0
- data/spec/models/prevention_policy_v1_spec.rb +132 -0
- data/spec/models/prevention_resp_v1_spec.rb +68 -0
- data/spec/models/prevention_setting_req_v1_spec.rb +62 -0
- data/spec/models/prevention_setting_resp_v1_spec.rb +84 -0
- data/spec/models/prevention_update_policies_req_v1_spec.rb +56 -0
- data/spec/models/prevention_update_policy_req_v1_spec.rb +74 -0
- data/spec/models/processesapi_msa_process_detail_response_spec.rb +68 -0
- data/spec/models/processesapi_process_detail_spec.rb +104 -0
- data/spec/models/public_acl_spec.rb +74 -0
- data/spec/models/public_after_spec.rb +62 -0
- data/spec/models/public_attribute_spec.rb +62 -0
- data/spec/models/public_basic_spec.rb +68 -0
- data/spec/models/public_before_spec.rb +62 -0
- data/spec/models/public_change_spec.rb +230 -0
- data/spec/models/public_dacl_entity_spec.rb +74 -0
- data/spec/models/public_dacl_spec.rb +62 -0
- data/spec/models/public_diff_hash_spec.rb +56 -0
- data/spec/models/public_diff_spec.rb +56 -0
- data/spec/models/public_diff_type_spec.rb +56 -0
- data/spec/models/public_get_changes_response_spec.rb +68 -0
- data/spec/models/public_group_spec.rb +62 -0
- data/spec/models/public_host_group_spec.rb +56 -0
- data/spec/models/public_host_spec.rb +92 -0
- data/spec/models/public_owner_spec.rb +62 -0
- data/spec/models/public_permissions_lin_spec.rb +86 -0
- data/spec/models/public_permissions_spec.rb +74 -0
- data/spec/models/public_policy_rule_group_spec.rb +62 -0
- data/spec/models/public_policy_rule_spec.rb +56 -0
- data/spec/models/public_policy_spec.rb +62 -0
- data/spec/models/public_prevalence_spec.rb +74 -0
- data/spec/models/public_tag_spec.rb +56 -0
- data/spec/models/quarantine_quarantined_file_path_spec.rb +74 -0
- data/spec/models/quarantine_quarantined_file_spec.rb +152 -0
- data/spec/models/reconmsa_api_error_detail_spec.rb +68 -0
- data/spec/models/reconmsa_api_error_spec.rb +80 -0
- data/spec/models/registration_aws_account_console_url_spec.rb +62 -0
- data/spec/models/registration_aws_account_create_request_d4_c_ext_v2_spec.rb +56 -0
- data/spec/models/registration_aws_account_create_request_ext_v2_spec.rb +56 -0
- data/spec/models/registration_aws_account_d4_c_ext_v2_spec.rb +86 -0
- data/spec/models/registration_aws_account_ext_v2_spec.rb +104 -0
- data/spec/models/registration_aws_account_patch_request_spec.rb +56 -0
- data/spec/models/registration_aws_account_patch_spec.rb +92 -0
- data/spec/models/registration_aws_account_response_v2_spec.rb +68 -0
- data/spec/models/registration_aws_account_script_spec.rb +56 -0
- data/spec/models/registration_aws_provision_get_account_script_response_v2_spec.rb +68 -0
- data/spec/models/registration_azure_account_create_request_external_v1_spec.rb +56 -0
- data/spec/models/registration_azure_account_external_v1_spec.rb +86 -0
- data/spec/models/registration_azure_account_response_v1_spec.rb +68 -0
- data/spec/models/registration_azure_account_v1_ext_spec.rb +176 -0
- data/spec/models/registration_azure_download_certificate_response_v1_spec.rb +68 -0
- data/spec/models/registration_azure_key_v1_spec.rb +86 -0
- data/spec/models/registration_azure_provision_get_user_script_response_v1_spec.rb +68 -0
- data/spec/models/registration_azure_tenant_configuration_response_v1_spec.rb +68 -0
- data/spec/models/registration_azure_tenant_default_subscription_id_response_v1_spec.rb +68 -0
- data/spec/models/registration_azure_tenant_ids_response_v1_resources_spec.rb +62 -0
- data/spec/models/registration_azure_tenant_ids_response_v1_spec.rb +68 -0
- data/spec/models/registration_azure_user_script_spec.rb +62 -0
- data/spec/models/registration_external_ioa_event_response_spec.rb +68 -0
- data/spec/models/registration_external_ioa_resources_spec.rb +68 -0
- data/spec/models/registration_external_iom_event_response_spec.rb +68 -0
- data/spec/models/registration_external_iom_event_response_v2_spec.rb +68 -0
- data/spec/models/registration_gcp_account_create_request_ext_v1_spec.rb +56 -0
- data/spec/models/registration_gcp_account_ext_v1_spec.rb +62 -0
- data/spec/models/registration_gcp_account_response_v1_spec.rb +68 -0
- data/spec/models/registration_gcp_provision_get_user_script_response_v1_spec.rb +68 -0
- data/spec/models/registration_gcp_user_script_spec.rb +62 -0
- data/spec/models/registration_ioa_event_spec.rb +278 -0
- data/spec/models/registration_iom_event_ids_response_v2_spec.rb +68 -0
- data/spec/models/registration_iom_event_spec.rb +176 -0
- data/spec/models/registration_iom_event_v2_spec.rb +218 -0
- data/spec/models/registration_iom_resources_spec.rb +56 -0
- data/spec/models/registration_msa_meta_info_extension_spec.rb +62 -0
- data/spec/models/registration_msa_paging_extension_spec.rb +62 -0
- data/spec/models/registration_msa_spec_meta_info_extension_spec.rb +62 -0
- data/spec/models/registration_policy_ext_v1_spec.rb +92 -0
- data/spec/models/registration_policy_request_ext_v1_spec.rb +56 -0
- data/spec/models/registration_policy_response_v1_spec.rb +68 -0
- data/spec/models/registration_policy_settings_response_v1_spec.rb +68 -0
- data/spec/models/registration_scan_schedule_response_v1_spec.rb +68 -0
- data/spec/models/registration_scan_schedule_update_request_v1_spec.rb +56 -0
- data/spec/models/registration_static_scripts_response_spec.rb +68 -0
- data/spec/models/registryassessment_external_cred_payload_spec.rb +56 -0
- data/spec/models/registryassessment_external_registry_patch_payload_spec.rb +68 -0
- data/spec/models/registryassessment_external_registry_payload_spec.rb +80 -0
- data/spec/models/remote_response_create_policies_v1_spec.rb +56 -0
- data/spec/models/remote_response_create_policy_req_v1_spec.rb +84 -0
- data/spec/models/remote_response_policy_v1_spec.rb +126 -0
- data/spec/models/remote_response_resp_v1_spec.rb +68 -0
- data/spec/models/remote_response_update_policies_req_v1_spec.rb +56 -0
- data/spec/models/remote_response_update_policy_req_v1_spec.rb +74 -0
- data/spec/models/resource_spec.rb +62 -0
- data/spec/models/resources_spec.rb +68 -0
- data/spec/models/sadomain_create_rule_request_v1_spec.rb +92 -0
- data/spec/models/sadomain_customer_assets_spec.rb +62 -0
- data/spec/models/sadomain_rule_spec.rb +152 -0
- data/spec/models/sadomain_submit_for_blocking_info_spec.rb +68 -0
- data/spec/models/sadomain_typosquatting_base_domain_spec.rb +86 -0
- data/spec/models/sadomain_typosquatting_component_spec.rb +86 -0
- data/spec/models/sadomain_typosquatting_parent_domain_spec.rb +68 -0
- data/spec/models/sadomain_whois_record_spec.rb +92 -0
- data/spec/models/sadomain_whois_registrant_spec.rb +68 -0
- data/spec/models/sadomain_whois_registrar_spec.rb +62 -0
- data/spec/models/schema_sensor_event_field_spec.rb +74 -0
- data/spec/models/schema_sensor_event_response_v1_spec.rb +68 -0
- data/spec/models/schema_sensor_event_spec.rb +92 -0
- data/spec/models/schema_sensor_field_response_v1_spec.rb +68 -0
- data/spec/models/schema_sensor_field_spec.rb +86 -0
- data/spec/models/schema_sensor_field_value_spec.rb +68 -0
- data/spec/models/sensor_update_build_req_v1_spec.rb +62 -0
- data/spec/models/sensor_update_build_resp_v1_spec.rb +78 -0
- data/spec/models/sensor_update_builds_resp_v1_spec.rb +68 -0
- data/spec/models/sensor_update_create_policies_req_v1_spec.rb +56 -0
- data/spec/models/sensor_update_create_policies_req_v2_spec.rb +56 -0
- data/spec/models/sensor_update_create_policy_req_v1_spec.rb +78 -0
- data/spec/models/sensor_update_create_policy_req_v2_spec.rb +78 -0
- data/spec/models/sensor_update_kernel_resp_v1_spec.rb +128 -0
- data/spec/models/sensor_update_kernels_resp_v1_spec.rb +68 -0
- data/spec/models/sensor_update_policy_v1_spec.rb +126 -0
- data/spec/models/sensor_update_policy_v2_spec.rb +126 -0
- data/spec/models/sensor_update_resp_v1_spec.rb +68 -0
- data/spec/models/sensor_update_resp_v2_spec.rb +68 -0
- data/spec/models/sensor_update_settings_req_v1_spec.rb +56 -0
- data/spec/models/sensor_update_settings_req_v2_spec.rb +84 -0
- data/spec/models/sensor_update_settings_resp_v1_spec.rb +56 -0
- data/spec/models/sensor_update_settings_resp_v2_spec.rb +100 -0
- data/spec/models/sensor_update_update_policies_req_v1_spec.rb +56 -0
- data/spec/models/sensor_update_update_policies_req_v2_spec.rb +56 -0
- data/spec/models/sensor_update_update_policy_req_v1_spec.rb +74 -0
- data/spec/models/sensor_update_update_policy_req_v2_spec.rb +74 -0
- data/spec/models/state_online_state_resp_v1_spec.rb +68 -0
- data/spec/models/state_online_state_result_v1_spec.rb +74 -0
- data/spec/models/sv_exclusions_create_req_v1_spec.rb +68 -0
- data/spec/models/sv_exclusions_resp_v1_spec.rb +68 -0
- data/spec/models/sv_exclusions_sv_exclusion_v1_spec.rb +110 -0
- data/spec/models/sv_exclusions_update_req_v1_spec.rb +74 -0
- data/spec/models/threatgraph_crawl_edges_request_spec.rb +86 -0
- data/spec/models/uninstall_token_resp_v1_spec.rb +68 -0
- data/spec/models/uninstall_token_reveal_uninstall_token_req_v1_spec.rb +62 -0
- data/spec/models/uninstall_token_uninstall_token_v1_spec.rb +68 -0
- data/spec/models/upload_sample_v2_request_spec.rb +74 -0
- data/spec/spec_helper.rb +133 -0
- metadata +2816 -0
data/README.md
ADDED
@@ -0,0 +1,4409 @@
|
|
1
|
+
# Crimson Falcon - The CrowdStrike Falcon SDK for Ruby
|
2
|
+
|
3
|
+
*Empower* your Ruby applications with the robust capabilities of the CrowdStrike Falcon platform,
|
4
|
+
using the Crimson Falcon SDK. This sophisticated Ruby gem, designed to align with the CrowdStrike
|
5
|
+
API Specification, facilitates smooth and efficient interaction with a wide range of API endpoints
|
6
|
+
within your Falcon environment. Utilizing this SDK allows for seamless integration, operational
|
7
|
+
consistency, and enhanced functionality in your cybersecurity workflows.
|
8
|
+
|
9
|
+
## Installation
|
10
|
+
|
11
|
+
### From RubyGems (Coming Soon)
|
12
|
+
|
13
|
+
To install from RubyGems, use the following command:
|
14
|
+
|
15
|
+
```shell
|
16
|
+
gem install crimson-falcon
|
17
|
+
```
|
18
|
+
|
19
|
+
Add this to the Gemfile:
|
20
|
+
<!-- x-release-please-start-version -->
|
21
|
+
```ruby
|
22
|
+
gem 'crimson-falcon', '~> 0.1.2'
|
23
|
+
```
|
24
|
+
<!-- x-release-please-end -->
|
25
|
+
|
26
|
+
### From Source to Gem: Building the Ruby Code
|
27
|
+
|
28
|
+
To build the Ruby code into a gem:
|
29
|
+
|
30
|
+
```shell
|
31
|
+
gem build crimson-falcon.gemspec
|
32
|
+
```
|
33
|
+
|
34
|
+
Then install the gem locally:
|
35
|
+
<!-- x-release-please-start-version -->
|
36
|
+
```shell
|
37
|
+
gem install ./crimson-falcon-0.1.2.gem
|
38
|
+
```
|
39
|
+
<!-- x-release-please-end -->
|
40
|
+
Finally, add this to the Gemfile:
|
41
|
+
<!-- x-release-please-start-version -->
|
42
|
+
```ruby
|
43
|
+
gem 'crimson-falcon', '~> 0.1.2'
|
44
|
+
```
|
45
|
+
<!-- x-release-please-end -->
|
46
|
+
### Install from Git
|
47
|
+
|
48
|
+
If the Ruby gem is hosted at a git repository: <https://github.com/GIT_USER_ID/GIT_REPO_ID>, then add the following in the Gemfile:
|
49
|
+
|
50
|
+
```ruby
|
51
|
+
# Example
|
52
|
+
gem 'crimson-falcon', :git => 'https://github.com/CrowdStrike/crimson-falcon.git'
|
53
|
+
```
|
54
|
+
|
55
|
+
## Getting Started
|
56
|
+
|
57
|
+
Eager to take flight? Follow the [installation](#installation) process, and then launch into the following code:
|
58
|
+
|
59
|
+
```ruby
|
60
|
+
# Load the gem
|
61
|
+
require 'crimson-falcon'
|
62
|
+
|
63
|
+
# Setup authorization
|
64
|
+
Falcon.configure do |config|
|
65
|
+
config.client_id = "Your_Client_ID"
|
66
|
+
config.client_secret = "Your_Client_Secret"
|
67
|
+
config.cloud = "us-1" # or "us-2", "eu-1", "us-gov1"
|
68
|
+
end
|
69
|
+
|
70
|
+
# Create a new API instance
|
71
|
+
api_instance = Falcon::AlertsApi.new
|
72
|
+
opts = {
|
73
|
+
# Integer | The starting point for the return, `0` implies the latest detection.
|
74
|
+
# The `offset` parameter assists in paginating results.
|
75
|
+
offset: 0,
|
76
|
+
# Integer | The maximum count of detections in this response (default: 100; max: 10000).
|
77
|
+
# Works in tandem with the `offset` for pagination.
|
78
|
+
limit: 25,
|
79
|
+
# String | Sort detections in `asc` (ascending) or `desc` (descending) order.
|
80
|
+
# Example: `status|asc` or `status|desc`.
|
81
|
+
sort: 'Sort_Criteria',
|
82
|
+
# String | Filter detections using a query in Falcon Query Language (FQL).
|
83
|
+
# An asterisk wildcard `*` includes all results. See API docs for more details.
|
84
|
+
filter: 'Filter_Criteria',
|
85
|
+
# String | Search all detection metadata for the provided string
|
86
|
+
q: 'Query_String'
|
87
|
+
}
|
88
|
+
|
89
|
+
begin
|
90
|
+
# Retrieves all Alerts ids that match a given query
|
91
|
+
result = api_instance.get_queries_alerts_v1(opts)
|
92
|
+
p result
|
93
|
+
rescue Falcon::ApiError => e
|
94
|
+
puts "Exception when calling AlertsApi->get_queries_alerts_v1: #{e}"
|
95
|
+
end
|
96
|
+
```
|
97
|
+
|
98
|
+
Welcome aboard the Crimson Falcon! Fly high, code with grace.
|
99
|
+
|
100
|
+
## Crimson Falcon API Docs
|
101
|
+
|
102
|
+
> :recycle: ***API Docs are automatically generated from the CrowdStrike API specification.*** :recycle:
|
103
|
+
|
104
|
+
---
|
105
|
+
|
106
|
+
**Class**: `Falcon::AlertsApi`
|
107
|
+
|
108
|
+
- **Operation**: [**get_queries_alerts_v1**](docs/AlertsApi.md#get_queries_alerts_v1)
|
109
|
+
- **GET**: /alerts/queries/alerts/v1
|
110
|
+
- **Description**: retrieves all Alerts ids that match a given query
|
111
|
+
|
112
|
+
---
|
113
|
+
|
114
|
+
**Class**: `Falcon::AlertsApi`
|
115
|
+
|
116
|
+
- **Operation**: [**patch_entities_alerts_v2**](docs/AlertsApi.md#patch_entities_alerts_v2)
|
117
|
+
- **PATCH**: /alerts/entities/alerts/v2
|
118
|
+
- **Description**: Perform actions on detections identified by detection ID(s) in request. Each action has a name and a description which describes what the action does. If a request adds and removes tag in a single request, the order of processing would be to remove tags before adding new ones in.
|
119
|
+
|
120
|
+
---
|
121
|
+
|
122
|
+
**Class**: `Falcon::AlertsApi`
|
123
|
+
|
124
|
+
- **Operation**: [**post_aggregates_alerts_v1**](docs/AlertsApi.md#post_aggregates_alerts_v1)
|
125
|
+
- **POST**: /alerts/aggregates/alerts/v1
|
126
|
+
- **Description**: retrieves aggregates for Alerts across all CIDs
|
127
|
+
|
128
|
+
---
|
129
|
+
|
130
|
+
**Class**: `Falcon::AlertsApi`
|
131
|
+
|
132
|
+
- **Operation**: [**post_entities_alerts_v1**](docs/AlertsApi.md#post_entities_alerts_v1)
|
133
|
+
- **POST**: /alerts/entities/alerts/v1
|
134
|
+
- **Description**: retrieves all Alerts given their ids
|
135
|
+
|
136
|
+
---
|
137
|
+
|
138
|
+
**Class**: `Falcon::CloudConnectAwsApi`
|
139
|
+
|
140
|
+
- **Operation**: [**create_or_update_aws_settings**](docs/CloudConnectAwsApi.md#create_or_update_aws_settings)
|
141
|
+
- **POST**: /cloud-connect-aws/entities/settings/v1
|
142
|
+
- **Description**: Create or update Global Settings which are applicable to all provisioned AWS accounts
|
143
|
+
|
144
|
+
---
|
145
|
+
|
146
|
+
**Class**: `Falcon::CloudConnectAwsApi`
|
147
|
+
|
148
|
+
- **Operation**: [**delete_aws_accounts**](docs/CloudConnectAwsApi.md#delete_aws_accounts)
|
149
|
+
- **DELETE**: /cloud-connect-aws/entities/accounts/v1
|
150
|
+
- **Description**: Delete a set of AWS Accounts by specifying their IDs
|
151
|
+
|
152
|
+
---
|
153
|
+
|
154
|
+
**Class**: `Falcon::CloudConnectAwsApi`
|
155
|
+
|
156
|
+
- **Operation**: [**get_aws_accounts**](docs/CloudConnectAwsApi.md#get_aws_accounts)
|
157
|
+
- **GET**: /cloud-connect-aws/entities/accounts/v1
|
158
|
+
- **Description**: Retrieve a set of AWS Accounts by specifying their IDs
|
159
|
+
|
160
|
+
---
|
161
|
+
|
162
|
+
**Class**: `Falcon::CloudConnectAwsApi`
|
163
|
+
|
164
|
+
- **Operation**: [**get_aws_settings**](docs/CloudConnectAwsApi.md#get_aws_settings)
|
165
|
+
- **GET**: /cloud-connect-aws/combined/settings/v1
|
166
|
+
- **Description**: Retrieve a set of Global Settings which are applicable to all provisioned AWS accounts
|
167
|
+
|
168
|
+
---
|
169
|
+
|
170
|
+
**Class**: `Falcon::CloudConnectAwsApi`
|
171
|
+
|
172
|
+
- **Operation**: [**provision_aws_accounts**](docs/CloudConnectAwsApi.md#provision_aws_accounts)
|
173
|
+
- **POST**: /cloud-connect-aws/entities/accounts/v1
|
174
|
+
- **Description**: Provision AWS Accounts by specifying details about the accounts to provision
|
175
|
+
|
176
|
+
---
|
177
|
+
|
178
|
+
**Class**: `Falcon::CloudConnectAwsApi`
|
179
|
+
|
180
|
+
- **Operation**: [**query_aws_accounts**](docs/CloudConnectAwsApi.md#query_aws_accounts)
|
181
|
+
- **GET**: /cloud-connect-aws/combined/accounts/v1
|
182
|
+
- **Description**: Search for provisioned AWS Accounts by providing an FQL filter and paging details. Returns a set of AWS accounts which match the filter criteria
|
183
|
+
|
184
|
+
---
|
185
|
+
|
186
|
+
**Class**: `Falcon::CloudConnectAwsApi`
|
187
|
+
|
188
|
+
- **Operation**: [**query_aws_accounts_for_ids**](docs/CloudConnectAwsApi.md#query_aws_accounts_for_ids)
|
189
|
+
- **GET**: /cloud-connect-aws/queries/accounts/v1
|
190
|
+
- **Description**: Search for provisioned AWS Accounts by providing an FQL filter and paging details. Returns a set of AWS account IDs which match the filter criteria
|
191
|
+
|
192
|
+
---
|
193
|
+
|
194
|
+
**Class**: `Falcon::CloudConnectAwsApi`
|
195
|
+
|
196
|
+
- **Operation**: [**update_aws_accounts**](docs/CloudConnectAwsApi.md#update_aws_accounts)
|
197
|
+
- **PATCH**: /cloud-connect-aws/entities/accounts/v1
|
198
|
+
- **Description**: Update AWS Accounts by specifying the ID of the account and details to update
|
199
|
+
|
200
|
+
---
|
201
|
+
|
202
|
+
**Class**: `Falcon::CloudConnectAwsApi`
|
203
|
+
|
204
|
+
- **Operation**: [**verify_aws_account_access**](docs/CloudConnectAwsApi.md#verify_aws_account_access)
|
205
|
+
- **POST**: /cloud-connect-aws/entities/verify-account-access/v1
|
206
|
+
- **Description**: Performs an Access Verification check on the specified AWS Account IDs
|
207
|
+
|
208
|
+
---
|
209
|
+
|
210
|
+
**Class**: `Falcon::CspmRegistrationApi`
|
211
|
+
|
212
|
+
- **Operation**: [**azure_download_certificate**](docs/CspmRegistrationApi.md#azure_download_certificate)
|
213
|
+
- **GET**: /cloud-connect-cspm-azure/entities/download-certificate/v1
|
214
|
+
- **Description**: Returns JSON object(s) that contain the base64 encoded certificate for a service principal.
|
215
|
+
|
216
|
+
---
|
217
|
+
|
218
|
+
**Class**: `Falcon::CspmRegistrationApi`
|
219
|
+
|
220
|
+
- **Operation**: [**create_cspm_aws_account**](docs/CspmRegistrationApi.md#create_cspm_aws_account)
|
221
|
+
- **POST**: /cloud-connect-cspm-aws/entities/account/v1
|
222
|
+
- **Description**: Creates a new account in our system for a customer and generates a script for them to run in their AWS cloud environment to grant us access.
|
223
|
+
|
224
|
+
---
|
225
|
+
|
226
|
+
**Class**: `Falcon::CspmRegistrationApi`
|
227
|
+
|
228
|
+
- **Operation**: [**create_cspm_azure_account**](docs/CspmRegistrationApi.md#create_cspm_azure_account)
|
229
|
+
- **POST**: /cloud-connect-cspm-azure/entities/account/v1
|
230
|
+
- **Description**: Creates a new account in our system for a customer and generates a script for them to run in their cloud environment to grant us access.
|
231
|
+
|
232
|
+
---
|
233
|
+
|
234
|
+
**Class**: `Falcon::CspmRegistrationApi`
|
235
|
+
|
236
|
+
- **Operation**: [**delete_cspm_aws_account**](docs/CspmRegistrationApi.md#delete_cspm_aws_account)
|
237
|
+
- **DELETE**: /cloud-connect-cspm-aws/entities/account/v1
|
238
|
+
- **Description**: Deletes an existing AWS account or organization in our system.
|
239
|
+
|
240
|
+
---
|
241
|
+
|
242
|
+
**Class**: `Falcon::CspmRegistrationApi`
|
243
|
+
|
244
|
+
- **Operation**: [**delete_cspm_azure_account**](docs/CspmRegistrationApi.md#delete_cspm_azure_account)
|
245
|
+
- **DELETE**: /cloud-connect-cspm-azure/entities/account/v1
|
246
|
+
- **Description**: Deletes an Azure subscription from the system.
|
247
|
+
|
248
|
+
---
|
249
|
+
|
250
|
+
**Class**: `Falcon::CspmRegistrationApi`
|
251
|
+
|
252
|
+
- **Operation**: [**get_behavior_detections**](docs/CspmRegistrationApi.md#get_behavior_detections)
|
253
|
+
- **GET**: /detects/entities/ioa/v1
|
254
|
+
- **Description**: Get list of detected behaviors
|
255
|
+
|
256
|
+
---
|
257
|
+
|
258
|
+
**Class**: `Falcon::CspmRegistrationApi`
|
259
|
+
|
260
|
+
- **Operation**: [**get_configuration_detection_entities**](docs/CspmRegistrationApi.md#get_configuration_detection_entities)
|
261
|
+
- **GET**: /detects/entities/iom/v2
|
262
|
+
- **Description**: Get misconfigurations based on the ID - including custom policy detections in addition to default policy detections.
|
263
|
+
|
264
|
+
---
|
265
|
+
|
266
|
+
**Class**: `Falcon::CspmRegistrationApi`
|
267
|
+
|
268
|
+
- **Operation**: [**get_configuration_detection_ids_v2**](docs/CspmRegistrationApi.md#get_configuration_detection_ids_v2)
|
269
|
+
- **GET**: /detects/queries/iom/v2
|
270
|
+
- **Description**: Get list of active misconfiguration ids - including custom policy detections in addition to default policy detections.
|
271
|
+
|
272
|
+
---
|
273
|
+
|
274
|
+
**Class**: `Falcon::CspmRegistrationApi`
|
275
|
+
|
276
|
+
- **Operation**: [**get_configuration_detections**](docs/CspmRegistrationApi.md#get_configuration_detections)
|
277
|
+
- **GET**: /detects/entities/iom/v1
|
278
|
+
- **Description**: Get list of active misconfigurations
|
279
|
+
|
280
|
+
---
|
281
|
+
|
282
|
+
**Class**: `Falcon::CspmRegistrationApi`
|
283
|
+
|
284
|
+
- **Operation**: [**get_cspm_aws_account**](docs/CspmRegistrationApi.md#get_cspm_aws_account)
|
285
|
+
- **GET**: /cloud-connect-cspm-aws/entities/account/v1
|
286
|
+
- **Description**: Returns information about the current status of an AWS account.
|
287
|
+
|
288
|
+
---
|
289
|
+
|
290
|
+
**Class**: `Falcon::CspmRegistrationApi`
|
291
|
+
|
292
|
+
- **Operation**: [**get_cspm_aws_account_scripts_attachment**](docs/CspmRegistrationApi.md#get_cspm_aws_account_scripts_attachment)
|
293
|
+
- **GET**: /cloud-connect-cspm-aws/entities/user-scripts-download/v1
|
294
|
+
- **Description**: Return a script for customer to run in their cloud environment to grant us access to their AWS environment as a downloadable attachment.
|
295
|
+
|
296
|
+
---
|
297
|
+
|
298
|
+
**Class**: `Falcon::CspmRegistrationApi`
|
299
|
+
|
300
|
+
- **Operation**: [**get_cspm_aws_console_setup_urls**](docs/CspmRegistrationApi.md#get_cspm_aws_console_setup_urls)
|
301
|
+
- **GET**: /cloud-connect-cspm-aws/entities/console-setup-urls/v1
|
302
|
+
- **Description**: Return a URL for customer to visit in their cloud environment to grant us access to their AWS environment.
|
303
|
+
|
304
|
+
---
|
305
|
+
|
306
|
+
**Class**: `Falcon::CspmRegistrationApi`
|
307
|
+
|
308
|
+
- **Operation**: [**get_cspm_azure_account**](docs/CspmRegistrationApi.md#get_cspm_azure_account)
|
309
|
+
- **GET**: /cloud-connect-cspm-azure/entities/account/v1
|
310
|
+
- **Description**: Return information about Azure account registration
|
311
|
+
|
312
|
+
---
|
313
|
+
|
314
|
+
**Class**: `Falcon::CspmRegistrationApi`
|
315
|
+
|
316
|
+
- **Operation**: [**get_cspm_azure_user_scripts_attachment**](docs/CspmRegistrationApi.md#get_cspm_azure_user_scripts_attachment)
|
317
|
+
- **GET**: /cloud-connect-cspm-azure/entities/user-scripts-download/v1
|
318
|
+
- **Description**: Return a script for customer to run in their cloud environment to grant us access to their Azure environment as a downloadable attachment
|
319
|
+
|
320
|
+
---
|
321
|
+
|
322
|
+
**Class**: `Falcon::CspmRegistrationApi`
|
323
|
+
|
324
|
+
- **Operation**: [**get_cspm_policies_details**](docs/CspmRegistrationApi.md#get_cspm_policies_details)
|
325
|
+
- **GET**: /settings/entities/policy-details/v2
|
326
|
+
- **Description**: Given an array of policy IDs, returns detailed policies information.
|
327
|
+
|
328
|
+
---
|
329
|
+
|
330
|
+
**Class**: `Falcon::CspmRegistrationApi`
|
331
|
+
|
332
|
+
- **Operation**: [**get_cspm_policy**](docs/CspmRegistrationApi.md#get_cspm_policy)
|
333
|
+
- **GET**: /settings/entities/policy-details/v1
|
334
|
+
- **Description**: Given a policy ID, returns detailed policy information.
|
335
|
+
|
336
|
+
---
|
337
|
+
|
338
|
+
**Class**: `Falcon::CspmRegistrationApi`
|
339
|
+
|
340
|
+
- **Operation**: [**get_cspm_policy_settings**](docs/CspmRegistrationApi.md#get_cspm_policy_settings)
|
341
|
+
- **GET**: /settings/entities/policy/v1
|
342
|
+
- **Description**: Returns information about current policy settings.
|
343
|
+
|
344
|
+
---
|
345
|
+
|
346
|
+
**Class**: `Falcon::CspmRegistrationApi`
|
347
|
+
|
348
|
+
- **Operation**: [**get_cspm_scan_schedule**](docs/CspmRegistrationApi.md#get_cspm_scan_schedule)
|
349
|
+
- **GET**: /settings/scan-schedule/v1
|
350
|
+
- **Description**: Returns scan schedule configuration for one or more cloud platforms.
|
351
|
+
|
352
|
+
---
|
353
|
+
|
354
|
+
**Class**: `Falcon::CspmRegistrationApi`
|
355
|
+
|
356
|
+
- **Operation**: [**patch_cspm_aws_account**](docs/CspmRegistrationApi.md#patch_cspm_aws_account)
|
357
|
+
- **PATCH**: /cloud-connect-cspm-aws/entities/account/v1
|
358
|
+
- **Description**: Patches a existing account in our system for a customer.
|
359
|
+
|
360
|
+
---
|
361
|
+
|
362
|
+
**Class**: `Falcon::CspmRegistrationApi`
|
363
|
+
|
364
|
+
- **Operation**: [**update_cspm_azure_account_client_id**](docs/CspmRegistrationApi.md#update_cspm_azure_account_client_id)
|
365
|
+
- **PATCH**: /cloud-connect-cspm-azure/entities/client-id/v1
|
366
|
+
- **Description**: Update an Azure service account in our system by with the user-created client_id created with the public key we've provided
|
367
|
+
|
368
|
+
---
|
369
|
+
|
370
|
+
**Class**: `Falcon::CspmRegistrationApi`
|
371
|
+
|
372
|
+
- **Operation**: [**update_cspm_azure_tenant_default_subscription_id**](docs/CspmRegistrationApi.md#update_cspm_azure_tenant_default_subscription_id)
|
373
|
+
- **PATCH**: /cloud-connect-cspm-azure/entities/default-subscription-id/v1
|
374
|
+
- **Description**: Update an Azure default subscription_id in our system for given tenant_id
|
375
|
+
|
376
|
+
---
|
377
|
+
|
378
|
+
**Class**: `Falcon::CspmRegistrationApi`
|
379
|
+
|
380
|
+
- **Operation**: [**update_cspm_policy_settings**](docs/CspmRegistrationApi.md#update_cspm_policy_settings)
|
381
|
+
- **PATCH**: /settings/entities/policy/v1
|
382
|
+
- **Description**: Updates a policy setting - can be used to override policy severity or to disable a policy entirely.
|
383
|
+
|
384
|
+
---
|
385
|
+
|
386
|
+
**Class**: `Falcon::CspmRegistrationApi`
|
387
|
+
|
388
|
+
- **Operation**: [**update_cspm_scan_schedule**](docs/CspmRegistrationApi.md#update_cspm_scan_schedule)
|
389
|
+
- **POST**: /settings/scan-schedule/v1
|
390
|
+
- **Description**: Updates scan schedule configuration for one or more cloud platforms.
|
391
|
+
|
392
|
+
---
|
393
|
+
|
394
|
+
**Class**: `Falcon::CustomIoaApi`
|
395
|
+
|
396
|
+
- **Operation**: [**create_rule**](docs/CustomIoaApi.md#create_rule)
|
397
|
+
- **POST**: /ioarules/entities/rules/v1
|
398
|
+
- **Description**: Create a rule within a rule group. Returns the rule.
|
399
|
+
|
400
|
+
---
|
401
|
+
|
402
|
+
**Class**: `Falcon::CustomIoaApi`
|
403
|
+
|
404
|
+
- **Operation**: [**create_rule_group_mixin0**](docs/CustomIoaApi.md#create_rule_group_mixin0)
|
405
|
+
- **POST**: /ioarules/entities/rule-groups/v1
|
406
|
+
- **Description**: Create a rule group for a platform with a name and an optional description. Returns the rule group.
|
407
|
+
|
408
|
+
---
|
409
|
+
|
410
|
+
**Class**: `Falcon::CustomIoaApi`
|
411
|
+
|
412
|
+
- **Operation**: [**delete_rule_groups_mixin0**](docs/CustomIoaApi.md#delete_rule_groups_mixin0)
|
413
|
+
- **DELETE**: /ioarules/entities/rule-groups/v1
|
414
|
+
- **Description**: Delete rule groups by ID.
|
415
|
+
|
416
|
+
---
|
417
|
+
|
418
|
+
**Class**: `Falcon::CustomIoaApi`
|
419
|
+
|
420
|
+
- **Operation**: [**delete_rules**](docs/CustomIoaApi.md#delete_rules)
|
421
|
+
- **DELETE**: /ioarules/entities/rules/v1
|
422
|
+
- **Description**: Delete rules from a rule group by ID.
|
423
|
+
|
424
|
+
---
|
425
|
+
|
426
|
+
**Class**: `Falcon::CustomIoaApi`
|
427
|
+
|
428
|
+
- **Operation**: [**get_patterns**](docs/CustomIoaApi.md#get_patterns)
|
429
|
+
- **GET**: /ioarules/entities/pattern-severities/v1
|
430
|
+
- **Description**: Get pattern severities by ID.
|
431
|
+
|
432
|
+
---
|
433
|
+
|
434
|
+
**Class**: `Falcon::CustomIoaApi`
|
435
|
+
|
436
|
+
- **Operation**: [**get_platforms_mixin0**](docs/CustomIoaApi.md#get_platforms_mixin0)
|
437
|
+
- **GET**: /ioarules/entities/platforms/v1
|
438
|
+
- **Description**: Get platforms by ID.
|
439
|
+
|
440
|
+
---
|
441
|
+
|
442
|
+
**Class**: `Falcon::CustomIoaApi`
|
443
|
+
|
444
|
+
- **Operation**: [**get_rule_groups_mixin0**](docs/CustomIoaApi.md#get_rule_groups_mixin0)
|
445
|
+
- **GET**: /ioarules/entities/rule-groups/v1
|
446
|
+
- **Description**: Get rule groups by ID.
|
447
|
+
|
448
|
+
---
|
449
|
+
|
450
|
+
**Class**: `Falcon::CustomIoaApi`
|
451
|
+
|
452
|
+
- **Operation**: [**get_rule_types**](docs/CustomIoaApi.md#get_rule_types)
|
453
|
+
- **GET**: /ioarules/entities/rule-types/v1
|
454
|
+
- **Description**: Get rule types by ID.
|
455
|
+
|
456
|
+
---
|
457
|
+
|
458
|
+
**Class**: `Falcon::CustomIoaApi`
|
459
|
+
|
460
|
+
- **Operation**: [**get_rules_get**](docs/CustomIoaApi.md#get_rules_get)
|
461
|
+
- **POST**: /ioarules/entities/rules/GET/v1
|
462
|
+
- **Description**: Get rules by ID and optionally with cid and/or version in the following format: `[cid:]ID[:version]`.
|
463
|
+
|
464
|
+
---
|
465
|
+
|
466
|
+
**Class**: `Falcon::CustomIoaApi`
|
467
|
+
|
468
|
+
- **Operation**: [**get_rules_mixin0_mixin65**](docs/CustomIoaApi.md#get_rules_mixin0_mixin65)
|
469
|
+
- **GET**: /ioarules/entities/rules/v1
|
470
|
+
- **Description**: Get rules by ID and optionally with cid and/or version in the following format: `[cid:]ID[:version]`. The max number of IDs is constrained by URL size.
|
471
|
+
|
472
|
+
---
|
473
|
+
|
474
|
+
**Class**: `Falcon::CustomIoaApi`
|
475
|
+
|
476
|
+
- **Operation**: [**query_patterns**](docs/CustomIoaApi.md#query_patterns)
|
477
|
+
- **GET**: /ioarules/queries/pattern-severities/v1
|
478
|
+
- **Description**: Get all pattern severity IDs.
|
479
|
+
|
480
|
+
---
|
481
|
+
|
482
|
+
**Class**: `Falcon::CustomIoaApi`
|
483
|
+
|
484
|
+
- **Operation**: [**query_platforms_mixin0**](docs/CustomIoaApi.md#query_platforms_mixin0)
|
485
|
+
- **GET**: /ioarules/queries/platforms/v1
|
486
|
+
- **Description**: Get all platform IDs.
|
487
|
+
|
488
|
+
---
|
489
|
+
|
490
|
+
**Class**: `Falcon::CustomIoaApi`
|
491
|
+
|
492
|
+
- **Operation**: [**query_rule_groups_full**](docs/CustomIoaApi.md#query_rule_groups_full)
|
493
|
+
- **GET**: /ioarules/queries/rule-groups-full/v1
|
494
|
+
- **Description**: Find all rule groups matching the query with optional filter.
|
495
|
+
|
496
|
+
---
|
497
|
+
|
498
|
+
**Class**: `Falcon::CustomIoaApi`
|
499
|
+
|
500
|
+
- **Operation**: [**query_rule_groups_mixin0**](docs/CustomIoaApi.md#query_rule_groups_mixin0)
|
501
|
+
- **GET**: /ioarules/queries/rule-groups/v1
|
502
|
+
- **Description**: Finds all rule group IDs matching the query with optional filter.
|
503
|
+
|
504
|
+
---
|
505
|
+
|
506
|
+
**Class**: `Falcon::CustomIoaApi`
|
507
|
+
|
508
|
+
- **Operation**: [**query_rule_types**](docs/CustomIoaApi.md#query_rule_types)
|
509
|
+
- **GET**: /ioarules/queries/rule-types/v1
|
510
|
+
- **Description**: Get all rule type IDs.
|
511
|
+
|
512
|
+
---
|
513
|
+
|
514
|
+
**Class**: `Falcon::CustomIoaApi`
|
515
|
+
|
516
|
+
- **Operation**: [**query_rules_mixin0_mixin65**](docs/CustomIoaApi.md#query_rules_mixin0_mixin65)
|
517
|
+
- **GET**: /ioarules/queries/rules/v1
|
518
|
+
- **Description**: Finds all rule IDs matching the query with optional filter.
|
519
|
+
|
520
|
+
---
|
521
|
+
|
522
|
+
**Class**: `Falcon::CustomIoaApi`
|
523
|
+
|
524
|
+
- **Operation**: [**update_rule_group_mixin0**](docs/CustomIoaApi.md#update_rule_group_mixin0)
|
525
|
+
- **PATCH**: /ioarules/entities/rule-groups/v1
|
526
|
+
- **Description**: Update a rule group. The following properties can be modified: name, description, enabled.
|
527
|
+
|
528
|
+
---
|
529
|
+
|
530
|
+
**Class**: `Falcon::CustomIoaApi`
|
531
|
+
|
532
|
+
- **Operation**: [**update_rules**](docs/CustomIoaApi.md#update_rules)
|
533
|
+
- **PATCH**: /ioarules/entities/rules/v1
|
534
|
+
- **Description**: Update rules within a rule group. Return the updated rules.
|
535
|
+
|
536
|
+
---
|
537
|
+
|
538
|
+
**Class**: `Falcon::CustomIoaApi`
|
539
|
+
|
540
|
+
- **Operation**: [**validate**](docs/CustomIoaApi.md#validate)
|
541
|
+
- **POST**: /ioarules/entities/rules/validate/v1
|
542
|
+
- **Description**: Validates field values and checks for matches if a test string is provided.
|
543
|
+
|
544
|
+
---
|
545
|
+
|
546
|
+
**Class**: `Falcon::D4cRegistrationApi`
|
547
|
+
|
548
|
+
- **Operation**: [**create_d4_c_aws_account**](docs/D4cRegistrationApi.md#create_d4_c_aws_account)
|
549
|
+
- **POST**: /cloud-connect-aws/entities/account/v2
|
550
|
+
- **Description**: Creates a new account in our system for a customer and generates a script for them to run in their AWS cloud environment to grant us access.
|
551
|
+
|
552
|
+
---
|
553
|
+
|
554
|
+
**Class**: `Falcon::D4cRegistrationApi`
|
555
|
+
|
556
|
+
- **Operation**: [**create_d4_cgcp_account**](docs/D4cRegistrationApi.md#create_d4_cgcp_account)
|
557
|
+
- **POST**: /cloud-connect-gcp/entities/account/v1
|
558
|
+
- **Description**: Creates a new account in our system for a customer and generates a new service account for them to add access to in their GCP environment to grant us access.
|
559
|
+
|
560
|
+
---
|
561
|
+
|
562
|
+
**Class**: `Falcon::D4cRegistrationApi`
|
563
|
+
|
564
|
+
- **Operation**: [**create_discover_cloud_azure_account**](docs/D4cRegistrationApi.md#create_discover_cloud_azure_account)
|
565
|
+
- **POST**: /cloud-connect-azure/entities/account/v1
|
566
|
+
- **Description**: Creates a new account in our system for a customer and generates a script for them to run in their cloud environment to grant us access.
|
567
|
+
|
568
|
+
---
|
569
|
+
|
570
|
+
**Class**: `Falcon::D4cRegistrationApi`
|
571
|
+
|
572
|
+
- **Operation**: [**delete_d4_c_aws_account**](docs/D4cRegistrationApi.md#delete_d4_c_aws_account)
|
573
|
+
- **DELETE**: /cloud-connect-aws/entities/account/v2
|
574
|
+
- **Description**: Deletes an existing AWS account or organization in our system.
|
575
|
+
|
576
|
+
---
|
577
|
+
|
578
|
+
**Class**: `Falcon::D4cRegistrationApi`
|
579
|
+
|
580
|
+
- **Operation**: [**discover_cloud_azure_download_certificate**](docs/D4cRegistrationApi.md#discover_cloud_azure_download_certificate)
|
581
|
+
- **GET**: /cloud-connect-azure/entities/download-certificate/v1
|
582
|
+
- **Description**: Returns JSON object(s) that contain the base64 encoded certificate for a service principal.
|
583
|
+
|
584
|
+
---
|
585
|
+
|
586
|
+
**Class**: `Falcon::D4cRegistrationApi`
|
587
|
+
|
588
|
+
- **Operation**: [**get_d4_c_aws_account**](docs/D4cRegistrationApi.md#get_d4_c_aws_account)
|
589
|
+
- **GET**: /cloud-connect-aws/entities/account/v2
|
590
|
+
- **Description**: Returns information about the current status of an AWS account.
|
591
|
+
|
592
|
+
---
|
593
|
+
|
594
|
+
**Class**: `Falcon::D4cRegistrationApi`
|
595
|
+
|
596
|
+
- **Operation**: [**get_d4_c_aws_console_setup_urls**](docs/D4cRegistrationApi.md#get_d4_c_aws_console_setup_urls)
|
597
|
+
- **GET**: /cloud-connect-aws/entities/console-setup-urls/v1
|
598
|
+
- **Description**: Return a URL for customer to visit in their cloud environment to grant us access to their AWS environment.
|
599
|
+
|
600
|
+
---
|
601
|
+
|
602
|
+
**Class**: `Falcon::D4cRegistrationApi`
|
603
|
+
|
604
|
+
- **Operation**: [**get_d4_caws_account_scripts_attachment**](docs/D4cRegistrationApi.md#get_d4_caws_account_scripts_attachment)
|
605
|
+
- **GET**: /cloud-connect-aws/entities/user-scripts-download/v1
|
606
|
+
- **Description**: Return a script for customer to run in their cloud environment to grant us access to their AWS environment as a downloadable attachment.
|
607
|
+
|
608
|
+
---
|
609
|
+
|
610
|
+
**Class**: `Falcon::D4cRegistrationApi`
|
611
|
+
|
612
|
+
- **Operation**: [**get_d4_ccgp_account**](docs/D4cRegistrationApi.md#get_d4_ccgp_account)
|
613
|
+
- **GET**: /cloud-connect-gcp/entities/account/v1
|
614
|
+
- **Description**: Returns information about the current status of an GCP account.
|
615
|
+
|
616
|
+
---
|
617
|
+
|
618
|
+
**Class**: `Falcon::D4cRegistrationApi`
|
619
|
+
|
620
|
+
- **Operation**: [**get_d4_cgcp_user_scripts**](docs/D4cRegistrationApi.md#get_d4_cgcp_user_scripts)
|
621
|
+
- **GET**: /cloud-connect-gcp/entities/user-scripts/v1
|
622
|
+
- **Description**: Return a script for customer to run in their cloud environment to grant us access to their GCP environment
|
623
|
+
|
624
|
+
---
|
625
|
+
|
626
|
+
**Class**: `Falcon::D4cRegistrationApi`
|
627
|
+
|
628
|
+
- **Operation**: [**get_discover_cloud_azure_account**](docs/D4cRegistrationApi.md#get_discover_cloud_azure_account)
|
629
|
+
- **GET**: /cloud-connect-azure/entities/account/v1
|
630
|
+
- **Description**: Return information about Azure account registration
|
631
|
+
|
632
|
+
---
|
633
|
+
|
634
|
+
**Class**: `Falcon::D4cRegistrationApi`
|
635
|
+
|
636
|
+
- **Operation**: [**get_discover_cloud_azure_tenant_ids**](docs/D4cRegistrationApi.md#get_discover_cloud_azure_tenant_ids)
|
637
|
+
- **GET**: /cloud-connect-azure/entities/tenant-id/v1
|
638
|
+
- **Description**: Return available tenant ids for discover for cloud
|
639
|
+
|
640
|
+
---
|
641
|
+
|
642
|
+
**Class**: `Falcon::D4cRegistrationApi`
|
643
|
+
|
644
|
+
- **Operation**: [**get_discover_cloud_azure_user_scripts**](docs/D4cRegistrationApi.md#get_discover_cloud_azure_user_scripts)
|
645
|
+
- **GET**: /cloud-connect-azure/entities/user-scripts/v1
|
646
|
+
- **Description**: Return a script for customer to run in their cloud environment to grant us access to their Azure environment
|
647
|
+
|
648
|
+
---
|
649
|
+
|
650
|
+
**Class**: `Falcon::D4cRegistrationApi`
|
651
|
+
|
652
|
+
- **Operation**: [**get_discover_cloud_azure_user_scripts_attachment**](docs/D4cRegistrationApi.md#get_discover_cloud_azure_user_scripts_attachment)
|
653
|
+
- **GET**: /cloud-connect-azure/entities/user-scripts-download/v1
|
654
|
+
- **Description**: Return a script for customer to run in their cloud environment to grant us access to their Azure environment as a downloadable attachment
|
655
|
+
|
656
|
+
---
|
657
|
+
|
658
|
+
**Class**: `Falcon::D4cRegistrationApi`
|
659
|
+
|
660
|
+
- **Operation**: [**get_horizon_d4_c_scripts**](docs/D4cRegistrationApi.md#get_horizon_d4_c_scripts)
|
661
|
+
- **GET**: /settings-discover/entities/gen/scripts/v1
|
662
|
+
- **Description**: Returns static install scripts for Horizon.
|
663
|
+
|
664
|
+
---
|
665
|
+
|
666
|
+
**Class**: `Falcon::D4cRegistrationApi`
|
667
|
+
|
668
|
+
- **Operation**: [**update_discover_cloud_azure_account_client_id**](docs/D4cRegistrationApi.md#update_discover_cloud_azure_account_client_id)
|
669
|
+
- **PATCH**: /cloud-connect-azure/entities/client-id/v1
|
670
|
+
- **Description**: Update an Azure service account in our system by with the user-created client_id created with the public key we've provided
|
671
|
+
|
672
|
+
---
|
673
|
+
|
674
|
+
**Class**: `Falcon::DetectsApi`
|
675
|
+
|
676
|
+
- **Operation**: [**get_aggregate_detects**](docs/DetectsApi.md#get_aggregate_detects)
|
677
|
+
- **POST**: /detects/aggregates/detects/GET/v1
|
678
|
+
- **Description**: Get detect aggregates as specified via json in request body.
|
679
|
+
|
680
|
+
---
|
681
|
+
|
682
|
+
**Class**: `Falcon::DetectsApi`
|
683
|
+
|
684
|
+
- **Operation**: [**get_detect_summaries**](docs/DetectsApi.md#get_detect_summaries)
|
685
|
+
- **POST**: /detects/entities/summaries/GET/v1
|
686
|
+
- **Description**: View information about detections
|
687
|
+
|
688
|
+
---
|
689
|
+
|
690
|
+
**Class**: `Falcon::DetectsApi`
|
691
|
+
|
692
|
+
- **Operation**: [**query_detects**](docs/DetectsApi.md#query_detects)
|
693
|
+
- **GET**: /detects/queries/detects/v1
|
694
|
+
- **Description**: Search for detection IDs that match a given query
|
695
|
+
|
696
|
+
---
|
697
|
+
|
698
|
+
**Class**: `Falcon::DetectsApi`
|
699
|
+
|
700
|
+
- **Operation**: [**update_detects_by_ids_v2**](docs/DetectsApi.md#update_detects_by_ids_v2)
|
701
|
+
- **PATCH**: /detects/entities/detects/v2
|
702
|
+
- **Description**: Modify the state, assignee, and visibility of detections
|
703
|
+
|
704
|
+
---
|
705
|
+
|
706
|
+
**Class**: `Falcon::DeviceControlPoliciesApi`
|
707
|
+
|
708
|
+
- **Operation**: [**create_device_control_policies**](docs/DeviceControlPoliciesApi.md#create_device_control_policies)
|
709
|
+
- **POST**: /policy/entities/device-control/v1
|
710
|
+
- **Description**: Create Device Control Policies by specifying details about the policy to create
|
711
|
+
|
712
|
+
---
|
713
|
+
|
714
|
+
**Class**: `Falcon::DeviceControlPoliciesApi`
|
715
|
+
|
716
|
+
- **Operation**: [**delete_device_control_policies**](docs/DeviceControlPoliciesApi.md#delete_device_control_policies)
|
717
|
+
- **DELETE**: /policy/entities/device-control/v1
|
718
|
+
- **Description**: Delete a set of Device Control Policies by specifying their IDs
|
719
|
+
|
720
|
+
---
|
721
|
+
|
722
|
+
**Class**: `Falcon::DeviceControlPoliciesApi`
|
723
|
+
|
724
|
+
- **Operation**: [**get_default_device_control_policies**](docs/DeviceControlPoliciesApi.md#get_default_device_control_policies)
|
725
|
+
- **GET**: /policy/entities/default-device-control/v1
|
726
|
+
- **Description**: Retrieve the configuration for a Default Device Control Policy
|
727
|
+
|
728
|
+
---
|
729
|
+
|
730
|
+
**Class**: `Falcon::DeviceControlPoliciesApi`
|
731
|
+
|
732
|
+
- **Operation**: [**get_device_control_policies**](docs/DeviceControlPoliciesApi.md#get_device_control_policies)
|
733
|
+
- **GET**: /policy/entities/device-control/v1
|
734
|
+
- **Description**: Retrieve a set of Device Control Policies by specifying their IDs
|
735
|
+
|
736
|
+
---
|
737
|
+
|
738
|
+
**Class**: `Falcon::DeviceControlPoliciesApi`
|
739
|
+
|
740
|
+
- **Operation**: [**perform_device_control_policies_action**](docs/DeviceControlPoliciesApi.md#perform_device_control_policies_action)
|
741
|
+
- **POST**: /policy/entities/device-control-actions/v1
|
742
|
+
- **Description**: Perform the specified action on the Device Control Policies specified in the request
|
743
|
+
|
744
|
+
---
|
745
|
+
|
746
|
+
**Class**: `Falcon::DeviceControlPoliciesApi`
|
747
|
+
|
748
|
+
- **Operation**: [**query_combined_device_control_policies**](docs/DeviceControlPoliciesApi.md#query_combined_device_control_policies)
|
749
|
+
- **GET**: /policy/combined/device-control/v1
|
750
|
+
- **Description**: Search for Device Control Policies in your environment by providing an FQL filter and paging details. Returns a set of Device Control Policies which match the filter criteria
|
751
|
+
|
752
|
+
---
|
753
|
+
|
754
|
+
**Class**: `Falcon::DeviceControlPoliciesApi`
|
755
|
+
|
756
|
+
- **Operation**: [**query_combined_device_control_policy_members**](docs/DeviceControlPoliciesApi.md#query_combined_device_control_policy_members)
|
757
|
+
- **GET**: /policy/combined/device-control-members/v1
|
758
|
+
- **Description**: Search for members of a Device Control Policy in your environment by providing an FQL filter and paging details. Returns a set of host details which match the filter criteria
|
759
|
+
|
760
|
+
---
|
761
|
+
|
762
|
+
**Class**: `Falcon::DeviceControlPoliciesApi`
|
763
|
+
|
764
|
+
- **Operation**: [**query_device_control_policies**](docs/DeviceControlPoliciesApi.md#query_device_control_policies)
|
765
|
+
- **GET**: /policy/queries/device-control/v1
|
766
|
+
- **Description**: Search for Device Control Policies in your environment by providing an FQL filter and paging details. Returns a set of Device Control Policy IDs which match the filter criteria
|
767
|
+
|
768
|
+
---
|
769
|
+
|
770
|
+
**Class**: `Falcon::DeviceControlPoliciesApi`
|
771
|
+
|
772
|
+
- **Operation**: [**query_device_control_policy_members**](docs/DeviceControlPoliciesApi.md#query_device_control_policy_members)
|
773
|
+
- **GET**: /policy/queries/device-control-members/v1
|
774
|
+
- **Description**: Search for members of a Device Control Policy in your environment by providing an FQL filter and paging details. Returns a set of Agent IDs which match the filter criteria
|
775
|
+
|
776
|
+
---
|
777
|
+
|
778
|
+
**Class**: `Falcon::DeviceControlPoliciesApi`
|
779
|
+
|
780
|
+
- **Operation**: [**set_device_control_policies_precedence**](docs/DeviceControlPoliciesApi.md#set_device_control_policies_precedence)
|
781
|
+
- **POST**: /policy/entities/device-control-precedence/v1
|
782
|
+
- **Description**: Sets the precedence of Device Control Policies based on the order of IDs specified in the request. The first ID specified will have the highest precedence and the last ID specified will have the lowest. You must specify all non-Default Policies for a platform when updating precedence
|
783
|
+
|
784
|
+
---
|
785
|
+
|
786
|
+
**Class**: `Falcon::DeviceControlPoliciesApi`
|
787
|
+
|
788
|
+
- **Operation**: [**update_default_device_control_policies**](docs/DeviceControlPoliciesApi.md#update_default_device_control_policies)
|
789
|
+
- **PATCH**: /policy/entities/default-device-control/v1
|
790
|
+
- **Description**: Update the configuration for a Default Device Control Policy
|
791
|
+
|
792
|
+
---
|
793
|
+
|
794
|
+
**Class**: `Falcon::DeviceControlPoliciesApi`
|
795
|
+
|
796
|
+
- **Operation**: [**update_device_control_policies**](docs/DeviceControlPoliciesApi.md#update_device_control_policies)
|
797
|
+
- **PATCH**: /policy/entities/device-control/v1
|
798
|
+
- **Description**: Update Device Control Policies by specifying the ID of the policy and details to update
|
799
|
+
|
800
|
+
---
|
801
|
+
|
802
|
+
**Class**: `Falcon::DiscoverApi`
|
803
|
+
|
804
|
+
- **Operation**: [**get_accounts**](docs/DiscoverApi.md#get_accounts)
|
805
|
+
- **GET**: /discover/entities/accounts/v1
|
806
|
+
- **Description**: Get details on accounts by providing one or more IDs.
|
807
|
+
|
808
|
+
---
|
809
|
+
|
810
|
+
**Class**: `Falcon::DiscoverApi`
|
811
|
+
|
812
|
+
- **Operation**: [**get_applications**](docs/DiscoverApi.md#get_applications)
|
813
|
+
- **GET**: /discover/entities/applications/v1
|
814
|
+
- **Description**: Get details on applications by providing one or more IDs.
|
815
|
+
|
816
|
+
---
|
817
|
+
|
818
|
+
**Class**: `Falcon::DiscoverApi`
|
819
|
+
|
820
|
+
- **Operation**: [**get_hosts**](docs/DiscoverApi.md#get_hosts)
|
821
|
+
- **GET**: /discover/entities/hosts/v1
|
822
|
+
- **Description**: Get details on assets by providing one or more IDs.
|
823
|
+
|
824
|
+
---
|
825
|
+
|
826
|
+
**Class**: `Falcon::DiscoverApi`
|
827
|
+
|
828
|
+
- **Operation**: [**get_logins**](docs/DiscoverApi.md#get_logins)
|
829
|
+
- **GET**: /discover/entities/logins/v1
|
830
|
+
- **Description**: Get details on logins by providing one or more IDs.
|
831
|
+
|
832
|
+
---
|
833
|
+
|
834
|
+
**Class**: `Falcon::DiscoverApi`
|
835
|
+
|
836
|
+
- **Operation**: [**query_accounts**](docs/DiscoverApi.md#query_accounts)
|
837
|
+
- **GET**: /discover/queries/accounts/v1
|
838
|
+
- **Description**: Search for accounts in your environment by providing an FQL (Falcon Query Language) filter and paging details. Returns a set of account IDs which match the filter criteria.
|
839
|
+
|
840
|
+
---
|
841
|
+
|
842
|
+
**Class**: `Falcon::DiscoverApi`
|
843
|
+
|
844
|
+
- **Operation**: [**query_active_discovery_networks**](docs/DiscoverApi.md#query_active_discovery_networks)
|
845
|
+
- **GET**: /discover/queries/active-discovery-networks/v1
|
846
|
+
- **Description**: Search for active discovery networks in your environment by providing an FQL filter and paging details. returns a set of network IDs which match the filter criteria.
|
847
|
+
|
848
|
+
---
|
849
|
+
|
850
|
+
**Class**: `Falcon::DiscoverApi`
|
851
|
+
|
852
|
+
- **Operation**: [**query_active_discovery_rules**](docs/DiscoverApi.md#query_active_discovery_rules)
|
853
|
+
- **GET**: /discover/queries/active-discovery-rules/v1
|
854
|
+
- **Description**: Search for active discovery rules in your environment by providing an FQL filter and paging details. returns a set of rule IDs which match the filter criteria.
|
855
|
+
|
856
|
+
---
|
857
|
+
|
858
|
+
**Class**: `Falcon::DiscoverApi`
|
859
|
+
|
860
|
+
- **Operation**: [**query_active_discovery_scanners**](docs/DiscoverApi.md#query_active_discovery_scanners)
|
861
|
+
- **GET**: /discover/queries/active-discovery-scanners/v1
|
862
|
+
- **Description**: Search for active discovery scanners in your environment by providing an FQL filter and paging details. returns a set of scanner IDs which match the filter criteria.
|
863
|
+
|
864
|
+
---
|
865
|
+
|
866
|
+
**Class**: `Falcon::DiscoverApi`
|
867
|
+
|
868
|
+
- **Operation**: [**query_active_discovery_scans**](docs/DiscoverApi.md#query_active_discovery_scans)
|
869
|
+
- **GET**: /discover/queries/active-discovery-scans/v1
|
870
|
+
- **Description**: Search for active discovery scans in your environment by providing an FQL filter and paging details. returns a set of scan IDs which match the filter criteria.
|
871
|
+
|
872
|
+
---
|
873
|
+
|
874
|
+
**Class**: `Falcon::DiscoverApi`
|
875
|
+
|
876
|
+
- **Operation**: [**query_applications**](docs/DiscoverApi.md#query_applications)
|
877
|
+
- **GET**: /discover/queries/applications/v1
|
878
|
+
- **Description**: Search for applications in your environment by providing an FQL filter and paging details. returns a set of application IDs which match the filter criteria.
|
879
|
+
|
880
|
+
---
|
881
|
+
|
882
|
+
**Class**: `Falcon::DiscoverApi`
|
883
|
+
|
884
|
+
- **Operation**: [**query_hosts**](docs/DiscoverApi.md#query_hosts)
|
885
|
+
- **GET**: /discover/queries/hosts/v1
|
886
|
+
- **Description**: Search for assets in your environment by providing an FQL (Falcon Query Language) filter and paging details. Returns a set of asset IDs which match the filter criteria.
|
887
|
+
|
888
|
+
---
|
889
|
+
|
890
|
+
**Class**: `Falcon::DiscoverApi`
|
891
|
+
|
892
|
+
- **Operation**: [**query_logins**](docs/DiscoverApi.md#query_logins)
|
893
|
+
- **GET**: /discover/queries/logins/v1
|
894
|
+
- **Description**: Search for logins in your environment by providing an FQL (Falcon Query Language) filter and paging details. Returns a set of login IDs which match the filter criteria.
|
895
|
+
|
896
|
+
---
|
897
|
+
|
898
|
+
**Class**: `Falcon::DiscoverIotApi`
|
899
|
+
|
900
|
+
- **Operation**: [**get_iot_hosts**](docs/DiscoverIotApi.md#get_iot_hosts)
|
901
|
+
- **GET**: /discover/entities/iot-hosts/v1
|
902
|
+
- **Description**: Get details on IoT assets by providing one or more IDs.
|
903
|
+
|
904
|
+
---
|
905
|
+
|
906
|
+
**Class**: `Falcon::DiscoverIotApi`
|
907
|
+
|
908
|
+
- **Operation**: [**query_iot_hosts**](docs/DiscoverIotApi.md#query_iot_hosts)
|
909
|
+
- **GET**: /discover/queries/iot-hosts/v1
|
910
|
+
- **Description**: Search for IoT assets in your environment by providing an FQL (Falcon Query Language) filter and paging details. Returns a set of asset IDs which match the filter criteria.
|
911
|
+
|
912
|
+
---
|
913
|
+
|
914
|
+
**Class**: `Falcon::EventSchemaApi`
|
915
|
+
|
916
|
+
- **Operation**: [**fdrschema_combined_event_get**](docs/EventSchemaApi.md#fdrschema_combined_event_get)
|
917
|
+
- **GET**: /fdr/combined/schema-members/v1
|
918
|
+
- **Description**: Fetch combined schema
|
919
|
+
|
920
|
+
---
|
921
|
+
|
922
|
+
**Class**: `Falcon::EventSchemaApi`
|
923
|
+
|
924
|
+
- **Operation**: [**fdrschema_entities_event_get**](docs/EventSchemaApi.md#fdrschema_entities_event_get)
|
925
|
+
- **GET**: /fdr/entities/schema-events/v1
|
926
|
+
- **Description**: Fetch event schema by ID
|
927
|
+
|
928
|
+
---
|
929
|
+
|
930
|
+
**Class**: `Falcon::EventSchemaApi`
|
931
|
+
|
932
|
+
- **Operation**: [**fdrschema_queries_event_get**](docs/EventSchemaApi.md#fdrschema_queries_event_get)
|
933
|
+
- **GET**: /fdr/queries/schema-events/v1
|
934
|
+
- **Description**: Get list of event IDs given a particular query.
|
935
|
+
|
936
|
+
---
|
937
|
+
|
938
|
+
**Class**: `Falcon::EventStreamsApi`
|
939
|
+
|
940
|
+
- **Operation**: [**list_available_streams_o_auth2**](docs/EventStreamsApi.md#list_available_streams_o_auth2)
|
941
|
+
- **GET**: /sensors/entities/datafeed/v2
|
942
|
+
- **Description**: Discover all event streams in your environment
|
943
|
+
|
944
|
+
---
|
945
|
+
|
946
|
+
**Class**: `Falcon::EventStreamsApi`
|
947
|
+
|
948
|
+
- **Operation**: [**refresh_active_stream_session**](docs/EventStreamsApi.md#refresh_active_stream_session)
|
949
|
+
- **POST**: /sensors/entities/datafeed-actions/v1/{partition}
|
950
|
+
- **Description**: Refresh an active event stream. Use the URL shown in a GET /sensors/entities/datafeed/v2 response.
|
951
|
+
|
952
|
+
---
|
953
|
+
|
954
|
+
**Class**: `Falcon::FalconCompleteDashboardApi`
|
955
|
+
|
956
|
+
- **Operation**: [**aggregate_allow_list**](docs/FalconCompleteDashboardApi.md#aggregate_allow_list)
|
957
|
+
- **POST**: /falcon-complete-dashboards/aggregates/allowlist/GET/v1
|
958
|
+
- **Description**: Retrieve aggregate allowlist ticket values based on the matched filter
|
959
|
+
|
960
|
+
---
|
961
|
+
|
962
|
+
**Class**: `Falcon::FalconCompleteDashboardApi`
|
963
|
+
|
964
|
+
- **Operation**: [**aggregate_block_list**](docs/FalconCompleteDashboardApi.md#aggregate_block_list)
|
965
|
+
- **POST**: /falcon-complete-dashboards/aggregates/blocklist/GET/v1
|
966
|
+
- **Description**: Retrieve aggregate blocklist ticket values based on the matched filter
|
967
|
+
|
968
|
+
---
|
969
|
+
|
970
|
+
**Class**: `Falcon::FalconCompleteDashboardApi`
|
971
|
+
|
972
|
+
- **Operation**: [**aggregate_detections**](docs/FalconCompleteDashboardApi.md#aggregate_detections)
|
973
|
+
- **POST**: /falcon-complete-dashboards/aggregates/detects/GET/v1
|
974
|
+
- **Description**: Retrieve aggregate detection values based on the matched filter
|
975
|
+
|
976
|
+
---
|
977
|
+
|
978
|
+
**Class**: `Falcon::FalconCompleteDashboardApi`
|
979
|
+
|
980
|
+
- **Operation**: [**aggregate_device_count_collection**](docs/FalconCompleteDashboardApi.md#aggregate_device_count_collection)
|
981
|
+
- **POST**: /falcon-complete-dashboards/aggregates/devicecount-collections/GET/v1
|
982
|
+
- **Description**: Retrieve aggregate host/devices count based on the matched filter
|
983
|
+
|
984
|
+
---
|
985
|
+
|
986
|
+
**Class**: `Falcon::FalconCompleteDashboardApi`
|
987
|
+
|
988
|
+
- **Operation**: [**aggregate_escalations**](docs/FalconCompleteDashboardApi.md#aggregate_escalations)
|
989
|
+
- **POST**: /falcon-complete-dashboards/aggregates/escalations/GET/v1
|
990
|
+
- **Description**: Retrieve aggregate escalation ticket values based on the matched filter
|
991
|
+
|
992
|
+
---
|
993
|
+
|
994
|
+
**Class**: `Falcon::FalconCompleteDashboardApi`
|
995
|
+
|
996
|
+
- **Operation**: [**aggregate_fc_incidents**](docs/FalconCompleteDashboardApi.md#aggregate_fc_incidents)
|
997
|
+
- **POST**: /falcon-complete-dashboards/aggregates/incidents/GET/v1
|
998
|
+
- **Description**: Retrieve aggregate incident values based on the matched filter
|
999
|
+
|
1000
|
+
---
|
1001
|
+
|
1002
|
+
**Class**: `Falcon::FalconCompleteDashboardApi`
|
1003
|
+
|
1004
|
+
- **Operation**: [**aggregate_remediations**](docs/FalconCompleteDashboardApi.md#aggregate_remediations)
|
1005
|
+
- **POST**: /falcon-complete-dashboards/aggregates/remediations/GET/v1
|
1006
|
+
- **Description**: Retrieve aggregate remediation ticket values based on the matched filter
|
1007
|
+
|
1008
|
+
---
|
1009
|
+
|
1010
|
+
**Class**: `Falcon::FalconCompleteDashboardApi`
|
1011
|
+
|
1012
|
+
- **Operation**: [**get_device_count_collection_queries_by_filter**](docs/FalconCompleteDashboardApi.md#get_device_count_collection_queries_by_filter)
|
1013
|
+
- **GET**: /falcon-complete-dashboards/queries/devicecount-collections/v1
|
1014
|
+
- **Description**: Retrieve device count collection Ids that match the provided FQL filter, criteria with scrolling enabled
|
1015
|
+
|
1016
|
+
---
|
1017
|
+
|
1018
|
+
**Class**: `Falcon::FalconCompleteDashboardApi`
|
1019
|
+
|
1020
|
+
- **Operation**: [**query_allow_list_filter**](docs/FalconCompleteDashboardApi.md#query_allow_list_filter)
|
1021
|
+
- **GET**: /falcon-complete-dashboards/queries/allowlist/v1
|
1022
|
+
- **Description**: Retrieve allowlist tickets that match the provided filter criteria with scrolling enabled
|
1023
|
+
|
1024
|
+
---
|
1025
|
+
|
1026
|
+
**Class**: `Falcon::FalconCompleteDashboardApi`
|
1027
|
+
|
1028
|
+
- **Operation**: [**query_block_list_filter**](docs/FalconCompleteDashboardApi.md#query_block_list_filter)
|
1029
|
+
- **GET**: /falcon-complete-dashboards/queries/blocklist/v1
|
1030
|
+
- **Description**: Retrieve block listtickets that match the provided filter criteria with scrolling enabled
|
1031
|
+
|
1032
|
+
---
|
1033
|
+
|
1034
|
+
**Class**: `Falcon::FalconCompleteDashboardApi`
|
1035
|
+
|
1036
|
+
- **Operation**: [**query_detection_ids_by_filter**](docs/FalconCompleteDashboardApi.md#query_detection_ids_by_filter)
|
1037
|
+
- **GET**: /falcon-complete-dashboards/queries/detects/v1
|
1038
|
+
- **Description**: Retrieve DetectionsIds that match the provided FQL filter, criteria with scrolling enabled
|
1039
|
+
|
1040
|
+
---
|
1041
|
+
|
1042
|
+
**Class**: `Falcon::FalconCompleteDashboardApi`
|
1043
|
+
|
1044
|
+
- **Operation**: [**query_escalations_filter**](docs/FalconCompleteDashboardApi.md#query_escalations_filter)
|
1045
|
+
- **GET**: /falcon-complete-dashboards/queries/escalations/v1
|
1046
|
+
- **Description**: Retrieve escalation tickets that match the provided filter criteria with scrolling enabled
|
1047
|
+
|
1048
|
+
---
|
1049
|
+
|
1050
|
+
**Class**: `Falcon::FalconCompleteDashboardApi`
|
1051
|
+
|
1052
|
+
- **Operation**: [**query_incident_ids_by_filter**](docs/FalconCompleteDashboardApi.md#query_incident_ids_by_filter)
|
1053
|
+
- **GET**: /falcon-complete-dashboards/queries/incidents/v1
|
1054
|
+
- **Description**: Retrieve incidents that match the provided filter criteria with scrolling enabled
|
1055
|
+
|
1056
|
+
---
|
1057
|
+
|
1058
|
+
**Class**: `Falcon::FalconCompleteDashboardApi`
|
1059
|
+
|
1060
|
+
- **Operation**: [**query_remediations_filter**](docs/FalconCompleteDashboardApi.md#query_remediations_filter)
|
1061
|
+
- **GET**: /falcon-complete-dashboards/queries/remediations/v1
|
1062
|
+
- **Description**: Retrieve remediation tickets that match the provided filter criteria with scrolling enabled
|
1063
|
+
|
1064
|
+
---
|
1065
|
+
|
1066
|
+
**Class**: `Falcon::FalconContainerApi`
|
1067
|
+
|
1068
|
+
- **Operation**: [**get_credentials**](docs/FalconContainerApi.md#get_credentials)
|
1069
|
+
- **GET**: /container-security/entities/image-registry-credentials/v1
|
1070
|
+
- **Description**: Gets the registry credentials
|
1071
|
+
|
1072
|
+
---
|
1073
|
+
|
1074
|
+
**Class**: `Falcon::FalconContainerCliApi`
|
1075
|
+
|
1076
|
+
- **Operation**: [**read_image_vulnerabilities**](docs/FalconContainerCliApi.md#read_image_vulnerabilities)
|
1077
|
+
- **POST**: /image-assessment/combined/vulnerability-lookups/v1
|
1078
|
+
- **Description**: Retrieve known vulnerabilities for the provided image
|
1079
|
+
|
1080
|
+
---
|
1081
|
+
|
1082
|
+
**Class**: `Falcon::FalconContainerImageApi`
|
1083
|
+
|
1084
|
+
- **Operation**: [**create_registry_entities**](docs/FalconContainerImageApi.md#create_registry_entities)
|
1085
|
+
- **POST**: /container-security/entities/registries/v1
|
1086
|
+
- **Description**: Create a registry entity using the provided details
|
1087
|
+
|
1088
|
+
---
|
1089
|
+
|
1090
|
+
**Class**: `Falcon::FalconContainerImageApi`
|
1091
|
+
|
1092
|
+
- **Operation**: [**delete_registry_entities**](docs/FalconContainerImageApi.md#delete_registry_entities)
|
1093
|
+
- **DELETE**: /container-security/entities/registries/v1
|
1094
|
+
- **Description**: Delete the registry entity identified by the entity UUID
|
1095
|
+
|
1096
|
+
---
|
1097
|
+
|
1098
|
+
**Class**: `Falcon::FalconContainerImageApi`
|
1099
|
+
|
1100
|
+
- **Operation**: [**read_registry_entities**](docs/FalconContainerImageApi.md#read_registry_entities)
|
1101
|
+
- **GET**: /container-security/queries/registries/v1
|
1102
|
+
- **Description**: Retrieve registry entities identified by the customer id
|
1103
|
+
|
1104
|
+
---
|
1105
|
+
|
1106
|
+
**Class**: `Falcon::FalconContainerImageApi`
|
1107
|
+
|
1108
|
+
- **Operation**: [**read_registry_entities_by_uuid**](docs/FalconContainerImageApi.md#read_registry_entities_by_uuid)
|
1109
|
+
- **GET**: /container-security/entities/registries/v1
|
1110
|
+
- **Description**: Retrieve the registry entity identified by the entity UUID
|
1111
|
+
|
1112
|
+
---
|
1113
|
+
|
1114
|
+
**Class**: `Falcon::FalconContainerImageApi`
|
1115
|
+
|
1116
|
+
- **Operation**: [**update_registry_entities**](docs/FalconContainerImageApi.md#update_registry_entities)
|
1117
|
+
- **PATCH**: /container-security/entities/registries/v1
|
1118
|
+
- **Description**: Update the registry entity, as identified by the entity UUID, using the provided details
|
1119
|
+
|
1120
|
+
---
|
1121
|
+
|
1122
|
+
**Class**: `Falcon::FalconxSandboxApi`
|
1123
|
+
|
1124
|
+
- **Operation**: [**delete_report**](docs/FalconxSandboxApi.md#delete_report)
|
1125
|
+
- **DELETE**: /falconx/entities/reports/v1
|
1126
|
+
- **Description**: Delete report based on the report ID. Operation can be checked for success by polling for the report ID on the report-summaries endpoint.
|
1127
|
+
|
1128
|
+
---
|
1129
|
+
|
1130
|
+
**Class**: `Falcon::FalconxSandboxApi`
|
1131
|
+
|
1132
|
+
- **Operation**: [**delete_sample_v2**](docs/FalconxSandboxApi.md#delete_sample_v2)
|
1133
|
+
- **DELETE**: /samples/entities/samples/v2
|
1134
|
+
- **Description**: Removes a sample, including file, meta and submissions from the collection
|
1135
|
+
|
1136
|
+
---
|
1137
|
+
|
1138
|
+
**Class**: `Falcon::FalconxSandboxApi`
|
1139
|
+
|
1140
|
+
- **Operation**: [**get_artifacts**](docs/FalconxSandboxApi.md#get_artifacts)
|
1141
|
+
- **GET**: /falconx/entities/artifacts/v1
|
1142
|
+
- **Description**: Download IOC packs, PCAP files, memory dumps, and other analysis artifacts.
|
1143
|
+
|
1144
|
+
---
|
1145
|
+
|
1146
|
+
**Class**: `Falcon::FalconxSandboxApi`
|
1147
|
+
|
1148
|
+
- **Operation**: [**get_memory_dump**](docs/FalconxSandboxApi.md#get_memory_dump)
|
1149
|
+
- **GET**: /falconx/entities/memory-dump/v1
|
1150
|
+
- **Description**: Get memory dump content, as binary
|
1151
|
+
|
1152
|
+
---
|
1153
|
+
|
1154
|
+
**Class**: `Falcon::FalconxSandboxApi`
|
1155
|
+
|
1156
|
+
- **Operation**: [**get_memory_dump_extracted_strings**](docs/FalconxSandboxApi.md#get_memory_dump_extracted_strings)
|
1157
|
+
- **GET**: /falconx/entities/memory-dump/extracted-strings/v1
|
1158
|
+
- **Description**: Get extracted strings from a memory dump
|
1159
|
+
|
1160
|
+
---
|
1161
|
+
|
1162
|
+
**Class**: `Falcon::FalconxSandboxApi`
|
1163
|
+
|
1164
|
+
- **Operation**: [**get_memory_dump_hex_dump**](docs/FalconxSandboxApi.md#get_memory_dump_hex_dump)
|
1165
|
+
- **GET**: /falconx/entities/memory-dump/hex-dump/v1
|
1166
|
+
- **Description**: Get hex view of a memory dump
|
1167
|
+
|
1168
|
+
---
|
1169
|
+
|
1170
|
+
**Class**: `Falcon::FalconxSandboxApi`
|
1171
|
+
|
1172
|
+
- **Operation**: [**get_reports**](docs/FalconxSandboxApi.md#get_reports)
|
1173
|
+
- **GET**: /falconx/entities/reports/v1
|
1174
|
+
- **Description**: Get a full sandbox report.
|
1175
|
+
|
1176
|
+
---
|
1177
|
+
|
1178
|
+
**Class**: `Falcon::FalconxSandboxApi`
|
1179
|
+
|
1180
|
+
- **Operation**: [**get_sample_v2**](docs/FalconxSandboxApi.md#get_sample_v2)
|
1181
|
+
- **GET**: /samples/entities/samples/v2
|
1182
|
+
- **Description**: Retrieves the file associated with the given ID (SHA256)
|
1183
|
+
|
1184
|
+
---
|
1185
|
+
|
1186
|
+
**Class**: `Falcon::FalconxSandboxApi`
|
1187
|
+
|
1188
|
+
- **Operation**: [**get_submissions**](docs/FalconxSandboxApi.md#get_submissions)
|
1189
|
+
- **GET**: /falconx/entities/submissions/v1
|
1190
|
+
- **Description**: Check the status of a sandbox analysis. Time required for analysis varies but is usually less than 15 minutes.
|
1191
|
+
|
1192
|
+
---
|
1193
|
+
|
1194
|
+
**Class**: `Falcon::FalconxSandboxApi`
|
1195
|
+
|
1196
|
+
- **Operation**: [**get_summary_reports**](docs/FalconxSandboxApi.md#get_summary_reports)
|
1197
|
+
- **GET**: /falconx/entities/report-summaries/v1
|
1198
|
+
- **Description**: Get a short summary version of a sandbox report.
|
1199
|
+
|
1200
|
+
---
|
1201
|
+
|
1202
|
+
**Class**: `Falcon::FalconxSandboxApi`
|
1203
|
+
|
1204
|
+
- **Operation**: [**query_reports**](docs/FalconxSandboxApi.md#query_reports)
|
1205
|
+
- **GET**: /falconx/queries/reports/v1
|
1206
|
+
- **Description**: Find sandbox reports by providing an FQL filter and paging details. Returns a set of report IDs that match your criteria.
|
1207
|
+
|
1208
|
+
---
|
1209
|
+
|
1210
|
+
**Class**: `Falcon::FalconxSandboxApi`
|
1211
|
+
|
1212
|
+
- **Operation**: [**query_sample_v1**](docs/FalconxSandboxApi.md#query_sample_v1)
|
1213
|
+
- **POST**: /samples/queries/samples/GET/v1
|
1214
|
+
- **Description**: Retrieves a list with sha256 of samples that exist and customer has rights to access them, maximum number of accepted items is 200
|
1215
|
+
|
1216
|
+
---
|
1217
|
+
|
1218
|
+
**Class**: `Falcon::FalconxSandboxApi`
|
1219
|
+
|
1220
|
+
- **Operation**: [**query_submissions**](docs/FalconxSandboxApi.md#query_submissions)
|
1221
|
+
- **GET**: /falconx/queries/submissions/v1
|
1222
|
+
- **Description**: Find submission IDs for uploaded files by providing an FQL filter and paging details. Returns a set of submission IDs that match your criteria.
|
1223
|
+
|
1224
|
+
---
|
1225
|
+
|
1226
|
+
**Class**: `Falcon::FalconxSandboxApi`
|
1227
|
+
|
1228
|
+
- **Operation**: [**submit**](docs/FalconxSandboxApi.md#submit)
|
1229
|
+
- **POST**: /falconx/entities/submissions/v1
|
1230
|
+
- **Description**: Submit an uploaded file or a URL for sandbox analysis. Time required for analysis varies but is usually less than 15 minutes.
|
1231
|
+
|
1232
|
+
---
|
1233
|
+
|
1234
|
+
**Class**: `Falcon::FalconxSandboxApi`
|
1235
|
+
|
1236
|
+
- **Operation**: [**upload_sample_v2**](docs/FalconxSandboxApi.md#upload_sample_v2)
|
1237
|
+
- **POST**: /samples/entities/samples/v2
|
1238
|
+
- **Description**: Upload a file for sandbox analysis. After uploading, use `/falconx/entities/submissions/v1` to start analyzing the file.
|
1239
|
+
|
1240
|
+
---
|
1241
|
+
|
1242
|
+
**Class**: `Falcon::FieldSchemaApi`
|
1243
|
+
|
1244
|
+
- **Operation**: [**fdrschema_entities_field_get**](docs/FieldSchemaApi.md#fdrschema_entities_field_get)
|
1245
|
+
- **GET**: /fdr/entities/schema-fields/v1
|
1246
|
+
- **Description**: Fetch field schema by ID
|
1247
|
+
|
1248
|
+
---
|
1249
|
+
|
1250
|
+
**Class**: `Falcon::FieldSchemaApi`
|
1251
|
+
|
1252
|
+
- **Operation**: [**fdrschema_queries_field_get**](docs/FieldSchemaApi.md#fdrschema_queries_field_get)
|
1253
|
+
- **GET**: /fdr/queries/schema-fields/v1
|
1254
|
+
- **Description**: Get list of field IDs given a particular query.
|
1255
|
+
|
1256
|
+
---
|
1257
|
+
|
1258
|
+
**Class**: `Falcon::FilevantageApi`
|
1259
|
+
|
1260
|
+
- **Operation**: [**get_changes**](docs/FilevantageApi.md#get_changes)
|
1261
|
+
- **GET**: /filevantage/entities/changes/v2
|
1262
|
+
- **Description**: Retrieve information on changes
|
1263
|
+
|
1264
|
+
---
|
1265
|
+
|
1266
|
+
**Class**: `Falcon::FilevantageApi`
|
1267
|
+
|
1268
|
+
- **Operation**: [**query_changes**](docs/FilevantageApi.md#query_changes)
|
1269
|
+
- **GET**: /filevantage/queries/changes/v2
|
1270
|
+
- **Description**: Returns one or more change IDs
|
1271
|
+
|
1272
|
+
---
|
1273
|
+
|
1274
|
+
**Class**: `Falcon::FirewallManagementApi`
|
1275
|
+
|
1276
|
+
- **Operation**: [**aggregate_events**](docs/FirewallManagementApi.md#aggregate_events)
|
1277
|
+
- **POST**: /fwmgr/aggregates/events/GET/v1
|
1278
|
+
- **Description**: Aggregate events for customer
|
1279
|
+
|
1280
|
+
---
|
1281
|
+
|
1282
|
+
**Class**: `Falcon::FirewallManagementApi`
|
1283
|
+
|
1284
|
+
- **Operation**: [**aggregate_policy_rules**](docs/FirewallManagementApi.md#aggregate_policy_rules)
|
1285
|
+
- **POST**: /fwmgr/aggregates/policy-rules/GET/v1
|
1286
|
+
- **Description**: Aggregate rules within a policy for customer
|
1287
|
+
|
1288
|
+
---
|
1289
|
+
|
1290
|
+
**Class**: `Falcon::FirewallManagementApi`
|
1291
|
+
|
1292
|
+
- **Operation**: [**aggregate_rule_groups**](docs/FirewallManagementApi.md#aggregate_rule_groups)
|
1293
|
+
- **POST**: /fwmgr/aggregates/rule-groups/GET/v1
|
1294
|
+
- **Description**: Aggregate rule groups for customer
|
1295
|
+
|
1296
|
+
---
|
1297
|
+
|
1298
|
+
**Class**: `Falcon::FirewallManagementApi`
|
1299
|
+
|
1300
|
+
- **Operation**: [**aggregate_rules**](docs/FirewallManagementApi.md#aggregate_rules)
|
1301
|
+
- **POST**: /fwmgr/aggregates/rules/GET/v1
|
1302
|
+
- **Description**: Aggregate rules for customer
|
1303
|
+
|
1304
|
+
---
|
1305
|
+
|
1306
|
+
**Class**: `Falcon::FirewallManagementApi`
|
1307
|
+
|
1308
|
+
- **Operation**: [**create_network_locations**](docs/FirewallManagementApi.md#create_network_locations)
|
1309
|
+
- **POST**: /fwmgr/entities/network-locations/v1
|
1310
|
+
- **Description**: Create new network locations provided, and return the ID.
|
1311
|
+
|
1312
|
+
---
|
1313
|
+
|
1314
|
+
**Class**: `Falcon::FirewallManagementApi`
|
1315
|
+
|
1316
|
+
- **Operation**: [**create_rule_group**](docs/FirewallManagementApi.md#create_rule_group)
|
1317
|
+
- **POST**: /fwmgr/entities/rule-groups/v1
|
1318
|
+
- **Description**: Create new rule group on a platform for a customer with a name and description, and return the ID
|
1319
|
+
|
1320
|
+
---
|
1321
|
+
|
1322
|
+
**Class**: `Falcon::FirewallManagementApi`
|
1323
|
+
|
1324
|
+
- **Operation**: [**create_rule_group_validation**](docs/FirewallManagementApi.md#create_rule_group_validation)
|
1325
|
+
- **POST**: /fwmgr/entities/rule-groups/validation/v1
|
1326
|
+
- **Description**: Validates the request of creating a new rule group on a platform for a customer with a name and description
|
1327
|
+
|
1328
|
+
---
|
1329
|
+
|
1330
|
+
**Class**: `Falcon::FirewallManagementApi`
|
1331
|
+
|
1332
|
+
- **Operation**: [**delete_network_locations**](docs/FirewallManagementApi.md#delete_network_locations)
|
1333
|
+
- **DELETE**: /fwmgr/entities/network-locations/v1
|
1334
|
+
- **Description**: Delete network location entities by ID.
|
1335
|
+
|
1336
|
+
---
|
1337
|
+
|
1338
|
+
**Class**: `Falcon::FirewallManagementApi`
|
1339
|
+
|
1340
|
+
- **Operation**: [**delete_rule_groups**](docs/FirewallManagementApi.md#delete_rule_groups)
|
1341
|
+
- **DELETE**: /fwmgr/entities/rule-groups/v1
|
1342
|
+
- **Description**: Delete rule group entities by ID
|
1343
|
+
|
1344
|
+
---
|
1345
|
+
|
1346
|
+
**Class**: `Falcon::FirewallManagementApi`
|
1347
|
+
|
1348
|
+
- **Operation**: [**get_events**](docs/FirewallManagementApi.md#get_events)
|
1349
|
+
- **GET**: /fwmgr/entities/events/v1
|
1350
|
+
- **Description**: Get events entities by ID and optionally version
|
1351
|
+
|
1352
|
+
---
|
1353
|
+
|
1354
|
+
**Class**: `Falcon::FirewallManagementApi`
|
1355
|
+
|
1356
|
+
- **Operation**: [**get_firewall_fields**](docs/FirewallManagementApi.md#get_firewall_fields)
|
1357
|
+
- **GET**: /fwmgr/entities/firewall-fields/v1
|
1358
|
+
- **Description**: Get the firewall field specifications by ID
|
1359
|
+
|
1360
|
+
---
|
1361
|
+
|
1362
|
+
**Class**: `Falcon::FirewallManagementApi`
|
1363
|
+
|
1364
|
+
- **Operation**: [**get_network_locations**](docs/FirewallManagementApi.md#get_network_locations)
|
1365
|
+
- **GET**: /fwmgr/entities/network-locations/v1
|
1366
|
+
- **Description**: Get a summary of network locations entities by ID
|
1367
|
+
|
1368
|
+
---
|
1369
|
+
|
1370
|
+
**Class**: `Falcon::FirewallManagementApi`
|
1371
|
+
|
1372
|
+
- **Operation**: [**get_network_locations_details**](docs/FirewallManagementApi.md#get_network_locations_details)
|
1373
|
+
- **GET**: /fwmgr/entities/network-locations-details/v1
|
1374
|
+
- **Description**: Get network locations entities by ID
|
1375
|
+
|
1376
|
+
---
|
1377
|
+
|
1378
|
+
**Class**: `Falcon::FirewallManagementApi`
|
1379
|
+
|
1380
|
+
- **Operation**: [**get_platforms**](docs/FirewallManagementApi.md#get_platforms)
|
1381
|
+
- **GET**: /fwmgr/entities/platforms/v1
|
1382
|
+
- **Description**: Get platforms by ID, e.g., windows or mac or droid
|
1383
|
+
|
1384
|
+
---
|
1385
|
+
|
1386
|
+
**Class**: `Falcon::FirewallManagementApi`
|
1387
|
+
|
1388
|
+
- **Operation**: [**get_policy_containers**](docs/FirewallManagementApi.md#get_policy_containers)
|
1389
|
+
- **GET**: /fwmgr/entities/policies/v1
|
1390
|
+
- **Description**: Get policy container entities by policy ID
|
1391
|
+
|
1392
|
+
---
|
1393
|
+
|
1394
|
+
**Class**: `Falcon::FirewallManagementApi`
|
1395
|
+
|
1396
|
+
- **Operation**: [**get_rule_groups**](docs/FirewallManagementApi.md#get_rule_groups)
|
1397
|
+
- **GET**: /fwmgr/entities/rule-groups/v1
|
1398
|
+
- **Description**: Get rule group entities by ID. These groups do not contain their rule entites, just the rule IDs in precedence order.
|
1399
|
+
|
1400
|
+
---
|
1401
|
+
|
1402
|
+
**Class**: `Falcon::FirewallManagementApi`
|
1403
|
+
|
1404
|
+
- **Operation**: [**get_rules**](docs/FirewallManagementApi.md#get_rules)
|
1405
|
+
- **GET**: /fwmgr/entities/rules/v1
|
1406
|
+
- **Description**: Get rule entities by ID (64-bit unsigned int as decimal string) or Family ID (32-character hexadecimal string)
|
1407
|
+
|
1408
|
+
---
|
1409
|
+
|
1410
|
+
**Class**: `Falcon::FirewallManagementApi`
|
1411
|
+
|
1412
|
+
- **Operation**: [**query_events**](docs/FirewallManagementApi.md#query_events)
|
1413
|
+
- **GET**: /fwmgr/queries/events/v1
|
1414
|
+
- **Description**: Find all event IDs matching the query with filter
|
1415
|
+
|
1416
|
+
---
|
1417
|
+
|
1418
|
+
**Class**: `Falcon::FirewallManagementApi`
|
1419
|
+
|
1420
|
+
- **Operation**: [**query_firewall_fields**](docs/FirewallManagementApi.md#query_firewall_fields)
|
1421
|
+
- **GET**: /fwmgr/queries/firewall-fields/v1
|
1422
|
+
- **Description**: Get the firewall field specification IDs for the provided platform
|
1423
|
+
|
1424
|
+
---
|
1425
|
+
|
1426
|
+
**Class**: `Falcon::FirewallManagementApi`
|
1427
|
+
|
1428
|
+
- **Operation**: [**query_network_locations**](docs/FirewallManagementApi.md#query_network_locations)
|
1429
|
+
- **GET**: /fwmgr/queries/network-locations/v1
|
1430
|
+
- **Description**: Get a list of network location IDs
|
1431
|
+
|
1432
|
+
---
|
1433
|
+
|
1434
|
+
**Class**: `Falcon::FirewallManagementApi`
|
1435
|
+
|
1436
|
+
- **Operation**: [**query_platforms**](docs/FirewallManagementApi.md#query_platforms)
|
1437
|
+
- **GET**: /fwmgr/queries/platforms/v1
|
1438
|
+
- **Description**: Get the list of platform names
|
1439
|
+
|
1440
|
+
---
|
1441
|
+
|
1442
|
+
**Class**: `Falcon::FirewallManagementApi`
|
1443
|
+
|
1444
|
+
- **Operation**: [**query_policy_rules**](docs/FirewallManagementApi.md#query_policy_rules)
|
1445
|
+
- **GET**: /fwmgr/queries/policy-rules/v1
|
1446
|
+
- **Description**: Find all firewall rule IDs matching the query with filter, and return them in precedence order
|
1447
|
+
|
1448
|
+
---
|
1449
|
+
|
1450
|
+
**Class**: `Falcon::FirewallManagementApi`
|
1451
|
+
|
1452
|
+
- **Operation**: [**query_rule_groups**](docs/FirewallManagementApi.md#query_rule_groups)
|
1453
|
+
- **GET**: /fwmgr/queries/rule-groups/v1
|
1454
|
+
- **Description**: Find all rule group IDs matching the query with filter
|
1455
|
+
|
1456
|
+
---
|
1457
|
+
|
1458
|
+
**Class**: `Falcon::FirewallManagementApi`
|
1459
|
+
|
1460
|
+
- **Operation**: [**query_rules**](docs/FirewallManagementApi.md#query_rules)
|
1461
|
+
- **GET**: /fwmgr/queries/rules/v1
|
1462
|
+
- **Description**: Find all rule IDs matching the query with filter
|
1463
|
+
|
1464
|
+
---
|
1465
|
+
|
1466
|
+
**Class**: `Falcon::FirewallManagementApi`
|
1467
|
+
|
1468
|
+
- **Operation**: [**update_network_locations**](docs/FirewallManagementApi.md#update_network_locations)
|
1469
|
+
- **PATCH**: /fwmgr/entities/network-locations/v1
|
1470
|
+
- **Description**: Updates the network locations provided, and return the ID.
|
1471
|
+
|
1472
|
+
---
|
1473
|
+
|
1474
|
+
**Class**: `Falcon::FirewallManagementApi`
|
1475
|
+
|
1476
|
+
- **Operation**: [**update_network_locations_metadata**](docs/FirewallManagementApi.md#update_network_locations_metadata)
|
1477
|
+
- **POST**: /fwmgr/entities/network-locations-metadata/v1
|
1478
|
+
- **Description**: Updates the network locations metadata such as polling_intervals for the cid
|
1479
|
+
|
1480
|
+
---
|
1481
|
+
|
1482
|
+
**Class**: `Falcon::FirewallManagementApi`
|
1483
|
+
|
1484
|
+
- **Operation**: [**update_network_locations_precedence**](docs/FirewallManagementApi.md#update_network_locations_precedence)
|
1485
|
+
- **POST**: /fwmgr/entities/network-locations-precedence/v1
|
1486
|
+
- **Description**: Updates the network locations precedence according to the list of ids provided.
|
1487
|
+
|
1488
|
+
---
|
1489
|
+
|
1490
|
+
**Class**: `Falcon::FirewallManagementApi`
|
1491
|
+
|
1492
|
+
- **Operation**: [**update_policy_container**](docs/FirewallManagementApi.md#update_policy_container)
|
1493
|
+
- **PUT**: /fwmgr/entities/policies/v2
|
1494
|
+
- **Description**: Update an identified policy container, including local logging functionality.
|
1495
|
+
|
1496
|
+
---
|
1497
|
+
|
1498
|
+
**Class**: `Falcon::FirewallManagementApi`
|
1499
|
+
|
1500
|
+
- **Operation**: [**update_policy_container_v1**](docs/FirewallManagementApi.md#update_policy_container_v1)
|
1501
|
+
- **PUT**: /fwmgr/entities/policies/v1
|
1502
|
+
- **Description**: Update an identified policy container. WARNING: This endpoint is deprecated in favor of v2, using this endpoint could disable your local logging setting.
|
1503
|
+
|
1504
|
+
---
|
1505
|
+
|
1506
|
+
**Class**: `Falcon::FirewallManagementApi`
|
1507
|
+
|
1508
|
+
- **Operation**: [**update_rule_group**](docs/FirewallManagementApi.md#update_rule_group)
|
1509
|
+
- **PATCH**: /fwmgr/entities/rule-groups/v1
|
1510
|
+
- **Description**: Update name, description, or enabled status of a rule group, or create, edit, delete, or reorder rules
|
1511
|
+
|
1512
|
+
---
|
1513
|
+
|
1514
|
+
**Class**: `Falcon::FirewallManagementApi`
|
1515
|
+
|
1516
|
+
- **Operation**: [**update_rule_group_validation**](docs/FirewallManagementApi.md#update_rule_group_validation)
|
1517
|
+
- **PATCH**: /fwmgr/entities/rule-groups/validation/v1
|
1518
|
+
- **Description**: Validates the request of updating name, description, or enabled status of a rule group, or create, edit, delete, or reorder rules
|
1519
|
+
|
1520
|
+
---
|
1521
|
+
|
1522
|
+
**Class**: `Falcon::FirewallManagementApi`
|
1523
|
+
|
1524
|
+
- **Operation**: [**upsert_network_locations**](docs/FirewallManagementApi.md#upsert_network_locations)
|
1525
|
+
- **PUT**: /fwmgr/entities/network-locations/v1
|
1526
|
+
- **Description**: Updates the network locations provided, and return the ID.
|
1527
|
+
|
1528
|
+
---
|
1529
|
+
|
1530
|
+
**Class**: `Falcon::FirewallManagementApi`
|
1531
|
+
|
1532
|
+
- **Operation**: [**validate_filepath_pattern**](docs/FirewallManagementApi.md#validate_filepath_pattern)
|
1533
|
+
- **POST**: /fwmgr/entities/rules/validate-filepath/v1
|
1534
|
+
- **Description**: Validates that the test pattern matches the executable filepath glob pattern.
|
1535
|
+
|
1536
|
+
---
|
1537
|
+
|
1538
|
+
**Class**: `Falcon::FirewallPoliciesApi`
|
1539
|
+
|
1540
|
+
- **Operation**: [**create_firewall_policies**](docs/FirewallPoliciesApi.md#create_firewall_policies)
|
1541
|
+
- **POST**: /policy/entities/firewall/v1
|
1542
|
+
- **Description**: Create Firewall Policies by specifying details about the policy to create
|
1543
|
+
|
1544
|
+
---
|
1545
|
+
|
1546
|
+
**Class**: `Falcon::FirewallPoliciesApi`
|
1547
|
+
|
1548
|
+
- **Operation**: [**delete_firewall_policies**](docs/FirewallPoliciesApi.md#delete_firewall_policies)
|
1549
|
+
- **DELETE**: /policy/entities/firewall/v1
|
1550
|
+
- **Description**: Delete a set of Firewall Policies by specifying their IDs
|
1551
|
+
|
1552
|
+
---
|
1553
|
+
|
1554
|
+
**Class**: `Falcon::FirewallPoliciesApi`
|
1555
|
+
|
1556
|
+
- **Operation**: [**get_firewall_policies**](docs/FirewallPoliciesApi.md#get_firewall_policies)
|
1557
|
+
- **GET**: /policy/entities/firewall/v1
|
1558
|
+
- **Description**: Retrieve a set of Firewall Policies by specifying their IDs
|
1559
|
+
|
1560
|
+
---
|
1561
|
+
|
1562
|
+
**Class**: `Falcon::FirewallPoliciesApi`
|
1563
|
+
|
1564
|
+
- **Operation**: [**perform_firewall_policies_action**](docs/FirewallPoliciesApi.md#perform_firewall_policies_action)
|
1565
|
+
- **POST**: /policy/entities/firewall-actions/v1
|
1566
|
+
- **Description**: Perform the specified action on the Firewall Policies specified in the request
|
1567
|
+
|
1568
|
+
---
|
1569
|
+
|
1570
|
+
**Class**: `Falcon::FirewallPoliciesApi`
|
1571
|
+
|
1572
|
+
- **Operation**: [**query_combined_firewall_policies**](docs/FirewallPoliciesApi.md#query_combined_firewall_policies)
|
1573
|
+
- **GET**: /policy/combined/firewall/v1
|
1574
|
+
- **Description**: Search for Firewall Policies in your environment by providing an FQL filter and paging details. Returns a set of Firewall Policies which match the filter criteria
|
1575
|
+
|
1576
|
+
---
|
1577
|
+
|
1578
|
+
**Class**: `Falcon::FirewallPoliciesApi`
|
1579
|
+
|
1580
|
+
- **Operation**: [**query_combined_firewall_policy_members**](docs/FirewallPoliciesApi.md#query_combined_firewall_policy_members)
|
1581
|
+
- **GET**: /policy/combined/firewall-members/v1
|
1582
|
+
- **Description**: Search for members of a Firewall Policy in your environment by providing an FQL filter and paging details. Returns a set of host details which match the filter criteria
|
1583
|
+
|
1584
|
+
---
|
1585
|
+
|
1586
|
+
**Class**: `Falcon::FirewallPoliciesApi`
|
1587
|
+
|
1588
|
+
- **Operation**: [**query_firewall_policies**](docs/FirewallPoliciesApi.md#query_firewall_policies)
|
1589
|
+
- **GET**: /policy/queries/firewall/v1
|
1590
|
+
- **Description**: Search for Firewall Policies in your environment by providing an FQL filter and paging details. Returns a set of Firewall Policy IDs which match the filter criteria
|
1591
|
+
|
1592
|
+
---
|
1593
|
+
|
1594
|
+
**Class**: `Falcon::FirewallPoliciesApi`
|
1595
|
+
|
1596
|
+
- **Operation**: [**query_firewall_policy_members**](docs/FirewallPoliciesApi.md#query_firewall_policy_members)
|
1597
|
+
- **GET**: /policy/queries/firewall-members/v1
|
1598
|
+
- **Description**: Search for members of a Firewall Policy in your environment by providing an FQL filter and paging details. Returns a set of Agent IDs which match the filter criteria
|
1599
|
+
|
1600
|
+
---
|
1601
|
+
|
1602
|
+
**Class**: `Falcon::FirewallPoliciesApi`
|
1603
|
+
|
1604
|
+
- **Operation**: [**set_firewall_policies_precedence**](docs/FirewallPoliciesApi.md#set_firewall_policies_precedence)
|
1605
|
+
- **POST**: /policy/entities/firewall-precedence/v1
|
1606
|
+
- **Description**: Sets the precedence of Firewall Policies based on the order of IDs specified in the request. The first ID specified will have the highest precedence and the last ID specified will have the lowest. You must specify all non-Default Policies for a platform when updating precedence
|
1607
|
+
|
1608
|
+
---
|
1609
|
+
|
1610
|
+
**Class**: `Falcon::FirewallPoliciesApi`
|
1611
|
+
|
1612
|
+
- **Operation**: [**update_firewall_policies**](docs/FirewallPoliciesApi.md#update_firewall_policies)
|
1613
|
+
- **PATCH**: /policy/entities/firewall/v1
|
1614
|
+
- **Description**: Update Firewall Policies by specifying the ID of the policy and details to update
|
1615
|
+
|
1616
|
+
---
|
1617
|
+
|
1618
|
+
**Class**: `Falcon::HostGroupApi`
|
1619
|
+
|
1620
|
+
- **Operation**: [**create_host_groups**](docs/HostGroupApi.md#create_host_groups)
|
1621
|
+
- **POST**: /devices/entities/host-groups/v1
|
1622
|
+
- **Description**: Create Host Groups by specifying details about the group to create
|
1623
|
+
|
1624
|
+
---
|
1625
|
+
|
1626
|
+
**Class**: `Falcon::HostGroupApi`
|
1627
|
+
|
1628
|
+
- **Operation**: [**delete_host_groups**](docs/HostGroupApi.md#delete_host_groups)
|
1629
|
+
- **DELETE**: /devices/entities/host-groups/v1
|
1630
|
+
- **Description**: Delete a set of Host Groups by specifying their IDs
|
1631
|
+
|
1632
|
+
---
|
1633
|
+
|
1634
|
+
**Class**: `Falcon::HostGroupApi`
|
1635
|
+
|
1636
|
+
- **Operation**: [**get_host_groups**](docs/HostGroupApi.md#get_host_groups)
|
1637
|
+
- **GET**: /devices/entities/host-groups/v1
|
1638
|
+
- **Description**: Retrieve a set of Host Groups by specifying their IDs
|
1639
|
+
|
1640
|
+
---
|
1641
|
+
|
1642
|
+
**Class**: `Falcon::HostGroupApi`
|
1643
|
+
|
1644
|
+
- **Operation**: [**perform_group_action**](docs/HostGroupApi.md#perform_group_action)
|
1645
|
+
- **POST**: /devices/entities/host-group-actions/v1
|
1646
|
+
- **Description**: Perform the specified action on the Host Groups specified in the request
|
1647
|
+
|
1648
|
+
---
|
1649
|
+
|
1650
|
+
**Class**: `Falcon::HostGroupApi`
|
1651
|
+
|
1652
|
+
- **Operation**: [**query_combined_group_members**](docs/HostGroupApi.md#query_combined_group_members)
|
1653
|
+
- **GET**: /devices/combined/host-group-members/v1
|
1654
|
+
- **Description**: Search for members of a Host Group in your environment by providing an FQL filter and paging details. Returns a set of host details which match the filter criteria
|
1655
|
+
|
1656
|
+
---
|
1657
|
+
|
1658
|
+
**Class**: `Falcon::HostGroupApi`
|
1659
|
+
|
1660
|
+
- **Operation**: [**query_combined_host_groups**](docs/HostGroupApi.md#query_combined_host_groups)
|
1661
|
+
- **GET**: /devices/combined/host-groups/v1
|
1662
|
+
- **Description**: Search for Host Groups in your environment by providing an FQL filter and paging details. Returns a set of Host Groups which match the filter criteria
|
1663
|
+
|
1664
|
+
---
|
1665
|
+
|
1666
|
+
**Class**: `Falcon::HostGroupApi`
|
1667
|
+
|
1668
|
+
- **Operation**: [**query_group_members**](docs/HostGroupApi.md#query_group_members)
|
1669
|
+
- **GET**: /devices/queries/host-group-members/v1
|
1670
|
+
- **Description**: Search for members of a Host Group in your environment by providing an FQL filter and paging details. Returns a set of Agent IDs which match the filter criteria
|
1671
|
+
|
1672
|
+
---
|
1673
|
+
|
1674
|
+
**Class**: `Falcon::HostGroupApi`
|
1675
|
+
|
1676
|
+
- **Operation**: [**query_host_groups**](docs/HostGroupApi.md#query_host_groups)
|
1677
|
+
- **GET**: /devices/queries/host-groups/v1
|
1678
|
+
- **Description**: Search for Host Groups in your environment by providing an FQL filter and paging details. Returns a set of Host Group IDs which match the filter criteria
|
1679
|
+
|
1680
|
+
---
|
1681
|
+
|
1682
|
+
**Class**: `Falcon::HostGroupApi`
|
1683
|
+
|
1684
|
+
- **Operation**: [**update_host_groups**](docs/HostGroupApi.md#update_host_groups)
|
1685
|
+
- **PATCH**: /devices/entities/host-groups/v1
|
1686
|
+
- **Description**: Update Host Groups by specifying the ID of the group and details to update
|
1687
|
+
|
1688
|
+
---
|
1689
|
+
|
1690
|
+
**Class**: `Falcon::HostsApi`
|
1691
|
+
|
1692
|
+
- **Operation**: [**entities_perform_action**](docs/HostsApi.md#entities_perform_action)
|
1693
|
+
- **POST**: /devices/entities/group-actions/v1
|
1694
|
+
- **Description**: Performs the specified action on the provided prevention policy IDs.
|
1695
|
+
|
1696
|
+
---
|
1697
|
+
|
1698
|
+
**Class**: `Falcon::HostsApi`
|
1699
|
+
|
1700
|
+
- **Operation**: [**get_device_details**](docs/HostsApi.md#get_device_details)
|
1701
|
+
- **GET**: /devices/entities/devices/v1
|
1702
|
+
- **Description**: Deprecated: Please use new GET or POST /devices/entities/devices/v2 endpoints. This endpoint will be removed on or sometime after February 9, 2023. Get details on one or more hosts by providing agent IDs (AID). You can get a host's agent IDs (AIDs) from the /devices/queries/devices/v1 endpoint, the Falcon console or the Streaming API
|
1703
|
+
|
1704
|
+
---
|
1705
|
+
|
1706
|
+
**Class**: `Falcon::HostsApi`
|
1707
|
+
|
1708
|
+
- **Operation**: [**get_device_details_v2**](docs/HostsApi.md#get_device_details_v2)
|
1709
|
+
- **GET**: /devices/entities/devices/v2
|
1710
|
+
- **Description**: Get details on one or more hosts by providing host IDs as a query parameter. Supports up to a maximum 100 IDs.
|
1711
|
+
|
1712
|
+
---
|
1713
|
+
|
1714
|
+
**Class**: `Falcon::HostsApi`
|
1715
|
+
|
1716
|
+
- **Operation**: [**get_online_state_v1**](docs/HostsApi.md#get_online_state_v1)
|
1717
|
+
- **GET**: /devices/entities/online-state/v1
|
1718
|
+
- **Description**: Get the online status for one or more hosts by specifying each host’s unique ID. Successful requests return an HTTP 200 response and the status for each host identified by a `state` of `online`, `offline`, or `unknown` for each host, identified by host `id`. Make a `GET` request to `/devices/queries/devices/v1` to get a list of host IDs.
|
1719
|
+
|
1720
|
+
---
|
1721
|
+
|
1722
|
+
**Class**: `Falcon::HostsApi`
|
1723
|
+
|
1724
|
+
- **Operation**: [**perform_action_v2**](docs/HostsApi.md#perform_action_v2)
|
1725
|
+
- **POST**: /devices/entities/devices-actions/v2
|
1726
|
+
- **Description**: Take various actions on the hosts in your environment. Contain or lift containment on a host. Delete or restore a host.
|
1727
|
+
|
1728
|
+
---
|
1729
|
+
|
1730
|
+
**Class**: `Falcon::HostsApi`
|
1731
|
+
|
1732
|
+
- **Operation**: [**post_device_details_v2**](docs/HostsApi.md#post_device_details_v2)
|
1733
|
+
- **POST**: /devices/entities/devices/v2
|
1734
|
+
- **Description**: Get details on one or more hosts by providing host IDs in a POST body. Supports up to a maximum 5000 IDs.
|
1735
|
+
|
1736
|
+
---
|
1737
|
+
|
1738
|
+
**Class**: `Falcon::HostsApi`
|
1739
|
+
|
1740
|
+
- **Operation**: [**query_device_login_history**](docs/HostsApi.md#query_device_login_history)
|
1741
|
+
- **POST**: /devices/combined/devices/login-history/v1
|
1742
|
+
- **Description**: Retrieve details about recent login sessions for a set of devices.
|
1743
|
+
|
1744
|
+
---
|
1745
|
+
|
1746
|
+
**Class**: `Falcon::HostsApi`
|
1747
|
+
|
1748
|
+
- **Operation**: [**query_devices_by_filter**](docs/HostsApi.md#query_devices_by_filter)
|
1749
|
+
- **GET**: /devices/queries/devices/v1
|
1750
|
+
- **Description**: Search for hosts in your environment by platform, hostname, IP, and other criteria.
|
1751
|
+
|
1752
|
+
---
|
1753
|
+
|
1754
|
+
**Class**: `Falcon::HostsApi`
|
1755
|
+
|
1756
|
+
- **Operation**: [**query_devices_by_filter_scroll**](docs/HostsApi.md#query_devices_by_filter_scroll)
|
1757
|
+
- **GET**: /devices/queries/devices-scroll/v1
|
1758
|
+
- **Description**: Search for hosts in your environment by platform, hostname, IP, and other criteria with continuous pagination capability (based on offset pointer which expires after 2 minutes with no maximum limit)
|
1759
|
+
|
1760
|
+
---
|
1761
|
+
|
1762
|
+
**Class**: `Falcon::HostsApi`
|
1763
|
+
|
1764
|
+
- **Operation**: [**query_get_network_address_history_v1**](docs/HostsApi.md#query_get_network_address_history_v1)
|
1765
|
+
- **POST**: /devices/combined/devices/network-address-history/v1
|
1766
|
+
- **Description**: Retrieve history of IP and MAC addresses of devices.
|
1767
|
+
|
1768
|
+
---
|
1769
|
+
|
1770
|
+
**Class**: `Falcon::HostsApi`
|
1771
|
+
|
1772
|
+
- **Operation**: [**query_hidden_devices**](docs/HostsApi.md#query_hidden_devices)
|
1773
|
+
- **GET**: /devices/queries/devices-hidden/v1
|
1774
|
+
- **Description**: Retrieve hidden hosts that match the provided filter criteria.
|
1775
|
+
|
1776
|
+
---
|
1777
|
+
|
1778
|
+
**Class**: `Falcon::HostsApi`
|
1779
|
+
|
1780
|
+
- **Operation**: [**update_device_tags**](docs/HostsApi.md#update_device_tags)
|
1781
|
+
- **PATCH**: /devices/entities/devices/tags/v1
|
1782
|
+
- **Description**: Append or remove one or more Falcon Grouping Tags on one or more hosts. Tags must be of the form FalconGroupingTags/
|
1783
|
+
|
1784
|
+
---
|
1785
|
+
|
1786
|
+
**Class**: `Falcon::IdentityProtectionApi`
|
1787
|
+
|
1788
|
+
- **Operation**: [**api_preempt_proxy_post_graphql**](docs/IdentityProtectionApi.md#api_preempt_proxy_post_graphql)
|
1789
|
+
- **POST**: /identity-protection/combined/graphql/v1
|
1790
|
+
- **Description**: Identity Protection GraphQL API. Allows to retrieve entities, timeline activities, identity-based incidents and security assessment. Allows to perform actions on entities and identity-based incidents.
|
1791
|
+
|
1792
|
+
---
|
1793
|
+
|
1794
|
+
**Class**: `Falcon::IncidentsApi`
|
1795
|
+
|
1796
|
+
- **Operation**: [**crowd_score**](docs/IncidentsApi.md#crowd_score)
|
1797
|
+
- **GET**: /incidents/combined/crowdscores/v1
|
1798
|
+
- **Description**: Query environment wide CrowdScore and return the entity data
|
1799
|
+
|
1800
|
+
---
|
1801
|
+
|
1802
|
+
**Class**: `Falcon::IncidentsApi`
|
1803
|
+
|
1804
|
+
- **Operation**: [**get_behaviors**](docs/IncidentsApi.md#get_behaviors)
|
1805
|
+
- **POST**: /incidents/entities/behaviors/GET/v1
|
1806
|
+
- **Description**: Get details on behaviors by providing behavior IDs
|
1807
|
+
|
1808
|
+
---
|
1809
|
+
|
1810
|
+
**Class**: `Falcon::IncidentsApi`
|
1811
|
+
|
1812
|
+
- **Operation**: [**get_incidents**](docs/IncidentsApi.md#get_incidents)
|
1813
|
+
- **POST**: /incidents/entities/incidents/GET/v1
|
1814
|
+
- **Description**: Get details on incidents by providing incident IDs
|
1815
|
+
|
1816
|
+
---
|
1817
|
+
|
1818
|
+
**Class**: `Falcon::IncidentsApi`
|
1819
|
+
|
1820
|
+
- **Operation**: [**perform_incident_action**](docs/IncidentsApi.md#perform_incident_action)
|
1821
|
+
- **POST**: /incidents/entities/incident-actions/v1
|
1822
|
+
- **Description**: Perform a set of actions on one or more incidents, such as adding tags or comments or updating the incident name or description
|
1823
|
+
|
1824
|
+
---
|
1825
|
+
|
1826
|
+
**Class**: `Falcon::IncidentsApi`
|
1827
|
+
|
1828
|
+
- **Operation**: [**query_behaviors**](docs/IncidentsApi.md#query_behaviors)
|
1829
|
+
- **GET**: /incidents/queries/behaviors/v1
|
1830
|
+
- **Description**: Search for behaviors by providing an FQL filter, sorting, and paging details
|
1831
|
+
|
1832
|
+
---
|
1833
|
+
|
1834
|
+
**Class**: `Falcon::IncidentsApi`
|
1835
|
+
|
1836
|
+
- **Operation**: [**query_incidents**](docs/IncidentsApi.md#query_incidents)
|
1837
|
+
- **GET**: /incidents/queries/incidents/v1
|
1838
|
+
- **Description**: Search for incidents by providing an FQL filter, sorting, and paging details
|
1839
|
+
|
1840
|
+
---
|
1841
|
+
|
1842
|
+
**Class**: `Falcon::InstallationTokensApi`
|
1843
|
+
|
1844
|
+
- **Operation**: [**audit_events_query**](docs/InstallationTokensApi.md#audit_events_query)
|
1845
|
+
- **GET**: /installation-tokens/queries/audit-events/v1
|
1846
|
+
- **Description**: Search for audit events by providing an FQL filter and paging details.
|
1847
|
+
|
1848
|
+
---
|
1849
|
+
|
1850
|
+
**Class**: `Falcon::InstallationTokensApi`
|
1851
|
+
|
1852
|
+
- **Operation**: [**audit_events_read**](docs/InstallationTokensApi.md#audit_events_read)
|
1853
|
+
- **GET**: /installation-tokens/entities/audit-events/v1
|
1854
|
+
- **Description**: Gets the details of one or more audit events by id.
|
1855
|
+
|
1856
|
+
---
|
1857
|
+
|
1858
|
+
**Class**: `Falcon::InstallationTokensApi`
|
1859
|
+
|
1860
|
+
- **Operation**: [**customer_settings_read**](docs/InstallationTokensApi.md#customer_settings_read)
|
1861
|
+
- **GET**: /installation-tokens/entities/customer-settings/v1
|
1862
|
+
- **Description**: Check current installation token settings.
|
1863
|
+
|
1864
|
+
---
|
1865
|
+
|
1866
|
+
**Class**: `Falcon::InstallationTokensApi`
|
1867
|
+
|
1868
|
+
- **Operation**: [**tokens_create**](docs/InstallationTokensApi.md#tokens_create)
|
1869
|
+
- **POST**: /installation-tokens/entities/tokens/v1
|
1870
|
+
- **Description**: Creates a token.
|
1871
|
+
|
1872
|
+
---
|
1873
|
+
|
1874
|
+
**Class**: `Falcon::InstallationTokensApi`
|
1875
|
+
|
1876
|
+
- **Operation**: [**tokens_delete**](docs/InstallationTokensApi.md#tokens_delete)
|
1877
|
+
- **DELETE**: /installation-tokens/entities/tokens/v1
|
1878
|
+
- **Description**: Deletes a token immediately. To revoke a token, use PATCH /installation-tokens/entities/tokens/v1 instead.
|
1879
|
+
|
1880
|
+
---
|
1881
|
+
|
1882
|
+
**Class**: `Falcon::InstallationTokensApi`
|
1883
|
+
|
1884
|
+
- **Operation**: [**tokens_query**](docs/InstallationTokensApi.md#tokens_query)
|
1885
|
+
- **GET**: /installation-tokens/queries/tokens/v1
|
1886
|
+
- **Description**: Search for tokens by providing an FQL filter and paging details.
|
1887
|
+
|
1888
|
+
---
|
1889
|
+
|
1890
|
+
**Class**: `Falcon::InstallationTokensApi`
|
1891
|
+
|
1892
|
+
- **Operation**: [**tokens_read**](docs/InstallationTokensApi.md#tokens_read)
|
1893
|
+
- **GET**: /installation-tokens/entities/tokens/v1
|
1894
|
+
- **Description**: Gets the details of one or more tokens by id.
|
1895
|
+
|
1896
|
+
---
|
1897
|
+
|
1898
|
+
**Class**: `Falcon::InstallationTokensApi`
|
1899
|
+
|
1900
|
+
- **Operation**: [**tokens_update**](docs/InstallationTokensApi.md#tokens_update)
|
1901
|
+
- **PATCH**: /installation-tokens/entities/tokens/v1
|
1902
|
+
- **Description**: Updates one or more tokens. Use this endpoint to edit labels, change expiration, revoke, or restore.
|
1903
|
+
|
1904
|
+
---
|
1905
|
+
|
1906
|
+
**Class**: `Falcon::InstallationTokensSettingsApi`
|
1907
|
+
|
1908
|
+
- **Operation**: [**customer_settings_update**](docs/InstallationTokensSettingsApi.md#customer_settings_update)
|
1909
|
+
- **PATCH**: /installation-tokens/entities/customer-settings/v1
|
1910
|
+
- **Description**: Update installation token settings.
|
1911
|
+
|
1912
|
+
---
|
1913
|
+
|
1914
|
+
**Class**: `Falcon::IntelApi`
|
1915
|
+
|
1916
|
+
- **Operation**: [**get_intel_actor_entities**](docs/IntelApi.md#get_intel_actor_entities)
|
1917
|
+
- **GET**: /intel/entities/actors/v1
|
1918
|
+
- **Description**: Retrieve specific actors using their actor IDs.
|
1919
|
+
|
1920
|
+
---
|
1921
|
+
|
1922
|
+
**Class**: `Falcon::IntelApi`
|
1923
|
+
|
1924
|
+
- **Operation**: [**get_intel_indicator_entities**](docs/IntelApi.md#get_intel_indicator_entities)
|
1925
|
+
- **POST**: /intel/entities/indicators/GET/v1
|
1926
|
+
- **Description**: Retrieve specific indicators using their indicator IDs.
|
1927
|
+
|
1928
|
+
---
|
1929
|
+
|
1930
|
+
**Class**: `Falcon::IntelApi`
|
1931
|
+
|
1932
|
+
- **Operation**: [**get_intel_report_entities**](docs/IntelApi.md#get_intel_report_entities)
|
1933
|
+
- **GET**: /intel/entities/reports/v1
|
1934
|
+
- **Description**: Retrieve specific reports using their report IDs.
|
1935
|
+
|
1936
|
+
---
|
1937
|
+
|
1938
|
+
**Class**: `Falcon::IntelApi`
|
1939
|
+
|
1940
|
+
- **Operation**: [**get_intel_report_pdf**](docs/IntelApi.md#get_intel_report_pdf)
|
1941
|
+
- **GET**: /intel/entities/report-files/v1
|
1942
|
+
- **Description**: Return a Report PDF attachment
|
1943
|
+
|
1944
|
+
---
|
1945
|
+
|
1946
|
+
**Class**: `Falcon::IntelApi`
|
1947
|
+
|
1948
|
+
- **Operation**: [**get_intel_rule_entities**](docs/IntelApi.md#get_intel_rule_entities)
|
1949
|
+
- **GET**: /intel/entities/rules/v1
|
1950
|
+
- **Description**: Retrieve details for rule sets for the specified ids.
|
1951
|
+
|
1952
|
+
---
|
1953
|
+
|
1954
|
+
**Class**: `Falcon::IntelApi`
|
1955
|
+
|
1956
|
+
- **Operation**: [**get_intel_rule_file**](docs/IntelApi.md#get_intel_rule_file)
|
1957
|
+
- **GET**: /intel/entities/rules-files/v1
|
1958
|
+
- **Description**: Download earlier rule sets.
|
1959
|
+
|
1960
|
+
---
|
1961
|
+
|
1962
|
+
**Class**: `Falcon::IntelApi`
|
1963
|
+
|
1964
|
+
- **Operation**: [**get_latest_intel_rule_file**](docs/IntelApi.md#get_latest_intel_rule_file)
|
1965
|
+
- **GET**: /intel/entities/rules-latest-files/v1
|
1966
|
+
- **Description**: Download the latest rule set.
|
1967
|
+
|
1968
|
+
---
|
1969
|
+
|
1970
|
+
**Class**: `Falcon::IntelApi`
|
1971
|
+
|
1972
|
+
- **Operation**: [**get_mitre_report**](docs/IntelApi.md#get_mitre_report)
|
1973
|
+
- **GET**: /intel/entities/mitre-reports/v1
|
1974
|
+
- **Description**: Export Mitre ATT&CK information for a given actor.
|
1975
|
+
|
1976
|
+
---
|
1977
|
+
|
1978
|
+
**Class**: `Falcon::IntelApi`
|
1979
|
+
|
1980
|
+
- **Operation**: [**get_vulnerabilities**](docs/IntelApi.md#get_vulnerabilities)
|
1981
|
+
- **POST**: /intel/entities/vulnerabilities/GET/v1
|
1982
|
+
- **Description**: Get vulnerabilities
|
1983
|
+
|
1984
|
+
---
|
1985
|
+
|
1986
|
+
**Class**: `Falcon::IntelApi`
|
1987
|
+
|
1988
|
+
- **Operation**: [**post_mitre_attacks**](docs/IntelApi.md#post_mitre_attacks)
|
1989
|
+
- **POST**: /intel/entities/mitre/v1
|
1990
|
+
- **Description**: Retrieves report and observable IDs associated with the given actor and attacks
|
1991
|
+
|
1992
|
+
---
|
1993
|
+
|
1994
|
+
**Class**: `Falcon::IntelApi`
|
1995
|
+
|
1996
|
+
- **Operation**: [**query_intel_actor_entities**](docs/IntelApi.md#query_intel_actor_entities)
|
1997
|
+
- **GET**: /intel/combined/actors/v1
|
1998
|
+
- **Description**: Get info about actors that match provided FQL filters.
|
1999
|
+
|
2000
|
+
---
|
2001
|
+
|
2002
|
+
**Class**: `Falcon::IntelApi`
|
2003
|
+
|
2004
|
+
- **Operation**: [**query_intel_actor_ids**](docs/IntelApi.md#query_intel_actor_ids)
|
2005
|
+
- **GET**: /intel/queries/actors/v1
|
2006
|
+
- **Description**: Get actor IDs that match provided FQL filters.
|
2007
|
+
|
2008
|
+
---
|
2009
|
+
|
2010
|
+
**Class**: `Falcon::IntelApi`
|
2011
|
+
|
2012
|
+
- **Operation**: [**query_intel_indicator_entities**](docs/IntelApi.md#query_intel_indicator_entities)
|
2013
|
+
- **GET**: /intel/combined/indicators/v1
|
2014
|
+
- **Description**: Get info about indicators that match provided FQL filters.
|
2015
|
+
|
2016
|
+
---
|
2017
|
+
|
2018
|
+
**Class**: `Falcon::IntelApi`
|
2019
|
+
|
2020
|
+
- **Operation**: [**query_intel_indicator_ids**](docs/IntelApi.md#query_intel_indicator_ids)
|
2021
|
+
- **GET**: /intel/queries/indicators/v1
|
2022
|
+
- **Description**: Get indicators IDs that match provided FQL filters.
|
2023
|
+
|
2024
|
+
---
|
2025
|
+
|
2026
|
+
**Class**: `Falcon::IntelApi`
|
2027
|
+
|
2028
|
+
- **Operation**: [**query_intel_report_entities**](docs/IntelApi.md#query_intel_report_entities)
|
2029
|
+
- **GET**: /intel/combined/reports/v1
|
2030
|
+
- **Description**: Get info about reports that match provided FQL filters.
|
2031
|
+
|
2032
|
+
---
|
2033
|
+
|
2034
|
+
**Class**: `Falcon::IntelApi`
|
2035
|
+
|
2036
|
+
- **Operation**: [**query_intel_report_ids**](docs/IntelApi.md#query_intel_report_ids)
|
2037
|
+
- **GET**: /intel/queries/reports/v1
|
2038
|
+
- **Description**: Get report IDs that match provided FQL filters.
|
2039
|
+
|
2040
|
+
---
|
2041
|
+
|
2042
|
+
**Class**: `Falcon::IntelApi`
|
2043
|
+
|
2044
|
+
- **Operation**: [**query_intel_rule_ids**](docs/IntelApi.md#query_intel_rule_ids)
|
2045
|
+
- **GET**: /intel/queries/rules/v1
|
2046
|
+
- **Description**: Search for rule IDs that match provided filter criteria.
|
2047
|
+
|
2048
|
+
---
|
2049
|
+
|
2050
|
+
**Class**: `Falcon::IntelApi`
|
2051
|
+
|
2052
|
+
- **Operation**: [**query_mitre_attacks**](docs/IntelApi.md#query_mitre_attacks)
|
2053
|
+
- **GET**: /intel/queries/mitre/v1
|
2054
|
+
- **Description**: Gets MITRE tactics and techniques for the given actor
|
2055
|
+
|
2056
|
+
---
|
2057
|
+
|
2058
|
+
**Class**: `Falcon::IntelApi`
|
2059
|
+
|
2060
|
+
- **Operation**: [**query_vulnerabilities**](docs/IntelApi.md#query_vulnerabilities)
|
2061
|
+
- **GET**: /intel/queries/vulnerabilities/v1
|
2062
|
+
- **Description**: Get vulnerabilities IDs
|
2063
|
+
|
2064
|
+
---
|
2065
|
+
|
2066
|
+
**Class**: `Falcon::IoaExclusionsApi`
|
2067
|
+
|
2068
|
+
- **Operation**: [**create_ioa_exclusions_v1**](docs/IoaExclusionsApi.md#create_ioa_exclusions_v1)
|
2069
|
+
- **POST**: /policy/entities/ioa-exclusions/v1
|
2070
|
+
- **Description**: Create the IOA exclusions
|
2071
|
+
|
2072
|
+
---
|
2073
|
+
|
2074
|
+
**Class**: `Falcon::IoaExclusionsApi`
|
2075
|
+
|
2076
|
+
- **Operation**: [**delete_ioa_exclusions_v1**](docs/IoaExclusionsApi.md#delete_ioa_exclusions_v1)
|
2077
|
+
- **DELETE**: /policy/entities/ioa-exclusions/v1
|
2078
|
+
- **Description**: Delete the IOA exclusions by id
|
2079
|
+
|
2080
|
+
---
|
2081
|
+
|
2082
|
+
**Class**: `Falcon::IoaExclusionsApi`
|
2083
|
+
|
2084
|
+
- **Operation**: [**get_ioa_exclusions_v1**](docs/IoaExclusionsApi.md#get_ioa_exclusions_v1)
|
2085
|
+
- **GET**: /policy/entities/ioa-exclusions/v1
|
2086
|
+
- **Description**: Get a set of IOA Exclusions by specifying their IDs
|
2087
|
+
|
2088
|
+
---
|
2089
|
+
|
2090
|
+
**Class**: `Falcon::IoaExclusionsApi`
|
2091
|
+
|
2092
|
+
- **Operation**: [**query_ioa_exclusions_v1**](docs/IoaExclusionsApi.md#query_ioa_exclusions_v1)
|
2093
|
+
- **GET**: /policy/queries/ioa-exclusions/v1
|
2094
|
+
- **Description**: Search for IOA exclusions.
|
2095
|
+
|
2096
|
+
---
|
2097
|
+
|
2098
|
+
**Class**: `Falcon::IoaExclusionsApi`
|
2099
|
+
|
2100
|
+
- **Operation**: [**update_ioa_exclusions_v1**](docs/IoaExclusionsApi.md#update_ioa_exclusions_v1)
|
2101
|
+
- **PATCH**: /policy/entities/ioa-exclusions/v1
|
2102
|
+
- **Description**: Update the IOA exclusions
|
2103
|
+
|
2104
|
+
---
|
2105
|
+
|
2106
|
+
**Class**: `Falcon::IocApi`
|
2107
|
+
|
2108
|
+
- **Operation**: [**action_get_v1**](docs/IocApi.md#action_get_v1)
|
2109
|
+
- **GET**: /iocs/entities/actions/v1
|
2110
|
+
- **Description**: Get Actions by ids.
|
2111
|
+
|
2112
|
+
---
|
2113
|
+
|
2114
|
+
**Class**: `Falcon::IocApi`
|
2115
|
+
|
2116
|
+
- **Operation**: [**action_query_v1**](docs/IocApi.md#action_query_v1)
|
2117
|
+
- **GET**: /iocs/queries/actions/v1
|
2118
|
+
- **Description**: Query Actions.
|
2119
|
+
|
2120
|
+
---
|
2121
|
+
|
2122
|
+
**Class**: `Falcon::IocApi`
|
2123
|
+
|
2124
|
+
- **Operation**: [**get_indicators_report**](docs/IocApi.md#get_indicators_report)
|
2125
|
+
- **POST**: /iocs/entities/indicators-reports/v1
|
2126
|
+
- **Description**: Launch an indicators report creation job
|
2127
|
+
|
2128
|
+
---
|
2129
|
+
|
2130
|
+
**Class**: `Falcon::IocApi`
|
2131
|
+
|
2132
|
+
- **Operation**: [**indicator_aggregate_v1**](docs/IocApi.md#indicator_aggregate_v1)
|
2133
|
+
- **POST**: /iocs/aggregates/indicators/v1
|
2134
|
+
- **Description**: Get Indicators aggregates as specified via json in the request body.
|
2135
|
+
|
2136
|
+
---
|
2137
|
+
|
2138
|
+
**Class**: `Falcon::IocApi`
|
2139
|
+
|
2140
|
+
- **Operation**: [**indicator_combined_v1**](docs/IocApi.md#indicator_combined_v1)
|
2141
|
+
- **GET**: /iocs/combined/indicator/v1
|
2142
|
+
- **Description**: Get Combined for Indicators.
|
2143
|
+
|
2144
|
+
---
|
2145
|
+
|
2146
|
+
**Class**: `Falcon::IocApi`
|
2147
|
+
|
2148
|
+
- **Operation**: [**indicator_create_v1**](docs/IocApi.md#indicator_create_v1)
|
2149
|
+
- **POST**: /iocs/entities/indicators/v1
|
2150
|
+
- **Description**: Create Indicators.
|
2151
|
+
|
2152
|
+
---
|
2153
|
+
|
2154
|
+
**Class**: `Falcon::IocApi`
|
2155
|
+
|
2156
|
+
- **Operation**: [**indicator_delete_v1**](docs/IocApi.md#indicator_delete_v1)
|
2157
|
+
- **DELETE**: /iocs/entities/indicators/v1
|
2158
|
+
- **Description**: Delete Indicators by ids.
|
2159
|
+
|
2160
|
+
---
|
2161
|
+
|
2162
|
+
**Class**: `Falcon::IocApi`
|
2163
|
+
|
2164
|
+
- **Operation**: [**indicator_get_v1**](docs/IocApi.md#indicator_get_v1)
|
2165
|
+
- **GET**: /iocs/entities/indicators/v1
|
2166
|
+
- **Description**: Get Indicators by ids.
|
2167
|
+
|
2168
|
+
---
|
2169
|
+
|
2170
|
+
**Class**: `Falcon::IocApi`
|
2171
|
+
|
2172
|
+
- **Operation**: [**indicator_search_v1**](docs/IocApi.md#indicator_search_v1)
|
2173
|
+
- **GET**: /iocs/queries/indicators/v1
|
2174
|
+
- **Description**: Search for Indicators.
|
2175
|
+
|
2176
|
+
---
|
2177
|
+
|
2178
|
+
**Class**: `Falcon::IocApi`
|
2179
|
+
|
2180
|
+
- **Operation**: [**indicator_update_v1**](docs/IocApi.md#indicator_update_v1)
|
2181
|
+
- **PATCH**: /iocs/entities/indicators/v1
|
2182
|
+
- **Description**: Update Indicators.
|
2183
|
+
|
2184
|
+
---
|
2185
|
+
|
2186
|
+
**Class**: `Falcon::IocApi`
|
2187
|
+
|
2188
|
+
- **Operation**: [**ioc_type_query_v1**](docs/IocApi.md#ioc_type_query_v1)
|
2189
|
+
- **GET**: /iocs/queries/ioc-types/v1
|
2190
|
+
- **Description**: Query IOC Types.
|
2191
|
+
|
2192
|
+
---
|
2193
|
+
|
2194
|
+
**Class**: `Falcon::IocApi`
|
2195
|
+
|
2196
|
+
- **Operation**: [**platform_query_v1**](docs/IocApi.md#platform_query_v1)
|
2197
|
+
- **GET**: /iocs/queries/platforms/v1
|
2198
|
+
- **Description**: Query Platforms.
|
2199
|
+
|
2200
|
+
---
|
2201
|
+
|
2202
|
+
**Class**: `Falcon::IocApi`
|
2203
|
+
|
2204
|
+
- **Operation**: [**severity_query_v1**](docs/IocApi.md#severity_query_v1)
|
2205
|
+
- **GET**: /iocs/queries/severities/v1
|
2206
|
+
- **Description**: Query Severities.
|
2207
|
+
|
2208
|
+
---
|
2209
|
+
|
2210
|
+
**Class**: `Falcon::IocsApi`
|
2211
|
+
|
2212
|
+
- **Operation**: [**devices_count**](docs/IocsApi.md#devices_count)
|
2213
|
+
- **GET**: /indicators/aggregates/devices-count/v1
|
2214
|
+
- **Description**: Number of hosts in your customer account that have observed a given custom IOC
|
2215
|
+
|
2216
|
+
---
|
2217
|
+
|
2218
|
+
**Class**: `Falcon::IocsApi`
|
2219
|
+
|
2220
|
+
- **Operation**: [**devices_ran_on**](docs/IocsApi.md#devices_ran_on)
|
2221
|
+
- **GET**: /indicators/queries/devices/v1
|
2222
|
+
- **Description**: Find hosts that have observed a given custom IOC. For details about those hosts, use GET /devices/entities/devices/v1
|
2223
|
+
|
2224
|
+
---
|
2225
|
+
|
2226
|
+
**Class**: `Falcon::IocsApi`
|
2227
|
+
|
2228
|
+
- **Operation**: [**entities_processes**](docs/IocsApi.md#entities_processes)
|
2229
|
+
- **GET**: /processes/entities/processes/v1
|
2230
|
+
- **Description**: For the provided ProcessID retrieve the process details
|
2231
|
+
|
2232
|
+
---
|
2233
|
+
|
2234
|
+
**Class**: `Falcon::IocsApi`
|
2235
|
+
|
2236
|
+
- **Operation**: [**processes_ran_on**](docs/IocsApi.md#processes_ran_on)
|
2237
|
+
- **GET**: /indicators/queries/processes/v1
|
2238
|
+
- **Description**: Search for processes associated with a custom IOC
|
2239
|
+
|
2240
|
+
---
|
2241
|
+
|
2242
|
+
**Class**: `Falcon::KubernetesProtectionApi`
|
2243
|
+
|
2244
|
+
- **Operation**: [**create_aws_account**](docs/KubernetesProtectionApi.md#create_aws_account)
|
2245
|
+
- **POST**: /kubernetes-protection/entities/accounts/aws/v1
|
2246
|
+
- **Description**: Creates a new AWS account in our system for a customer and generates the installation script
|
2247
|
+
|
2248
|
+
---
|
2249
|
+
|
2250
|
+
**Class**: `Falcon::KubernetesProtectionApi`
|
2251
|
+
|
2252
|
+
- **Operation**: [**create_azure_subscription**](docs/KubernetesProtectionApi.md#create_azure_subscription)
|
2253
|
+
- **POST**: /kubernetes-protection/entities/accounts/azure/v1
|
2254
|
+
- **Description**: Creates a new Azure Subscription in our system
|
2255
|
+
|
2256
|
+
---
|
2257
|
+
|
2258
|
+
**Class**: `Falcon::KubernetesProtectionApi`
|
2259
|
+
|
2260
|
+
- **Operation**: [**delete_aws_accounts_mixin0**](docs/KubernetesProtectionApi.md#delete_aws_accounts_mixin0)
|
2261
|
+
- **DELETE**: /kubernetes-protection/entities/accounts/aws/v1
|
2262
|
+
- **Description**: Delete AWS accounts.
|
2263
|
+
|
2264
|
+
---
|
2265
|
+
|
2266
|
+
**Class**: `Falcon::KubernetesProtectionApi`
|
2267
|
+
|
2268
|
+
- **Operation**: [**delete_azure_subscription**](docs/KubernetesProtectionApi.md#delete_azure_subscription)
|
2269
|
+
- **DELETE**: /kubernetes-protection/entities/accounts/azure/v1
|
2270
|
+
- **Description**: Deletes a new Azure Subscription in our system
|
2271
|
+
|
2272
|
+
---
|
2273
|
+
|
2274
|
+
**Class**: `Falcon::KubernetesProtectionApi`
|
2275
|
+
|
2276
|
+
- **Operation**: [**get_aws_accounts_mixin0**](docs/KubernetesProtectionApi.md#get_aws_accounts_mixin0)
|
2277
|
+
- **GET**: /kubernetes-protection/entities/accounts/aws/v1
|
2278
|
+
- **Description**: Provides a list of AWS accounts.
|
2279
|
+
|
2280
|
+
---
|
2281
|
+
|
2282
|
+
**Class**: `Falcon::KubernetesProtectionApi`
|
2283
|
+
|
2284
|
+
- **Operation**: [**get_azure_install_script**](docs/KubernetesProtectionApi.md#get_azure_install_script)
|
2285
|
+
- **GET**: /kubernetes-protection/entities/user-script/azure/v1
|
2286
|
+
- **Description**: Provides the script to run for a given tenant id and subscription IDs
|
2287
|
+
|
2288
|
+
---
|
2289
|
+
|
2290
|
+
**Class**: `Falcon::KubernetesProtectionApi`
|
2291
|
+
|
2292
|
+
- **Operation**: [**get_azure_tenant_config**](docs/KubernetesProtectionApi.md#get_azure_tenant_config)
|
2293
|
+
- **GET**: /kubernetes-protection/entities/config/azure/v1
|
2294
|
+
- **Description**: Gets the Azure tenant Config
|
2295
|
+
|
2296
|
+
---
|
2297
|
+
|
2298
|
+
**Class**: `Falcon::KubernetesProtectionApi`
|
2299
|
+
|
2300
|
+
- **Operation**: [**get_azure_tenant_ids**](docs/KubernetesProtectionApi.md#get_azure_tenant_ids)
|
2301
|
+
- **GET**: /kubernetes-protection/entities/tenants/azure/v1
|
2302
|
+
- **Description**: Provides all the azure subscriptions and tenants
|
2303
|
+
|
2304
|
+
---
|
2305
|
+
|
2306
|
+
**Class**: `Falcon::KubernetesProtectionApi`
|
2307
|
+
|
2308
|
+
- **Operation**: [**get_clusters**](docs/KubernetesProtectionApi.md#get_clusters)
|
2309
|
+
- **GET**: /kubernetes-protection/entities/kubernetes/clusters/v1
|
2310
|
+
- **Description**: Provides the clusters acknowledged by the Kubernetes Protection service
|
2311
|
+
|
2312
|
+
---
|
2313
|
+
|
2314
|
+
**Class**: `Falcon::KubernetesProtectionApi`
|
2315
|
+
|
2316
|
+
- **Operation**: [**get_combined_cloud_clusters**](docs/KubernetesProtectionApi.md#get_combined_cloud_clusters)
|
2317
|
+
- **GET**: /kubernetes-protection/entities/cloud_cluster/v1
|
2318
|
+
- **Description**: Returns a combined list of provisioned cloud accounts and known kubernetes clusters
|
2319
|
+
|
2320
|
+
---
|
2321
|
+
|
2322
|
+
**Class**: `Falcon::KubernetesProtectionApi`
|
2323
|
+
|
2324
|
+
- **Operation**: [**get_helm_values_yaml**](docs/KubernetesProtectionApi.md#get_helm_values_yaml)
|
2325
|
+
- **GET**: /kubernetes-protection/entities/integration/agent/v1
|
2326
|
+
- **Description**: Provides a sample Helm values.yaml file for a customer to install alongside the agent Helm chart
|
2327
|
+
|
2328
|
+
---
|
2329
|
+
|
2330
|
+
**Class**: `Falcon::KubernetesProtectionApi`
|
2331
|
+
|
2332
|
+
- **Operation**: [**get_locations**](docs/KubernetesProtectionApi.md#get_locations)
|
2333
|
+
- **GET**: /kubernetes-protection/entities/cloud-locations/v1
|
2334
|
+
- **Description**: Provides the cloud locations acknowledged by the Kubernetes Protection service
|
2335
|
+
|
2336
|
+
---
|
2337
|
+
|
2338
|
+
**Class**: `Falcon::KubernetesProtectionApi`
|
2339
|
+
|
2340
|
+
- **Operation**: [**get_static_scripts**](docs/KubernetesProtectionApi.md#get_static_scripts)
|
2341
|
+
- **GET**: /kubernetes-protection/entities/gen/scripts/v1
|
2342
|
+
- **Description**: Gets static bash scripts that are used during registration
|
2343
|
+
|
2344
|
+
---
|
2345
|
+
|
2346
|
+
**Class**: `Falcon::KubernetesProtectionApi`
|
2347
|
+
|
2348
|
+
- **Operation**: [**list_azure_accounts**](docs/KubernetesProtectionApi.md#list_azure_accounts)
|
2349
|
+
- **GET**: /kubernetes-protection/entities/accounts/azure/v1
|
2350
|
+
- **Description**: Provides the azure subscriptions registered to Kubernetes Protection
|
2351
|
+
|
2352
|
+
---
|
2353
|
+
|
2354
|
+
**Class**: `Falcon::KubernetesProtectionApi`
|
2355
|
+
|
2356
|
+
- **Operation**: [**patch_azure_service_principal**](docs/KubernetesProtectionApi.md#patch_azure_service_principal)
|
2357
|
+
- **PATCH**: /kubernetes-protection/entities/service-principal/azure/v1
|
2358
|
+
- **Description**: Adds the client ID for the given tenant ID to our system
|
2359
|
+
|
2360
|
+
---
|
2361
|
+
|
2362
|
+
**Class**: `Falcon::KubernetesProtectionApi`
|
2363
|
+
|
2364
|
+
- **Operation**: [**regenerate_api_key**](docs/KubernetesProtectionApi.md#regenerate_api_key)
|
2365
|
+
- **POST**: /kubernetes-protection/entities/integration/api-key/v1
|
2366
|
+
- **Description**: Regenerate API key for docker registry integrations
|
2367
|
+
|
2368
|
+
---
|
2369
|
+
|
2370
|
+
**Class**: `Falcon::KubernetesProtectionApi`
|
2371
|
+
|
2372
|
+
- **Operation**: [**trigger_scan**](docs/KubernetesProtectionApi.md#trigger_scan)
|
2373
|
+
- **POST**: /kubernetes-protection/entities/scan/trigger/v1
|
2374
|
+
- **Description**: Triggers a dry run or a full scan of a customer's kubernetes footprint
|
2375
|
+
|
2376
|
+
---
|
2377
|
+
|
2378
|
+
**Class**: `Falcon::KubernetesProtectionApi`
|
2379
|
+
|
2380
|
+
- **Operation**: [**update_aws_account**](docs/KubernetesProtectionApi.md#update_aws_account)
|
2381
|
+
- **PATCH**: /kubernetes-protection/entities/accounts/aws/v1
|
2382
|
+
- **Description**: Updates the AWS account per the query parameters provided
|
2383
|
+
|
2384
|
+
---
|
2385
|
+
|
2386
|
+
**Class**: `Falcon::MalqueryApi`
|
2387
|
+
|
2388
|
+
- **Operation**: [**get_mal_query_download_v1**](docs/MalqueryApi.md#get_mal_query_download_v1)
|
2389
|
+
- **GET**: /malquery/entities/download-files/v1
|
2390
|
+
- **Description**: Download a file indexed by MalQuery. Specify the file using its SHA256. Only one file is supported at this time
|
2391
|
+
|
2392
|
+
---
|
2393
|
+
|
2394
|
+
**Class**: `Falcon::MalqueryApi`
|
2395
|
+
|
2396
|
+
- **Operation**: [**get_mal_query_entities_samples_fetch_v1**](docs/MalqueryApi.md#get_mal_query_entities_samples_fetch_v1)
|
2397
|
+
- **GET**: /malquery/entities/samples-fetch/v1
|
2398
|
+
- **Description**: Fetch a zip archive with password 'infected' containing the samples. Call this once the /entities/samples-multidownload request has finished processing
|
2399
|
+
|
2400
|
+
---
|
2401
|
+
|
2402
|
+
**Class**: `Falcon::MalqueryApi`
|
2403
|
+
|
2404
|
+
- **Operation**: [**get_mal_query_metadata_v1**](docs/MalqueryApi.md#get_mal_query_metadata_v1)
|
2405
|
+
- **GET**: /malquery/entities/metadata/v1
|
2406
|
+
- **Description**: Retrieve indexed files metadata by their hash
|
2407
|
+
|
2408
|
+
---
|
2409
|
+
|
2410
|
+
**Class**: `Falcon::MalqueryApi`
|
2411
|
+
|
2412
|
+
- **Operation**: [**get_mal_query_quotas_v1**](docs/MalqueryApi.md#get_mal_query_quotas_v1)
|
2413
|
+
- **GET**: /malquery/aggregates/quotas/v1
|
2414
|
+
- **Description**: Get information about search and download quotas in your environment
|
2415
|
+
|
2416
|
+
---
|
2417
|
+
|
2418
|
+
**Class**: `Falcon::MalqueryApi`
|
2419
|
+
|
2420
|
+
- **Operation**: [**get_mal_query_request_v1**](docs/MalqueryApi.md#get_mal_query_request_v1)
|
2421
|
+
- **GET**: /malquery/entities/requests/v1
|
2422
|
+
- **Description**: Check the status and results of an asynchronous request, such as hunt or exact-search. Supports a single request id at this time.
|
2423
|
+
|
2424
|
+
---
|
2425
|
+
|
2426
|
+
**Class**: `Falcon::MalqueryApi`
|
2427
|
+
|
2428
|
+
- **Operation**: [**post_mal_query_entities_samples_multidownload_v1**](docs/MalqueryApi.md#post_mal_query_entities_samples_multidownload_v1)
|
2429
|
+
- **POST**: /malquery/entities/samples-multidownload/v1
|
2430
|
+
- **Description**: Schedule samples for download. Use the result id with the /request endpoint to check if the download is ready after which you can call the /entities/samples-fetch to get the zip
|
2431
|
+
|
2432
|
+
---
|
2433
|
+
|
2434
|
+
**Class**: `Falcon::MalqueryApi`
|
2435
|
+
|
2436
|
+
- **Operation**: [**post_mal_query_exact_search_v1**](docs/MalqueryApi.md#post_mal_query_exact_search_v1)
|
2437
|
+
- **POST**: /malquery/queries/exact-search/v1
|
2438
|
+
- **Description**: Search Falcon MalQuery for a combination of hex patterns and strings in order to identify samples based upon file content at byte level granularity. You can filter results on criteria such as file type, file size and first seen date. Returns a request id which can be used with the /request endpoint
|
2439
|
+
|
2440
|
+
---
|
2441
|
+
|
2442
|
+
**Class**: `Falcon::MalqueryApi`
|
2443
|
+
|
2444
|
+
- **Operation**: [**post_mal_query_fuzzy_search_v1**](docs/MalqueryApi.md#post_mal_query_fuzzy_search_v1)
|
2445
|
+
- **POST**: /malquery/combined/fuzzy-search/v1
|
2446
|
+
- **Description**: Search Falcon MalQuery quickly, but with more potential for false positives. Search for a combination of hex patterns and strings in order to identify samples based upon file content at byte level granularity.
|
2447
|
+
|
2448
|
+
---
|
2449
|
+
|
2450
|
+
**Class**: `Falcon::MalqueryApi`
|
2451
|
+
|
2452
|
+
- **Operation**: [**post_mal_query_hunt_v1**](docs/MalqueryApi.md#post_mal_query_hunt_v1)
|
2453
|
+
- **POST**: /malquery/queries/hunt/v1
|
2454
|
+
- **Description**: Schedule a YARA-based search for execution. Returns a request id which can be used with the /request endpoint
|
2455
|
+
|
2456
|
+
---
|
2457
|
+
|
2458
|
+
**Class**: `Falcon::MessageCenterApi`
|
2459
|
+
|
2460
|
+
- **Operation**: [**aggregate_cases**](docs/MessageCenterApi.md#aggregate_cases)
|
2461
|
+
- **POST**: /message-center/aggregates/cases/GET/v1
|
2462
|
+
- **Description**: Retrieve aggregate case values based on the matched filter
|
2463
|
+
|
2464
|
+
---
|
2465
|
+
|
2466
|
+
**Class**: `Falcon::MessageCenterApi`
|
2467
|
+
|
2468
|
+
- **Operation**: [**case_add_activity**](docs/MessageCenterApi.md#case_add_activity)
|
2469
|
+
- **POST**: /message-center/entities/case-activity/v1
|
2470
|
+
- **Description**: Add an activity to case. Only activities of type comment are allowed via API
|
2471
|
+
|
2472
|
+
---
|
2473
|
+
|
2474
|
+
**Class**: `Falcon::MessageCenterApi`
|
2475
|
+
|
2476
|
+
- **Operation**: [**case_add_attachment**](docs/MessageCenterApi.md#case_add_attachment)
|
2477
|
+
- **POST**: /message-center/entities/case-attachment/v1
|
2478
|
+
- **Description**: Upload an attachment for the case.
|
2479
|
+
|
2480
|
+
---
|
2481
|
+
|
2482
|
+
**Class**: `Falcon::MessageCenterApi`
|
2483
|
+
|
2484
|
+
- **Operation**: [**case_download_attachment**](docs/MessageCenterApi.md#case_download_attachment)
|
2485
|
+
- **GET**: /message-center/entities/case-attachment/v1
|
2486
|
+
- **Description**: retrieves an attachment for the case, given the attachment id
|
2487
|
+
|
2488
|
+
---
|
2489
|
+
|
2490
|
+
**Class**: `Falcon::MessageCenterApi`
|
2491
|
+
|
2492
|
+
- **Operation**: [**create_case**](docs/MessageCenterApi.md#create_case)
|
2493
|
+
- **POST**: /message-center/entities/case/v1
|
2494
|
+
- **Description**: create a new case
|
2495
|
+
|
2496
|
+
---
|
2497
|
+
|
2498
|
+
**Class**: `Falcon::MessageCenterApi`
|
2499
|
+
|
2500
|
+
- **Operation**: [**create_case_v2**](docs/MessageCenterApi.md#create_case_v2)
|
2501
|
+
- **POST**: /message-center/entities/case/v2
|
2502
|
+
- **Description**: create a new case
|
2503
|
+
|
2504
|
+
---
|
2505
|
+
|
2506
|
+
**Class**: `Falcon::MessageCenterApi`
|
2507
|
+
|
2508
|
+
- **Operation**: [**get_case_activity_by_ids**](docs/MessageCenterApi.md#get_case_activity_by_ids)
|
2509
|
+
- **POST**: /message-center/entities/case-activities/GET/v1
|
2510
|
+
- **Description**: Retrieve activities for given id's
|
2511
|
+
|
2512
|
+
---
|
2513
|
+
|
2514
|
+
**Class**: `Falcon::MessageCenterApi`
|
2515
|
+
|
2516
|
+
- **Operation**: [**get_case_entities_by_ids**](docs/MessageCenterApi.md#get_case_entities_by_ids)
|
2517
|
+
- **POST**: /message-center/entities/cases/GET/v1
|
2518
|
+
- **Description**: Retrieve message center cases
|
2519
|
+
|
2520
|
+
---
|
2521
|
+
|
2522
|
+
**Class**: `Falcon::MessageCenterApi`
|
2523
|
+
|
2524
|
+
- **Operation**: [**query_activity_by_case_id**](docs/MessageCenterApi.md#query_activity_by_case_id)
|
2525
|
+
- **GET**: /message-center/queries/case-activities/v1
|
2526
|
+
- **Description**: Retrieve activities id's for a case
|
2527
|
+
|
2528
|
+
---
|
2529
|
+
|
2530
|
+
**Class**: `Falcon::MessageCenterApi`
|
2531
|
+
|
2532
|
+
- **Operation**: [**query_cases_ids_by_filter**](docs/MessageCenterApi.md#query_cases_ids_by_filter)
|
2533
|
+
- **GET**: /message-center/queries/cases/v1
|
2534
|
+
- **Description**: Retrieve case id's that match the provided filter criteria
|
2535
|
+
|
2536
|
+
---
|
2537
|
+
|
2538
|
+
**Class**: `Falcon::MlExclusionsApi`
|
2539
|
+
|
2540
|
+
- **Operation**: [**create_ml_exclusions_v1**](docs/MlExclusionsApi.md#create_ml_exclusions_v1)
|
2541
|
+
- **POST**: /policy/entities/ml-exclusions/v1
|
2542
|
+
- **Description**: Create the ML exclusions
|
2543
|
+
|
2544
|
+
---
|
2545
|
+
|
2546
|
+
**Class**: `Falcon::MlExclusionsApi`
|
2547
|
+
|
2548
|
+
- **Operation**: [**delete_ml_exclusions_v1**](docs/MlExclusionsApi.md#delete_ml_exclusions_v1)
|
2549
|
+
- **DELETE**: /policy/entities/ml-exclusions/v1
|
2550
|
+
- **Description**: Delete the ML exclusions by id
|
2551
|
+
|
2552
|
+
---
|
2553
|
+
|
2554
|
+
**Class**: `Falcon::MlExclusionsApi`
|
2555
|
+
|
2556
|
+
- **Operation**: [**get_ml_exclusions_v1**](docs/MlExclusionsApi.md#get_ml_exclusions_v1)
|
2557
|
+
- **GET**: /policy/entities/ml-exclusions/v1
|
2558
|
+
- **Description**: Get a set of ML Exclusions by specifying their IDs
|
2559
|
+
|
2560
|
+
---
|
2561
|
+
|
2562
|
+
**Class**: `Falcon::MlExclusionsApi`
|
2563
|
+
|
2564
|
+
- **Operation**: [**query_ml_exclusions_v1**](docs/MlExclusionsApi.md#query_ml_exclusions_v1)
|
2565
|
+
- **GET**: /policy/queries/ml-exclusions/v1
|
2566
|
+
- **Description**: Search for ML exclusions.
|
2567
|
+
|
2568
|
+
---
|
2569
|
+
|
2570
|
+
**Class**: `Falcon::MlExclusionsApi`
|
2571
|
+
|
2572
|
+
- **Operation**: [**update_ml_exclusions_v1**](docs/MlExclusionsApi.md#update_ml_exclusions_v1)
|
2573
|
+
- **PATCH**: /policy/entities/ml-exclusions/v1
|
2574
|
+
- **Description**: Update the ML exclusions
|
2575
|
+
|
2576
|
+
---
|
2577
|
+
|
2578
|
+
**Class**: `Falcon::MobileEnrollmentApi`
|
2579
|
+
|
2580
|
+
- **Operation**: [**request_device_enrollment_v3**](docs/MobileEnrollmentApi.md#request_device_enrollment_v3)
|
2581
|
+
- **POST**: /enrollments/entities/details/v3
|
2582
|
+
- **Description**: Trigger on-boarding process for a mobile device
|
2583
|
+
|
2584
|
+
---
|
2585
|
+
|
2586
|
+
**Class**: `Falcon::MsspApi`
|
2587
|
+
|
2588
|
+
- **Operation**: [**add_cid_group_members**](docs/MsspApi.md#add_cid_group_members)
|
2589
|
+
- **POST**: /mssp/entities/cid-group-members/v1
|
2590
|
+
- **Description**: Add new CID group member.
|
2591
|
+
|
2592
|
+
---
|
2593
|
+
|
2594
|
+
**Class**: `Falcon::MsspApi`
|
2595
|
+
|
2596
|
+
- **Operation**: [**add_role**](docs/MsspApi.md#add_role)
|
2597
|
+
- **POST**: /mssp/entities/mssp-roles/v1
|
2598
|
+
- **Description**: Create a link between user group and CID group, with zero or more additional roles. The call does not replace any existing link between them. User group ID and CID group ID have to be specified in request.
|
2599
|
+
|
2600
|
+
---
|
2601
|
+
|
2602
|
+
**Class**: `Falcon::MsspApi`
|
2603
|
+
|
2604
|
+
- **Operation**: [**add_user_group_members**](docs/MsspApi.md#add_user_group_members)
|
2605
|
+
- **POST**: /mssp/entities/user-group-members/v1
|
2606
|
+
- **Description**: Add new user group member. Maximum 500 members allowed per user group.
|
2607
|
+
|
2608
|
+
---
|
2609
|
+
|
2610
|
+
**Class**: `Falcon::MsspApi`
|
2611
|
+
|
2612
|
+
- **Operation**: [**create_cid_groups**](docs/MsspApi.md#create_cid_groups)
|
2613
|
+
- **POST**: /mssp/entities/cid-groups/v1
|
2614
|
+
- **Description**: Create new CID groups. Name is a required field but description is an optional field. Maximum 500 CID groups allowed.
|
2615
|
+
|
2616
|
+
---
|
2617
|
+
|
2618
|
+
**Class**: `Falcon::MsspApi`
|
2619
|
+
|
2620
|
+
- **Operation**: [**create_user_groups**](docs/MsspApi.md#create_user_groups)
|
2621
|
+
- **POST**: /mssp/entities/user-groups/v1
|
2622
|
+
- **Description**: Create new user groups. Name is a required field but description is an optional field. Maximum 500 user groups allowed per customer.
|
2623
|
+
|
2624
|
+
---
|
2625
|
+
|
2626
|
+
**Class**: `Falcon::MsspApi`
|
2627
|
+
|
2628
|
+
- **Operation**: [**delete_cid_group_members**](docs/MsspApi.md#delete_cid_group_members)
|
2629
|
+
- **DELETE**: /mssp/entities/cid-group-members/v1
|
2630
|
+
- **Description**: Delete CID group members.
|
2631
|
+
|
2632
|
+
---
|
2633
|
+
|
2634
|
+
**Class**: `Falcon::MsspApi`
|
2635
|
+
|
2636
|
+
- **Operation**: [**delete_cid_groups**](docs/MsspApi.md#delete_cid_groups)
|
2637
|
+
- **DELETE**: /mssp/entities/cid-groups/v1
|
2638
|
+
- **Description**: Delete CID groups by ID.
|
2639
|
+
|
2640
|
+
---
|
2641
|
+
|
2642
|
+
**Class**: `Falcon::MsspApi`
|
2643
|
+
|
2644
|
+
- **Operation**: [**delete_user_group_members**](docs/MsspApi.md#delete_user_group_members)
|
2645
|
+
- **DELETE**: /mssp/entities/user-group-members/v1
|
2646
|
+
- **Description**: Delete user group members entry.
|
2647
|
+
|
2648
|
+
---
|
2649
|
+
|
2650
|
+
**Class**: `Falcon::MsspApi`
|
2651
|
+
|
2652
|
+
- **Operation**: [**delete_user_groups**](docs/MsspApi.md#delete_user_groups)
|
2653
|
+
- **DELETE**: /mssp/entities/user-groups/v1
|
2654
|
+
- **Description**: Delete user groups by ID.
|
2655
|
+
|
2656
|
+
---
|
2657
|
+
|
2658
|
+
**Class**: `Falcon::MsspApi`
|
2659
|
+
|
2660
|
+
- **Operation**: [**deleted_roles**](docs/MsspApi.md#deleted_roles)
|
2661
|
+
- **DELETE**: /mssp/entities/mssp-roles/v1
|
2662
|
+
- **Description**: Delete links or additional roles between user groups and CID groups. User group ID and CID group ID have to be specified in request. Only specified roles are removed if specified in request payload, else association between User Group and CID group is dissolved completely (if no roles specified).
|
2663
|
+
|
2664
|
+
---
|
2665
|
+
|
2666
|
+
**Class**: `Falcon::MsspApi`
|
2667
|
+
|
2668
|
+
- **Operation**: [**get_children**](docs/MsspApi.md#get_children)
|
2669
|
+
- **GET**: /mssp/entities/children/v1
|
2670
|
+
- **Description**: Get link to child customer by child CID(s)
|
2671
|
+
|
2672
|
+
---
|
2673
|
+
|
2674
|
+
**Class**: `Falcon::MsspApi`
|
2675
|
+
|
2676
|
+
- **Operation**: [**get_children_v2**](docs/MsspApi.md#get_children_v2)
|
2677
|
+
- **POST**: /mssp/entities/children/GET/v2
|
2678
|
+
- **Description**: Get link to child customer by child CID(s)
|
2679
|
+
|
2680
|
+
---
|
2681
|
+
|
2682
|
+
**Class**: `Falcon::MsspApi`
|
2683
|
+
|
2684
|
+
- **Operation**: [**get_cid_group_by_id**](docs/MsspApi.md#get_cid_group_by_id)
|
2685
|
+
- **GET**: /mssp/entities/cid-groups/v1
|
2686
|
+
- **Description**: Deprecated : Please use GET /mssp/entities/cid-groups/v2. Get CID groups by ID.
|
2687
|
+
|
2688
|
+
---
|
2689
|
+
|
2690
|
+
**Class**: `Falcon::MsspApi`
|
2691
|
+
|
2692
|
+
- **Operation**: [**get_cid_group_by_id_v2**](docs/MsspApi.md#get_cid_group_by_id_v2)
|
2693
|
+
- **GET**: /mssp/entities/cid-groups/v2
|
2694
|
+
- **Description**: Get CID Groups by ID.
|
2695
|
+
|
2696
|
+
---
|
2697
|
+
|
2698
|
+
**Class**: `Falcon::MsspApi`
|
2699
|
+
|
2700
|
+
- **Operation**: [**get_cid_group_members_by**](docs/MsspApi.md#get_cid_group_members_by)
|
2701
|
+
- **GET**: /mssp/entities/cid-group-members/v1
|
2702
|
+
- **Description**: Deprecated : Please use GET /mssp/entities/cid-group-members/v2. Get CID group members by CID group ID.
|
2703
|
+
|
2704
|
+
---
|
2705
|
+
|
2706
|
+
**Class**: `Falcon::MsspApi`
|
2707
|
+
|
2708
|
+
- **Operation**: [**get_cid_group_members_by_v2**](docs/MsspApi.md#get_cid_group_members_by_v2)
|
2709
|
+
- **GET**: /mssp/entities/cid-group-members/v2
|
2710
|
+
- **Description**: Get CID group members by CID Group ID.
|
2711
|
+
|
2712
|
+
---
|
2713
|
+
|
2714
|
+
**Class**: `Falcon::MsspApi`
|
2715
|
+
|
2716
|
+
- **Operation**: [**get_roles_by_id**](docs/MsspApi.md#get_roles_by_id)
|
2717
|
+
- **GET**: /mssp/entities/mssp-roles/v1
|
2718
|
+
- **Description**: Get link between user group and CID group by ID. Link ID is a string consisting of multiple components, but should be treated as opaque.
|
2719
|
+
|
2720
|
+
---
|
2721
|
+
|
2722
|
+
**Class**: `Falcon::MsspApi`
|
2723
|
+
|
2724
|
+
- **Operation**: [**get_user_group_members_by_id**](docs/MsspApi.md#get_user_group_members_by_id)
|
2725
|
+
- **GET**: /mssp/entities/user-group-members/v1
|
2726
|
+
- **Description**: Deprecated : Please use GET /mssp/entities/user-group-members/v2. Get user group members by user group ID.
|
2727
|
+
|
2728
|
+
---
|
2729
|
+
|
2730
|
+
**Class**: `Falcon::MsspApi`
|
2731
|
+
|
2732
|
+
- **Operation**: [**get_user_group_members_by_idv2**](docs/MsspApi.md#get_user_group_members_by_idv2)
|
2733
|
+
- **GET**: /mssp/entities/user-group-members/v2
|
2734
|
+
- **Description**: Get user group members by user group ID.
|
2735
|
+
|
2736
|
+
---
|
2737
|
+
|
2738
|
+
**Class**: `Falcon::MsspApi`
|
2739
|
+
|
2740
|
+
- **Operation**: [**get_user_groups_by_id**](docs/MsspApi.md#get_user_groups_by_id)
|
2741
|
+
- **GET**: /mssp/entities/user-groups/v1
|
2742
|
+
- **Description**: Deprecated : Please use GET /entities/user-groups/v2. Get user groups by ID.
|
2743
|
+
|
2744
|
+
---
|
2745
|
+
|
2746
|
+
**Class**: `Falcon::MsspApi`
|
2747
|
+
|
2748
|
+
- **Operation**: [**get_user_groups_by_idv2**](docs/MsspApi.md#get_user_groups_by_idv2)
|
2749
|
+
- **GET**: /mssp/entities/user-groups/v2
|
2750
|
+
- **Description**: Get user groups by ID.
|
2751
|
+
|
2752
|
+
---
|
2753
|
+
|
2754
|
+
**Class**: `Falcon::MsspApi`
|
2755
|
+
|
2756
|
+
- **Operation**: [**query_children**](docs/MsspApi.md#query_children)
|
2757
|
+
- **GET**: /mssp/queries/children/v1
|
2758
|
+
- **Description**: Query for customers linked as children
|
2759
|
+
|
2760
|
+
---
|
2761
|
+
|
2762
|
+
**Class**: `Falcon::MsspApi`
|
2763
|
+
|
2764
|
+
- **Operation**: [**query_cid_group_members**](docs/MsspApi.md#query_cid_group_members)
|
2765
|
+
- **GET**: /mssp/queries/cid-group-members/v1
|
2766
|
+
- **Description**: Query a CID groups members by associated CID.
|
2767
|
+
|
2768
|
+
---
|
2769
|
+
|
2770
|
+
**Class**: `Falcon::MsspApi`
|
2771
|
+
|
2772
|
+
- **Operation**: [**query_cid_groups**](docs/MsspApi.md#query_cid_groups)
|
2773
|
+
- **GET**: /mssp/queries/cid-groups/v1
|
2774
|
+
- **Description**: Query CID groups.
|
2775
|
+
|
2776
|
+
---
|
2777
|
+
|
2778
|
+
**Class**: `Falcon::MsspApi`
|
2779
|
+
|
2780
|
+
- **Operation**: [**query_roles**](docs/MsspApi.md#query_roles)
|
2781
|
+
- **GET**: /mssp/queries/mssp-roles/v1
|
2782
|
+
- **Description**: Query links between user groups and CID groups. At least one of CID group ID or user group ID should also be provided. Role ID is optional.
|
2783
|
+
|
2784
|
+
---
|
2785
|
+
|
2786
|
+
**Class**: `Falcon::MsspApi`
|
2787
|
+
|
2788
|
+
- **Operation**: [**query_user_group_members**](docs/MsspApi.md#query_user_group_members)
|
2789
|
+
- **GET**: /mssp/queries/user-group-members/v1
|
2790
|
+
- **Description**: Query user group member by user UUID.
|
2791
|
+
|
2792
|
+
---
|
2793
|
+
|
2794
|
+
**Class**: `Falcon::MsspApi`
|
2795
|
+
|
2796
|
+
- **Operation**: [**query_user_groups**](docs/MsspApi.md#query_user_groups)
|
2797
|
+
- **GET**: /mssp/queries/user-groups/v1
|
2798
|
+
- **Description**: Query user groups.
|
2799
|
+
|
2800
|
+
---
|
2801
|
+
|
2802
|
+
**Class**: `Falcon::MsspApi`
|
2803
|
+
|
2804
|
+
- **Operation**: [**update_cid_groups**](docs/MsspApi.md#update_cid_groups)
|
2805
|
+
- **PATCH**: /mssp/entities/cid-groups/v1
|
2806
|
+
- **Description**: Update existing CID groups. CID group ID is expected for each CID group definition provided in request body. Name is a required field but description is an optional field. Empty description will override existing value. CID group member(s) remain unaffected.
|
2807
|
+
|
2808
|
+
---
|
2809
|
+
|
2810
|
+
**Class**: `Falcon::MsspApi`
|
2811
|
+
|
2812
|
+
- **Operation**: [**update_user_groups**](docs/MsspApi.md#update_user_groups)
|
2813
|
+
- **PATCH**: /mssp/entities/user-groups/v1
|
2814
|
+
- **Description**: Update existing user group(s). User group ID is expected for each user group definition provided in request body. Name is a required field but description is an optional field. Empty description will override existing value. User group member(s) remain unaffected.
|
2815
|
+
|
2816
|
+
---
|
2817
|
+
|
2818
|
+
**Class**: `Falcon::Oauth2Api`
|
2819
|
+
|
2820
|
+
- **Operation**: [**oauth2_access_token**](docs/Oauth2Api.md#oauth2_access_token)
|
2821
|
+
- **POST**: /oauth2/token
|
2822
|
+
- **Description**: Generate an OAuth2 access token
|
2823
|
+
|
2824
|
+
---
|
2825
|
+
|
2826
|
+
**Class**: `Falcon::Oauth2Api`
|
2827
|
+
|
2828
|
+
- **Operation**: [**oauth2_revoke_token**](docs/Oauth2Api.md#oauth2_revoke_token)
|
2829
|
+
- **POST**: /oauth2/revoke
|
2830
|
+
- **Description**: Revoke a previously issued OAuth2 access token before the end of its standard 30-minute lifespan.
|
2831
|
+
|
2832
|
+
---
|
2833
|
+
|
2834
|
+
**Class**: `Falcon::OdsApi`
|
2835
|
+
|
2836
|
+
- **Operation**: [**aggregate_query_scan_host_metadata**](docs/OdsApi.md#aggregate_query_scan_host_metadata)
|
2837
|
+
- **POST**: /ods/aggregates/scan-hosts/v1
|
2838
|
+
- **Description**: Get aggregates on ODS scan-hosts data.
|
2839
|
+
|
2840
|
+
---
|
2841
|
+
|
2842
|
+
**Class**: `Falcon::OdsApi`
|
2843
|
+
|
2844
|
+
- **Operation**: [**aggregate_scans**](docs/OdsApi.md#aggregate_scans)
|
2845
|
+
- **POST**: /ods/aggregates/scans/v1
|
2846
|
+
- **Description**: Get aggregates on ODS scan data.
|
2847
|
+
|
2848
|
+
---
|
2849
|
+
|
2850
|
+
**Class**: `Falcon::OdsApi`
|
2851
|
+
|
2852
|
+
- **Operation**: [**aggregate_scheduled_scans**](docs/OdsApi.md#aggregate_scheduled_scans)
|
2853
|
+
- **POST**: /ods/aggregates/scheduled-scans/v1
|
2854
|
+
- **Description**: Get aggregates on ODS scheduled-scan data.
|
2855
|
+
|
2856
|
+
---
|
2857
|
+
|
2858
|
+
**Class**: `Falcon::OdsApi`
|
2859
|
+
|
2860
|
+
- **Operation**: [**cancel_scans**](docs/OdsApi.md#cancel_scans)
|
2861
|
+
- **POST**: /ods/entities/scan-control-actions/cancel/v1
|
2862
|
+
- **Description**: Cancel ODS scans for the given scan ids.
|
2863
|
+
|
2864
|
+
---
|
2865
|
+
|
2866
|
+
**Class**: `Falcon::OdsApi`
|
2867
|
+
|
2868
|
+
- **Operation**: [**create_scan**](docs/OdsApi.md#create_scan)
|
2869
|
+
- **POST**: /ods/entities/scans/v1
|
2870
|
+
- **Description**: Create ODS scan and start or schedule scan for the given scan request.
|
2871
|
+
|
2872
|
+
---
|
2873
|
+
|
2874
|
+
**Class**: `Falcon::OdsApi`
|
2875
|
+
|
2876
|
+
- **Operation**: [**delete_scheduled_scans**](docs/OdsApi.md#delete_scheduled_scans)
|
2877
|
+
- **DELETE**: /ods/entities/scheduled-scans/v1
|
2878
|
+
- **Description**: Delete ODS scheduled-scans for the given scheduled-scan ids.
|
2879
|
+
|
2880
|
+
---
|
2881
|
+
|
2882
|
+
**Class**: `Falcon::OdsApi`
|
2883
|
+
|
2884
|
+
- **Operation**: [**get_malicious_files_by_ids**](docs/OdsApi.md#get_malicious_files_by_ids)
|
2885
|
+
- **GET**: /ods/entities/malicious-files/v1
|
2886
|
+
- **Description**: Get malicious files by ids.
|
2887
|
+
|
2888
|
+
---
|
2889
|
+
|
2890
|
+
**Class**: `Falcon::OdsApi`
|
2891
|
+
|
2892
|
+
- **Operation**: [**get_scan_host_metadata_by_ids**](docs/OdsApi.md#get_scan_host_metadata_by_ids)
|
2893
|
+
- **GET**: /ods/entities/scan-hosts/v1
|
2894
|
+
- **Description**: Get scan hosts by ids.
|
2895
|
+
|
2896
|
+
---
|
2897
|
+
|
2898
|
+
**Class**: `Falcon::OdsApi`
|
2899
|
+
|
2900
|
+
- **Operation**: [**get_scans_by_scan_ids**](docs/OdsApi.md#get_scans_by_scan_ids)
|
2901
|
+
- **GET**: /ods/entities/scans/v1
|
2902
|
+
- **Description**: Get Scans by IDs.
|
2903
|
+
|
2904
|
+
---
|
2905
|
+
|
2906
|
+
**Class**: `Falcon::OdsApi`
|
2907
|
+
|
2908
|
+
- **Operation**: [**get_scheduled_scans_by_scan_ids**](docs/OdsApi.md#get_scheduled_scans_by_scan_ids)
|
2909
|
+
- **GET**: /ods/entities/scheduled-scans/v1
|
2910
|
+
- **Description**: Get ScheduledScans by IDs.
|
2911
|
+
|
2912
|
+
---
|
2913
|
+
|
2914
|
+
**Class**: `Falcon::OdsApi`
|
2915
|
+
|
2916
|
+
- **Operation**: [**query_malicious_files**](docs/OdsApi.md#query_malicious_files)
|
2917
|
+
- **GET**: /ods/queries/malicious-files/v1
|
2918
|
+
- **Description**: Query malicious files.
|
2919
|
+
|
2920
|
+
---
|
2921
|
+
|
2922
|
+
**Class**: `Falcon::OdsApi`
|
2923
|
+
|
2924
|
+
- **Operation**: [**query_scan_host_metadata**](docs/OdsApi.md#query_scan_host_metadata)
|
2925
|
+
- **GET**: /ods/queries/scan-hosts/v1
|
2926
|
+
- **Description**: Query scan hosts.
|
2927
|
+
|
2928
|
+
---
|
2929
|
+
|
2930
|
+
**Class**: `Falcon::OdsApi`
|
2931
|
+
|
2932
|
+
- **Operation**: [**query_scans**](docs/OdsApi.md#query_scans)
|
2933
|
+
- **GET**: /ods/queries/scans/v1
|
2934
|
+
- **Description**: Query Scans.
|
2935
|
+
|
2936
|
+
---
|
2937
|
+
|
2938
|
+
**Class**: `Falcon::OdsApi`
|
2939
|
+
|
2940
|
+
- **Operation**: [**query_scheduled_scans**](docs/OdsApi.md#query_scheduled_scans)
|
2941
|
+
- **GET**: /ods/queries/scheduled-scans/v1
|
2942
|
+
- **Description**: Query ScheduledScans.
|
2943
|
+
|
2944
|
+
---
|
2945
|
+
|
2946
|
+
**Class**: `Falcon::OdsApi`
|
2947
|
+
|
2948
|
+
- **Operation**: [**schedule_scan**](docs/OdsApi.md#schedule_scan)
|
2949
|
+
- **POST**: /ods/entities/scheduled-scans/v1
|
2950
|
+
- **Description**: Create ODS scan and start or schedule scan for the given scan request.
|
2951
|
+
|
2952
|
+
---
|
2953
|
+
|
2954
|
+
**Class**: `Falcon::OverwatchDashboardApi`
|
2955
|
+
|
2956
|
+
- **Operation**: [**aggregates_detections_global_counts**](docs/OverwatchDashboardApi.md#aggregates_detections_global_counts)
|
2957
|
+
- **GET**: /overwatch-dashboards/aggregates/detections-global-counts/v1
|
2958
|
+
- **Description**: Get the total number of detections pushed across all customers
|
2959
|
+
|
2960
|
+
---
|
2961
|
+
|
2962
|
+
**Class**: `Falcon::OverwatchDashboardApi`
|
2963
|
+
|
2964
|
+
- **Operation**: [**aggregates_events**](docs/OverwatchDashboardApi.md#aggregates_events)
|
2965
|
+
- **POST**: /overwatch-dashboards/aggregates/events/GET/v1
|
2966
|
+
- **Description**: Get aggregate OverWatch detection event info by providing an aggregate query
|
2967
|
+
|
2968
|
+
---
|
2969
|
+
|
2970
|
+
**Class**: `Falcon::OverwatchDashboardApi`
|
2971
|
+
|
2972
|
+
- **Operation**: [**aggregates_events_collections**](docs/OverwatchDashboardApi.md#aggregates_events_collections)
|
2973
|
+
- **POST**: /overwatch-dashboards/aggregates/events-collections/GET/v1
|
2974
|
+
- **Description**: Get OverWatch detection event collection info by providing an aggregate query
|
2975
|
+
|
2976
|
+
---
|
2977
|
+
|
2978
|
+
**Class**: `Falcon::OverwatchDashboardApi`
|
2979
|
+
|
2980
|
+
- **Operation**: [**aggregates_incidents_global_counts**](docs/OverwatchDashboardApi.md#aggregates_incidents_global_counts)
|
2981
|
+
- **GET**: /overwatch-dashboards/aggregates/incidents-global-counts/v1
|
2982
|
+
- **Description**: Get the total number of incidents pushed across all customers
|
2983
|
+
|
2984
|
+
---
|
2985
|
+
|
2986
|
+
**Class**: `Falcon::OverwatchDashboardApi`
|
2987
|
+
|
2988
|
+
- **Operation**: [**aggregates_ow_events_global_counts**](docs/OverwatchDashboardApi.md#aggregates_ow_events_global_counts)
|
2989
|
+
- **GET**: /overwatch-dashboards/aggregates/ow-events-global-counts/v1
|
2990
|
+
- **Description**: Get the total number of OverWatch events across all customers
|
2991
|
+
|
2992
|
+
---
|
2993
|
+
|
2994
|
+
**Class**: `Falcon::PreventionPoliciesApi`
|
2995
|
+
|
2996
|
+
- **Operation**: [**create_prevention_policies**](docs/PreventionPoliciesApi.md#create_prevention_policies)
|
2997
|
+
- **POST**: /policy/entities/prevention/v1
|
2998
|
+
- **Description**: Create Prevention Policies by specifying details about the policy to create
|
2999
|
+
|
3000
|
+
---
|
3001
|
+
|
3002
|
+
**Class**: `Falcon::PreventionPoliciesApi`
|
3003
|
+
|
3004
|
+
- **Operation**: [**delete_prevention_policies**](docs/PreventionPoliciesApi.md#delete_prevention_policies)
|
3005
|
+
- **DELETE**: /policy/entities/prevention/v1
|
3006
|
+
- **Description**: Delete a set of Prevention Policies by specifying their IDs
|
3007
|
+
|
3008
|
+
---
|
3009
|
+
|
3010
|
+
**Class**: `Falcon::PreventionPoliciesApi`
|
3011
|
+
|
3012
|
+
- **Operation**: [**get_prevention_policies**](docs/PreventionPoliciesApi.md#get_prevention_policies)
|
3013
|
+
- **GET**: /policy/entities/prevention/v1
|
3014
|
+
- **Description**: Retrieve a set of Prevention Policies by specifying their IDs
|
3015
|
+
|
3016
|
+
---
|
3017
|
+
|
3018
|
+
**Class**: `Falcon::PreventionPoliciesApi`
|
3019
|
+
|
3020
|
+
- **Operation**: [**perform_prevention_policies_action**](docs/PreventionPoliciesApi.md#perform_prevention_policies_action)
|
3021
|
+
- **POST**: /policy/entities/prevention-actions/v1
|
3022
|
+
- **Description**: Perform the specified action on the Prevention Policies specified in the request
|
3023
|
+
|
3024
|
+
---
|
3025
|
+
|
3026
|
+
**Class**: `Falcon::PreventionPoliciesApi`
|
3027
|
+
|
3028
|
+
- **Operation**: [**query_combined_prevention_policies**](docs/PreventionPoliciesApi.md#query_combined_prevention_policies)
|
3029
|
+
- **GET**: /policy/combined/prevention/v1
|
3030
|
+
- **Description**: Search for Prevention Policies in your environment by providing an FQL filter and paging details. Returns a set of Prevention Policies which match the filter criteria
|
3031
|
+
|
3032
|
+
---
|
3033
|
+
|
3034
|
+
**Class**: `Falcon::PreventionPoliciesApi`
|
3035
|
+
|
3036
|
+
- **Operation**: [**query_combined_prevention_policy_members**](docs/PreventionPoliciesApi.md#query_combined_prevention_policy_members)
|
3037
|
+
- **GET**: /policy/combined/prevention-members/v1
|
3038
|
+
- **Description**: Search for members of a Prevention Policy in your environment by providing an FQL filter and paging details. Returns a set of host details which match the filter criteria
|
3039
|
+
|
3040
|
+
---
|
3041
|
+
|
3042
|
+
**Class**: `Falcon::PreventionPoliciesApi`
|
3043
|
+
|
3044
|
+
- **Operation**: [**query_prevention_policies**](docs/PreventionPoliciesApi.md#query_prevention_policies)
|
3045
|
+
- **GET**: /policy/queries/prevention/v1
|
3046
|
+
- **Description**: Search for Prevention Policies in your environment by providing an FQL filter and paging details. Returns a set of Prevention Policy IDs which match the filter criteria
|
3047
|
+
|
3048
|
+
---
|
3049
|
+
|
3050
|
+
**Class**: `Falcon::PreventionPoliciesApi`
|
3051
|
+
|
3052
|
+
- **Operation**: [**query_prevention_policy_members**](docs/PreventionPoliciesApi.md#query_prevention_policy_members)
|
3053
|
+
- **GET**: /policy/queries/prevention-members/v1
|
3054
|
+
- **Description**: Search for members of a Prevention Policy in your environment by providing an FQL filter and paging details. Returns a set of Agent IDs which match the filter criteria
|
3055
|
+
|
3056
|
+
---
|
3057
|
+
|
3058
|
+
**Class**: `Falcon::PreventionPoliciesApi`
|
3059
|
+
|
3060
|
+
- **Operation**: [**set_prevention_policies_precedence**](docs/PreventionPoliciesApi.md#set_prevention_policies_precedence)
|
3061
|
+
- **POST**: /policy/entities/prevention-precedence/v1
|
3062
|
+
- **Description**: Sets the precedence of Prevention Policies based on the order of IDs specified in the request. The first ID specified will have the highest precedence and the last ID specified will have the lowest. You must specify all non-Default Policies for a platform when updating precedence
|
3063
|
+
|
3064
|
+
---
|
3065
|
+
|
3066
|
+
**Class**: `Falcon::PreventionPoliciesApi`
|
3067
|
+
|
3068
|
+
- **Operation**: [**update_prevention_policies**](docs/PreventionPoliciesApi.md#update_prevention_policies)
|
3069
|
+
- **PATCH**: /policy/entities/prevention/v1
|
3070
|
+
- **Description**: Update Prevention Policies by specifying the ID of the policy and details to update
|
3071
|
+
|
3072
|
+
---
|
3073
|
+
|
3074
|
+
**Class**: `Falcon::PublicAssessmentsApi`
|
3075
|
+
|
3076
|
+
- **Operation**: [**get_combined_assessments_query**](docs/PublicAssessmentsApi.md#get_combined_assessments_query)
|
3077
|
+
- **GET**: /configuration-assessment/combined/assessments/v1
|
3078
|
+
- **Description**: Search for assessments in your environment by providing an FQL filter and paging details. Returns a set of HostFinding entities which match the filter criteria
|
3079
|
+
|
3080
|
+
---
|
3081
|
+
|
3082
|
+
**Class**: `Falcon::QuarantineApi`
|
3083
|
+
|
3084
|
+
- **Operation**: [**action_update_count**](docs/QuarantineApi.md#action_update_count)
|
3085
|
+
- **GET**: /quarantine/aggregates/action-update-count/v1
|
3086
|
+
- **Description**: Returns count of potentially affected quarantined files for each action.
|
3087
|
+
|
3088
|
+
---
|
3089
|
+
|
3090
|
+
**Class**: `Falcon::QuarantineApi`
|
3091
|
+
|
3092
|
+
- **Operation**: [**get_aggregate_files**](docs/QuarantineApi.md#get_aggregate_files)
|
3093
|
+
- **POST**: /quarantine/aggregates/quarantined-files/GET/v1
|
3094
|
+
- **Description**: Get quarantine file aggregates as specified via json in request body.
|
3095
|
+
|
3096
|
+
---
|
3097
|
+
|
3098
|
+
**Class**: `Falcon::QuarantineApi`
|
3099
|
+
|
3100
|
+
- **Operation**: [**get_quarantine_files**](docs/QuarantineApi.md#get_quarantine_files)
|
3101
|
+
- **POST**: /quarantine/entities/quarantined-files/GET/v1
|
3102
|
+
- **Description**: Get quarantine file metadata for specified ids.
|
3103
|
+
|
3104
|
+
---
|
3105
|
+
|
3106
|
+
**Class**: `Falcon::QuarantineApi`
|
3107
|
+
|
3108
|
+
- **Operation**: [**query_quarantine_files**](docs/QuarantineApi.md#query_quarantine_files)
|
3109
|
+
- **GET**: /quarantine/queries/quarantined-files/v1
|
3110
|
+
- **Description**: Get quarantine file ids that match the provided filter criteria.
|
3111
|
+
|
3112
|
+
---
|
3113
|
+
|
3114
|
+
**Class**: `Falcon::QuarantineApi`
|
3115
|
+
|
3116
|
+
- **Operation**: [**update_qf_by_query**](docs/QuarantineApi.md#update_qf_by_query)
|
3117
|
+
- **PATCH**: /quarantine/queries/quarantined-files/v1
|
3118
|
+
- **Description**: Apply quarantine file actions by query.
|
3119
|
+
|
3120
|
+
---
|
3121
|
+
|
3122
|
+
**Class**: `Falcon::QuarantineApi`
|
3123
|
+
|
3124
|
+
- **Operation**: [**update_quarantined_detects_by_ids**](docs/QuarantineApi.md#update_quarantined_detects_by_ids)
|
3125
|
+
- **PATCH**: /quarantine/entities/quarantined-files/v1
|
3126
|
+
- **Description**: Apply action by quarantine file ids
|
3127
|
+
|
3128
|
+
---
|
3129
|
+
|
3130
|
+
**Class**: `Falcon::QuickScanApi`
|
3131
|
+
|
3132
|
+
- **Operation**: [**get_scans**](docs/QuickScanApi.md#get_scans)
|
3133
|
+
- **GET**: /scanner/entities/scans/v1
|
3134
|
+
- **Description**: Check the status of a volume scan. Time required for analysis increases with the number of samples in a volume but usually it should take less than 1 minute
|
3135
|
+
|
3136
|
+
---
|
3137
|
+
|
3138
|
+
**Class**: `Falcon::QuickScanApi`
|
3139
|
+
|
3140
|
+
- **Operation**: [**get_scans_aggregates**](docs/QuickScanApi.md#get_scans_aggregates)
|
3141
|
+
- **POST**: /scanner/aggregates/scans/GET/v1
|
3142
|
+
- **Description**: Get scans aggregations as specified via json in request body.
|
3143
|
+
|
3144
|
+
---
|
3145
|
+
|
3146
|
+
**Class**: `Falcon::QuickScanApi`
|
3147
|
+
|
3148
|
+
- **Operation**: [**query_submissions_mixin0**](docs/QuickScanApi.md#query_submissions_mixin0)
|
3149
|
+
- **GET**: /scanner/queries/scans/v1
|
3150
|
+
- **Description**: Find IDs for submitted scans by providing an FQL filter and paging details. Returns a set of volume IDs that match your criteria.
|
3151
|
+
|
3152
|
+
---
|
3153
|
+
|
3154
|
+
**Class**: `Falcon::QuickScanApi`
|
3155
|
+
|
3156
|
+
- **Operation**: [**scan_samples**](docs/QuickScanApi.md#scan_samples)
|
3157
|
+
- **POST**: /scanner/entities/scans/v1
|
3158
|
+
- **Description**: Submit a volume of files for ml scanning. Time required for analysis increases with the number of samples in a volume but usually it should take less than 1 minute
|
3159
|
+
|
3160
|
+
---
|
3161
|
+
|
3162
|
+
**Class**: `Falcon::RealTimeResponseApi`
|
3163
|
+
|
3164
|
+
- **Operation**: [**batch_active_responder_cmd**](docs/RealTimeResponseApi.md#batch_active_responder_cmd)
|
3165
|
+
- **POST**: /real-time-response/combined/batch-active-responder-command/v1
|
3166
|
+
- **Description**: Batch executes a RTR active-responder command across the hosts mapped to the given batch ID.
|
3167
|
+
|
3168
|
+
---
|
3169
|
+
|
3170
|
+
**Class**: `Falcon::RealTimeResponseApi`
|
3171
|
+
|
3172
|
+
- **Operation**: [**batch_cmd**](docs/RealTimeResponseApi.md#batch_cmd)
|
3173
|
+
- **POST**: /real-time-response/combined/batch-command/v1
|
3174
|
+
- **Description**: Batch executes a RTR read-only command across the hosts mapped to the given batch ID.
|
3175
|
+
|
3176
|
+
---
|
3177
|
+
|
3178
|
+
**Class**: `Falcon::RealTimeResponseApi`
|
3179
|
+
|
3180
|
+
- **Operation**: [**batch_get_cmd**](docs/RealTimeResponseApi.md#batch_get_cmd)
|
3181
|
+
- **POST**: /real-time-response/combined/batch-get-command/v1
|
3182
|
+
- **Description**: Batch executes `get` command across hosts to retrieve files. After this call is made `GET /real-time-response/combined/batch-get-command/v1` is used to query for the results.
|
3183
|
+
|
3184
|
+
---
|
3185
|
+
|
3186
|
+
**Class**: `Falcon::RealTimeResponseApi`
|
3187
|
+
|
3188
|
+
- **Operation**: [**batch_get_cmd_status**](docs/RealTimeResponseApi.md#batch_get_cmd_status)
|
3189
|
+
- **GET**: /real-time-response/combined/batch-get-command/v1
|
3190
|
+
- **Description**: Retrieves the status of the specified batch get command. Will return successful files when they are finished processing.
|
3191
|
+
|
3192
|
+
---
|
3193
|
+
|
3194
|
+
**Class**: `Falcon::RealTimeResponseApi`
|
3195
|
+
|
3196
|
+
- **Operation**: [**batch_init_sessions**](docs/RealTimeResponseApi.md#batch_init_sessions)
|
3197
|
+
- **POST**: /real-time-response/combined/batch-init-session/v1
|
3198
|
+
- **Description**: Batch initialize a RTR session on multiple hosts. Before any RTR commands can be used, an active session is needed on the host.
|
3199
|
+
|
3200
|
+
---
|
3201
|
+
|
3202
|
+
**Class**: `Falcon::RealTimeResponseApi`
|
3203
|
+
|
3204
|
+
- **Operation**: [**batch_refresh_sessions**](docs/RealTimeResponseApi.md#batch_refresh_sessions)
|
3205
|
+
- **POST**: /real-time-response/combined/batch-refresh-session/v1
|
3206
|
+
- **Description**: Batch refresh a RTR session on multiple hosts. RTR sessions will expire after 10 minutes unless refreshed.
|
3207
|
+
|
3208
|
+
---
|
3209
|
+
|
3210
|
+
**Class**: `Falcon::RealTimeResponseApi`
|
3211
|
+
|
3212
|
+
- **Operation**: [**r_tr_aggregate_sessions**](docs/RealTimeResponseApi.md#r_tr_aggregate_sessions)
|
3213
|
+
- **POST**: /real-time-response/aggregates/sessions/GET/v1
|
3214
|
+
- **Description**: Get aggregates on session data.
|
3215
|
+
|
3216
|
+
---
|
3217
|
+
|
3218
|
+
**Class**: `Falcon::RealTimeResponseApi`
|
3219
|
+
|
3220
|
+
- **Operation**: [**r_tr_check_active_responder_command_status**](docs/RealTimeResponseApi.md#r_tr_check_active_responder_command_status)
|
3221
|
+
- **GET**: /real-time-response/entities/active-responder-command/v1
|
3222
|
+
- **Description**: Get status of an executed active-responder command on a single host.
|
3223
|
+
|
3224
|
+
---
|
3225
|
+
|
3226
|
+
**Class**: `Falcon::RealTimeResponseApi`
|
3227
|
+
|
3228
|
+
- **Operation**: [**r_tr_check_command_status**](docs/RealTimeResponseApi.md#r_tr_check_command_status)
|
3229
|
+
- **GET**: /real-time-response/entities/command/v1
|
3230
|
+
- **Description**: Get status of an executed command on a single host.
|
3231
|
+
|
3232
|
+
---
|
3233
|
+
|
3234
|
+
**Class**: `Falcon::RealTimeResponseApi`
|
3235
|
+
|
3236
|
+
- **Operation**: [**r_tr_delete_file**](docs/RealTimeResponseApi.md#r_tr_delete_file)
|
3237
|
+
- **DELETE**: /real-time-response/entities/file/v1
|
3238
|
+
- **Description**: Delete a RTR session file.
|
3239
|
+
|
3240
|
+
---
|
3241
|
+
|
3242
|
+
**Class**: `Falcon::RealTimeResponseApi`
|
3243
|
+
|
3244
|
+
- **Operation**: [**r_tr_delete_file_v2**](docs/RealTimeResponseApi.md#r_tr_delete_file_v2)
|
3245
|
+
- **DELETE**: /real-time-response/entities/file/v2
|
3246
|
+
- **Description**: Delete a RTR session file.
|
3247
|
+
|
3248
|
+
---
|
3249
|
+
|
3250
|
+
**Class**: `Falcon::RealTimeResponseApi`
|
3251
|
+
|
3252
|
+
- **Operation**: [**r_tr_delete_queued_session**](docs/RealTimeResponseApi.md#r_tr_delete_queued_session)
|
3253
|
+
- **DELETE**: /real-time-response/entities/queued-sessions/command/v1
|
3254
|
+
- **Description**: Delete a queued session command
|
3255
|
+
|
3256
|
+
---
|
3257
|
+
|
3258
|
+
**Class**: `Falcon::RealTimeResponseApi`
|
3259
|
+
|
3260
|
+
- **Operation**: [**r_tr_delete_session**](docs/RealTimeResponseApi.md#r_tr_delete_session)
|
3261
|
+
- **DELETE**: /real-time-response/entities/sessions/v1
|
3262
|
+
- **Description**: Delete a session.
|
3263
|
+
|
3264
|
+
---
|
3265
|
+
|
3266
|
+
**Class**: `Falcon::RealTimeResponseApi`
|
3267
|
+
|
3268
|
+
- **Operation**: [**r_tr_execute_active_responder_command**](docs/RealTimeResponseApi.md#r_tr_execute_active_responder_command)
|
3269
|
+
- **POST**: /real-time-response/entities/active-responder-command/v1
|
3270
|
+
- **Description**: Execute an active responder command on a single host.
|
3271
|
+
|
3272
|
+
---
|
3273
|
+
|
3274
|
+
**Class**: `Falcon::RealTimeResponseApi`
|
3275
|
+
|
3276
|
+
- **Operation**: [**r_tr_execute_command**](docs/RealTimeResponseApi.md#r_tr_execute_command)
|
3277
|
+
- **POST**: /real-time-response/entities/command/v1
|
3278
|
+
- **Description**: Execute a command on a single host.
|
3279
|
+
|
3280
|
+
---
|
3281
|
+
|
3282
|
+
**Class**: `Falcon::RealTimeResponseApi`
|
3283
|
+
|
3284
|
+
- **Operation**: [**r_tr_get_extracted_file_contents**](docs/RealTimeResponseApi.md#r_tr_get_extracted_file_contents)
|
3285
|
+
- **GET**: /real-time-response/entities/extracted-file-contents/v1
|
3286
|
+
- **Description**: Get RTR extracted file contents for specified session and sha256.
|
3287
|
+
|
3288
|
+
---
|
3289
|
+
|
3290
|
+
**Class**: `Falcon::RealTimeResponseApi`
|
3291
|
+
|
3292
|
+
- **Operation**: [**r_tr_init_session**](docs/RealTimeResponseApi.md#r_tr_init_session)
|
3293
|
+
- **POST**: /real-time-response/entities/sessions/v1
|
3294
|
+
- **Description**: Initialize a new session with the RTR cloud.
|
3295
|
+
|
3296
|
+
---
|
3297
|
+
|
3298
|
+
**Class**: `Falcon::RealTimeResponseApi`
|
3299
|
+
|
3300
|
+
- **Operation**: [**r_tr_list_all_sessions**](docs/RealTimeResponseApi.md#r_tr_list_all_sessions)
|
3301
|
+
- **GET**: /real-time-response/queries/sessions/v1
|
3302
|
+
- **Description**: Get a list of session_ids.
|
3303
|
+
|
3304
|
+
---
|
3305
|
+
|
3306
|
+
**Class**: `Falcon::RealTimeResponseApi`
|
3307
|
+
|
3308
|
+
- **Operation**: [**r_tr_list_files**](docs/RealTimeResponseApi.md#r_tr_list_files)
|
3309
|
+
- **GET**: /real-time-response/entities/file/v1
|
3310
|
+
- **Description**: Get a list of files for the specified RTR session.
|
3311
|
+
|
3312
|
+
---
|
3313
|
+
|
3314
|
+
**Class**: `Falcon::RealTimeResponseApi`
|
3315
|
+
|
3316
|
+
- **Operation**: [**r_tr_list_files_v2**](docs/RealTimeResponseApi.md#r_tr_list_files_v2)
|
3317
|
+
- **GET**: /real-time-response/entities/file/v2
|
3318
|
+
- **Description**: Get a list of files for the specified RTR session.
|
3319
|
+
|
3320
|
+
---
|
3321
|
+
|
3322
|
+
**Class**: `Falcon::RealTimeResponseApi`
|
3323
|
+
|
3324
|
+
- **Operation**: [**r_tr_list_queued_sessions**](docs/RealTimeResponseApi.md#r_tr_list_queued_sessions)
|
3325
|
+
- **POST**: /real-time-response/entities/queued-sessions/GET/v1
|
3326
|
+
- **Description**: Get queued session metadata by session ID.
|
3327
|
+
|
3328
|
+
---
|
3329
|
+
|
3330
|
+
**Class**: `Falcon::RealTimeResponseApi`
|
3331
|
+
|
3332
|
+
- **Operation**: [**r_tr_list_sessions**](docs/RealTimeResponseApi.md#r_tr_list_sessions)
|
3333
|
+
- **POST**: /real-time-response/entities/sessions/GET/v1
|
3334
|
+
- **Description**: Get session metadata by session id.
|
3335
|
+
|
3336
|
+
---
|
3337
|
+
|
3338
|
+
**Class**: `Falcon::RealTimeResponseApi`
|
3339
|
+
|
3340
|
+
- **Operation**: [**r_tr_pulse_session**](docs/RealTimeResponseApi.md#r_tr_pulse_session)
|
3341
|
+
- **POST**: /real-time-response/entities/refresh-session/v1
|
3342
|
+
- **Description**: Refresh a session timeout on a single host.
|
3343
|
+
|
3344
|
+
---
|
3345
|
+
|
3346
|
+
**Class**: `Falcon::RealTimeResponseAdminApi`
|
3347
|
+
|
3348
|
+
- **Operation**: [**batch_admin_cmd**](docs/RealTimeResponseAdminApi.md#batch_admin_cmd)
|
3349
|
+
- **POST**: /real-time-response/combined/batch-admin-command/v1
|
3350
|
+
- **Description**: Batch executes a RTR administrator command across the hosts mapped to the given batch ID.
|
3351
|
+
|
3352
|
+
---
|
3353
|
+
|
3354
|
+
**Class**: `Falcon::RealTimeResponseAdminApi`
|
3355
|
+
|
3356
|
+
- **Operation**: [**r_tr_check_admin_command_status**](docs/RealTimeResponseAdminApi.md#r_tr_check_admin_command_status)
|
3357
|
+
- **GET**: /real-time-response/entities/admin-command/v1
|
3358
|
+
- **Description**: Get status of an executed RTR administrator command on a single host.
|
3359
|
+
|
3360
|
+
---
|
3361
|
+
|
3362
|
+
**Class**: `Falcon::RealTimeResponseAdminApi`
|
3363
|
+
|
3364
|
+
- **Operation**: [**r_tr_create_put_files**](docs/RealTimeResponseAdminApi.md#r_tr_create_put_files)
|
3365
|
+
- **POST**: /real-time-response/entities/put-files/v1
|
3366
|
+
- **Description**: Upload a new put-file to use for the RTR `put` command.
|
3367
|
+
|
3368
|
+
---
|
3369
|
+
|
3370
|
+
**Class**: `Falcon::RealTimeResponseAdminApi`
|
3371
|
+
|
3372
|
+
- **Operation**: [**r_tr_create_scripts**](docs/RealTimeResponseAdminApi.md#r_tr_create_scripts)
|
3373
|
+
- **POST**: /real-time-response/entities/scripts/v1
|
3374
|
+
- **Description**: Upload a new custom-script to use for the RTR `runscript` command.
|
3375
|
+
|
3376
|
+
---
|
3377
|
+
|
3378
|
+
**Class**: `Falcon::RealTimeResponseAdminApi`
|
3379
|
+
|
3380
|
+
- **Operation**: [**r_tr_delete_put_files**](docs/RealTimeResponseAdminApi.md#r_tr_delete_put_files)
|
3381
|
+
- **DELETE**: /real-time-response/entities/put-files/v1
|
3382
|
+
- **Description**: Delete a put-file based on the ID given. Can only delete one file at a time.
|
3383
|
+
|
3384
|
+
---
|
3385
|
+
|
3386
|
+
**Class**: `Falcon::RealTimeResponseAdminApi`
|
3387
|
+
|
3388
|
+
- **Operation**: [**r_tr_delete_scripts**](docs/RealTimeResponseAdminApi.md#r_tr_delete_scripts)
|
3389
|
+
- **DELETE**: /real-time-response/entities/scripts/v1
|
3390
|
+
- **Description**: Delete a custom-script based on the ID given. Can only delete one script at a time.
|
3391
|
+
|
3392
|
+
---
|
3393
|
+
|
3394
|
+
**Class**: `Falcon::RealTimeResponseAdminApi`
|
3395
|
+
|
3396
|
+
- **Operation**: [**r_tr_execute_admin_command**](docs/RealTimeResponseAdminApi.md#r_tr_execute_admin_command)
|
3397
|
+
- **POST**: /real-time-response/entities/admin-command/v1
|
3398
|
+
- **Description**: Execute a RTR administrator command on a single host.
|
3399
|
+
|
3400
|
+
---
|
3401
|
+
|
3402
|
+
**Class**: `Falcon::RealTimeResponseAdminApi`
|
3403
|
+
|
3404
|
+
- **Operation**: [**r_tr_get_put_files**](docs/RealTimeResponseAdminApi.md#r_tr_get_put_files)
|
3405
|
+
- **GET**: /real-time-response/entities/put-files/v1
|
3406
|
+
- **Description**: Get put-files based on the ID's given. These are used for the RTR `put` command.
|
3407
|
+
|
3408
|
+
---
|
3409
|
+
|
3410
|
+
**Class**: `Falcon::RealTimeResponseAdminApi`
|
3411
|
+
|
3412
|
+
- **Operation**: [**r_tr_get_put_files_v2**](docs/RealTimeResponseAdminApi.md#r_tr_get_put_files_v2)
|
3413
|
+
- **GET**: /real-time-response/entities/put-files/v2
|
3414
|
+
- **Description**: Get put-files based on the ID's given. These are used for the RTR `put` command.
|
3415
|
+
|
3416
|
+
---
|
3417
|
+
|
3418
|
+
**Class**: `Falcon::RealTimeResponseAdminApi`
|
3419
|
+
|
3420
|
+
- **Operation**: [**r_tr_get_scripts**](docs/RealTimeResponseAdminApi.md#r_tr_get_scripts)
|
3421
|
+
- **GET**: /real-time-response/entities/scripts/v1
|
3422
|
+
- **Description**: Get custom-scripts based on the ID's given. These are used for the RTR `runscript` command.
|
3423
|
+
|
3424
|
+
---
|
3425
|
+
|
3426
|
+
**Class**: `Falcon::RealTimeResponseAdminApi`
|
3427
|
+
|
3428
|
+
- **Operation**: [**r_tr_get_scripts_v2**](docs/RealTimeResponseAdminApi.md#r_tr_get_scripts_v2)
|
3429
|
+
- **GET**: /real-time-response/entities/scripts/v2
|
3430
|
+
- **Description**: Get custom-scripts based on the ID's given. These are used for the RTR `runscript` command.
|
3431
|
+
|
3432
|
+
---
|
3433
|
+
|
3434
|
+
**Class**: `Falcon::RealTimeResponseAdminApi`
|
3435
|
+
|
3436
|
+
- **Operation**: [**r_tr_list_put_files**](docs/RealTimeResponseAdminApi.md#r_tr_list_put_files)
|
3437
|
+
- **GET**: /real-time-response/queries/put-files/v1
|
3438
|
+
- **Description**: Get a list of put-file ID's that are available to the user for the `put` command.
|
3439
|
+
|
3440
|
+
---
|
3441
|
+
|
3442
|
+
**Class**: `Falcon::RealTimeResponseAdminApi`
|
3443
|
+
|
3444
|
+
- **Operation**: [**r_tr_list_scripts**](docs/RealTimeResponseAdminApi.md#r_tr_list_scripts)
|
3445
|
+
- **GET**: /real-time-response/queries/scripts/v1
|
3446
|
+
- **Description**: Get a list of custom-script ID's that are available to the user for the `runscript` command.
|
3447
|
+
|
3448
|
+
---
|
3449
|
+
|
3450
|
+
**Class**: `Falcon::RealTimeResponseAdminApi`
|
3451
|
+
|
3452
|
+
- **Operation**: [**r_tr_update_scripts**](docs/RealTimeResponseAdminApi.md#r_tr_update_scripts)
|
3453
|
+
- **PATCH**: /real-time-response/entities/scripts/v1
|
3454
|
+
- **Description**: Upload a new scripts to replace an existing one.
|
3455
|
+
|
3456
|
+
---
|
3457
|
+
|
3458
|
+
**Class**: `Falcon::ReconApi`
|
3459
|
+
|
3460
|
+
- **Operation**: [**aggregate_notifications_exposed_data_records_v1**](docs/ReconApi.md#aggregate_notifications_exposed_data_records_v1)
|
3461
|
+
- **POST**: /recon/aggregates/notifications-exposed-data-records/GET/v1
|
3462
|
+
- **Description**: Get notification exposed data record aggregates as specified via JSON in request body. The valid aggregation fields are: [cid notification_id created_date rule.id rule.name rule.topic source_category site author file.name]
|
3463
|
+
|
3464
|
+
---
|
3465
|
+
|
3466
|
+
**Class**: `Falcon::ReconApi`
|
3467
|
+
|
3468
|
+
- **Operation**: [**aggregate_notifications_v1**](docs/ReconApi.md#aggregate_notifications_v1)
|
3469
|
+
- **POST**: /recon/aggregates/notifications/GET/v1
|
3470
|
+
- **Description**: Get notification aggregates as specified via JSON in request body.
|
3471
|
+
|
3472
|
+
---
|
3473
|
+
|
3474
|
+
**Class**: `Falcon::ReconApi`
|
3475
|
+
|
3476
|
+
- **Operation**: [**create_actions_v1**](docs/ReconApi.md#create_actions_v1)
|
3477
|
+
- **POST**: /recon/entities/actions/v1
|
3478
|
+
- **Description**: Create actions for a monitoring rule. Accepts a list of actions that will be attached to the monitoring rule.
|
3479
|
+
|
3480
|
+
---
|
3481
|
+
|
3482
|
+
**Class**: `Falcon::ReconApi`
|
3483
|
+
|
3484
|
+
- **Operation**: [**create_export_jobs_v1**](docs/ReconApi.md#create_export_jobs_v1)
|
3485
|
+
- **POST**: /recon/entities/exports/v1
|
3486
|
+
- **Description**: Launch asynchronous export job. Use the job ID to poll the status of the job using GET /entities/exports/v1.
|
3487
|
+
|
3488
|
+
---
|
3489
|
+
|
3490
|
+
**Class**: `Falcon::ReconApi`
|
3491
|
+
|
3492
|
+
- **Operation**: [**create_rules_v1**](docs/ReconApi.md#create_rules_v1)
|
3493
|
+
- **POST**: /recon/entities/rules/v1
|
3494
|
+
- **Description**: Create monitoring rules.
|
3495
|
+
|
3496
|
+
---
|
3497
|
+
|
3498
|
+
**Class**: `Falcon::ReconApi`
|
3499
|
+
|
3500
|
+
- **Operation**: [**delete_action_v1**](docs/ReconApi.md#delete_action_v1)
|
3501
|
+
- **DELETE**: /recon/entities/actions/v1
|
3502
|
+
- **Description**: Delete an action from a monitoring rule based on the action ID.
|
3503
|
+
|
3504
|
+
---
|
3505
|
+
|
3506
|
+
**Class**: `Falcon::ReconApi`
|
3507
|
+
|
3508
|
+
- **Operation**: [**delete_export_jobs_v1**](docs/ReconApi.md#delete_export_jobs_v1)
|
3509
|
+
- **DELETE**: /recon/entities/exports/v1
|
3510
|
+
- **Description**: Delete export jobs (and their associated file(s)) based on their IDs.
|
3511
|
+
|
3512
|
+
---
|
3513
|
+
|
3514
|
+
**Class**: `Falcon::ReconApi`
|
3515
|
+
|
3516
|
+
- **Operation**: [**delete_notifications_v1**](docs/ReconApi.md#delete_notifications_v1)
|
3517
|
+
- **DELETE**: /recon/entities/notifications/v1
|
3518
|
+
- **Description**: Delete notifications based on IDs. Notifications cannot be recovered after they are deleted.
|
3519
|
+
|
3520
|
+
---
|
3521
|
+
|
3522
|
+
**Class**: `Falcon::ReconApi`
|
3523
|
+
|
3524
|
+
- **Operation**: [**delete_rules_v1**](docs/ReconApi.md#delete_rules_v1)
|
3525
|
+
- **DELETE**: /recon/entities/rules/v1
|
3526
|
+
- **Description**: Delete monitoring rules.
|
3527
|
+
|
3528
|
+
---
|
3529
|
+
|
3530
|
+
**Class**: `Falcon::ReconApi`
|
3531
|
+
|
3532
|
+
- **Operation**: [**get_actions_v1**](docs/ReconApi.md#get_actions_v1)
|
3533
|
+
- **GET**: /recon/entities/actions/v1
|
3534
|
+
- **Description**: Get actions based on their IDs. IDs can be retrieved using the GET /queries/actions/v1 endpoint.
|
3535
|
+
|
3536
|
+
---
|
3537
|
+
|
3538
|
+
**Class**: `Falcon::ReconApi`
|
3539
|
+
|
3540
|
+
- **Operation**: [**get_export_jobs_v1**](docs/ReconApi.md#get_export_jobs_v1)
|
3541
|
+
- **GET**: /recon/entities/exports/v1
|
3542
|
+
- **Description**: Get the status of export jobs based on their IDs. Export jobs can be launched by calling POST /entities/exports/v1. When a job is complete, use the job ID to download the file(s) associated with it using GET entities/export-files/v1.
|
3543
|
+
|
3544
|
+
---
|
3545
|
+
|
3546
|
+
**Class**: `Falcon::ReconApi`
|
3547
|
+
|
3548
|
+
- **Operation**: [**get_file_content_for_export_jobs_v1**](docs/ReconApi.md#get_file_content_for_export_jobs_v1)
|
3549
|
+
- **GET**: /recon/entities/export-files/v1
|
3550
|
+
- **Description**: Download the file associated with a job ID.
|
3551
|
+
|
3552
|
+
---
|
3553
|
+
|
3554
|
+
**Class**: `Falcon::ReconApi`
|
3555
|
+
|
3556
|
+
- **Operation**: [**get_notifications_detailed_translated_v1**](docs/ReconApi.md#get_notifications_detailed_translated_v1)
|
3557
|
+
- **GET**: /recon/entities/notifications-detailed-translated/v1
|
3558
|
+
- **Description**: Get detailed notifications based on their IDs. These include the raw intelligence content that generated the match.This endpoint will return translated notification content. The only target language available is English. A single notification can be translated per request
|
3559
|
+
|
3560
|
+
---
|
3561
|
+
|
3562
|
+
**Class**: `Falcon::ReconApi`
|
3563
|
+
|
3564
|
+
- **Operation**: [**get_notifications_detailed_v1**](docs/ReconApi.md#get_notifications_detailed_v1)
|
3565
|
+
- **GET**: /recon/entities/notifications-detailed/v1
|
3566
|
+
- **Description**: Get detailed notifications based on their IDs. These include the raw intelligence content that generated the match.
|
3567
|
+
|
3568
|
+
---
|
3569
|
+
|
3570
|
+
**Class**: `Falcon::ReconApi`
|
3571
|
+
|
3572
|
+
- **Operation**: [**get_notifications_exposed_data_records_v1**](docs/ReconApi.md#get_notifications_exposed_data_records_v1)
|
3573
|
+
- **GET**: /recon/entities/notifications-exposed-data-records/v1
|
3574
|
+
- **Description**: Get notifications exposed data records based on their IDs. IDs can be retrieved using the GET /queries/notifications-exposed-data-records/v1 endpoint. The associate notification can be fetched using the /entities/notifications/v* endpoints
|
3575
|
+
|
3576
|
+
---
|
3577
|
+
|
3578
|
+
**Class**: `Falcon::ReconApi`
|
3579
|
+
|
3580
|
+
- **Operation**: [**get_notifications_translated_v1**](docs/ReconApi.md#get_notifications_translated_v1)
|
3581
|
+
- **GET**: /recon/entities/notifications-translated/v1
|
3582
|
+
- **Description**: Get notifications based on their IDs. IDs can be retrieved using the GET /queries/notifications/v1 endpoint. This endpoint will return translated notification content. The only target language available is English.
|
3583
|
+
|
3584
|
+
---
|
3585
|
+
|
3586
|
+
**Class**: `Falcon::ReconApi`
|
3587
|
+
|
3588
|
+
- **Operation**: [**get_notifications_v1**](docs/ReconApi.md#get_notifications_v1)
|
3589
|
+
- **GET**: /recon/entities/notifications/v1
|
3590
|
+
- **Description**: Get notifications based on their IDs. IDs can be retrieved using the GET /queries/notifications/v1 endpoint.
|
3591
|
+
|
3592
|
+
---
|
3593
|
+
|
3594
|
+
**Class**: `Falcon::ReconApi`
|
3595
|
+
|
3596
|
+
- **Operation**: [**get_rules_v1**](docs/ReconApi.md#get_rules_v1)
|
3597
|
+
- **GET**: /recon/entities/rules/v1
|
3598
|
+
- **Description**: Get monitoring rules based on their IDs. IDs can be retrieved using the GET /queries/rules/v1 endpoint.
|
3599
|
+
|
3600
|
+
---
|
3601
|
+
|
3602
|
+
**Class**: `Falcon::ReconApi`
|
3603
|
+
|
3604
|
+
- **Operation**: [**preview_rule_v1**](docs/ReconApi.md#preview_rule_v1)
|
3605
|
+
- **POST**: /recon/aggregates/rules-preview/GET/v1
|
3606
|
+
- **Description**: Preview rules notification count and distribution. This will return aggregations on: channel, count, site.
|
3607
|
+
|
3608
|
+
---
|
3609
|
+
|
3610
|
+
**Class**: `Falcon::ReconApi`
|
3611
|
+
|
3612
|
+
- **Operation**: [**query_actions_v1**](docs/ReconApi.md#query_actions_v1)
|
3613
|
+
- **GET**: /recon/queries/actions/v1
|
3614
|
+
- **Description**: Query actions based on provided criteria. Use the IDs from this response to get the action entities on GET /entities/actions/v1.
|
3615
|
+
|
3616
|
+
---
|
3617
|
+
|
3618
|
+
**Class**: `Falcon::ReconApi`
|
3619
|
+
|
3620
|
+
- **Operation**: [**query_notifications_exposed_data_records_v1**](docs/ReconApi.md#query_notifications_exposed_data_records_v1)
|
3621
|
+
- **GET**: /recon/queries/notifications-exposed-data-records/v1
|
3622
|
+
- **Description**: Query notifications exposed data records based on provided criteria. Use the IDs from this response to get the notification +entities on GET /entities/notifications-exposed-data-records/v1
|
3623
|
+
|
3624
|
+
---
|
3625
|
+
|
3626
|
+
**Class**: `Falcon::ReconApi`
|
3627
|
+
|
3628
|
+
- **Operation**: [**query_notifications_v1**](docs/ReconApi.md#query_notifications_v1)
|
3629
|
+
- **GET**: /recon/queries/notifications/v1
|
3630
|
+
- **Description**: Query notifications based on provided criteria. Use the IDs from this response to get the notification +entities on GET /entities/notifications/v1, GET /entities/notifications-detailed/v1, +GET /entities/notifications-translated/v1 or GET /entities/notifications-detailed-translated/v1.
|
3631
|
+
|
3632
|
+
---
|
3633
|
+
|
3634
|
+
**Class**: `Falcon::ReconApi`
|
3635
|
+
|
3636
|
+
- **Operation**: [**query_rules_v1**](docs/ReconApi.md#query_rules_v1)
|
3637
|
+
- **GET**: /recon/queries/rules/v1
|
3638
|
+
- **Description**: Query monitoring rules based on provided criteria. Use the IDs from this response to fetch the rules on /entities/rules/v1.
|
3639
|
+
|
3640
|
+
---
|
3641
|
+
|
3642
|
+
**Class**: `Falcon::ReconApi`
|
3643
|
+
|
3644
|
+
- **Operation**: [**update_action_v1**](docs/ReconApi.md#update_action_v1)
|
3645
|
+
- **PATCH**: /recon/entities/actions/v1
|
3646
|
+
- **Description**: Update an action for a monitoring rule.
|
3647
|
+
|
3648
|
+
---
|
3649
|
+
|
3650
|
+
**Class**: `Falcon::ReconApi`
|
3651
|
+
|
3652
|
+
- **Operation**: [**update_notifications_v1**](docs/ReconApi.md#update_notifications_v1)
|
3653
|
+
- **PATCH**: /recon/entities/notifications/v1
|
3654
|
+
- **Description**: Update notification status or assignee. Accepts bulk requests
|
3655
|
+
|
3656
|
+
---
|
3657
|
+
|
3658
|
+
**Class**: `Falcon::ReconApi`
|
3659
|
+
|
3660
|
+
- **Operation**: [**update_rules_v1**](docs/ReconApi.md#update_rules_v1)
|
3661
|
+
- **PATCH**: /recon/entities/rules/v1
|
3662
|
+
- **Description**: Update monitoring rules.
|
3663
|
+
|
3664
|
+
---
|
3665
|
+
|
3666
|
+
**Class**: `Falcon::ReportExecutionsApi`
|
3667
|
+
|
3668
|
+
- **Operation**: [**report_executions_download_get**](docs/ReportExecutionsApi.md#report_executions_download_get)
|
3669
|
+
- **GET**: /reports/entities/report-executions-download/v1
|
3670
|
+
- **Description**: Get report entity download
|
3671
|
+
|
3672
|
+
---
|
3673
|
+
|
3674
|
+
**Class**: `Falcon::ReportExecutionsApi`
|
3675
|
+
|
3676
|
+
- **Operation**: [**report_executions_get**](docs/ReportExecutionsApi.md#report_executions_get)
|
3677
|
+
- **GET**: /reports/entities/report-executions/v1
|
3678
|
+
- **Description**: Retrieve report details for the provided report IDs.
|
3679
|
+
|
3680
|
+
---
|
3681
|
+
|
3682
|
+
**Class**: `Falcon::ReportExecutionsApi`
|
3683
|
+
|
3684
|
+
- **Operation**: [**report_executions_query**](docs/ReportExecutionsApi.md#report_executions_query)
|
3685
|
+
- **GET**: /reports/queries/report-executions/v1
|
3686
|
+
- **Description**: Find all report execution IDs matching the query with filter
|
3687
|
+
|
3688
|
+
---
|
3689
|
+
|
3690
|
+
**Class**: `Falcon::ReportExecutionsApi`
|
3691
|
+
|
3692
|
+
- **Operation**: [**report_executions_retry**](docs/ReportExecutionsApi.md#report_executions_retry)
|
3693
|
+
- **POST**: /reports/entities/report-executions-retry/v1
|
3694
|
+
- **Description**: This endpoint will be used to retry report executions
|
3695
|
+
|
3696
|
+
---
|
3697
|
+
|
3698
|
+
**Class**: `Falcon::ResponsePoliciesApi`
|
3699
|
+
|
3700
|
+
- **Operation**: [**create_rt_response_policies**](docs/ResponsePoliciesApi.md#create_rt_response_policies)
|
3701
|
+
- **POST**: /policy/entities/response/v1
|
3702
|
+
- **Description**: Create Response Policies by specifying details about the policy to create
|
3703
|
+
|
3704
|
+
---
|
3705
|
+
|
3706
|
+
**Class**: `Falcon::ResponsePoliciesApi`
|
3707
|
+
|
3708
|
+
- **Operation**: [**delete_rt_response_policies**](docs/ResponsePoliciesApi.md#delete_rt_response_policies)
|
3709
|
+
- **DELETE**: /policy/entities/response/v1
|
3710
|
+
- **Description**: Delete a set of Response Policies by specifying their IDs
|
3711
|
+
|
3712
|
+
---
|
3713
|
+
|
3714
|
+
**Class**: `Falcon::ResponsePoliciesApi`
|
3715
|
+
|
3716
|
+
- **Operation**: [**get_rt_response_policies**](docs/ResponsePoliciesApi.md#get_rt_response_policies)
|
3717
|
+
- **GET**: /policy/entities/response/v1
|
3718
|
+
- **Description**: Retrieve a set of Response Policies by specifying their IDs
|
3719
|
+
|
3720
|
+
---
|
3721
|
+
|
3722
|
+
**Class**: `Falcon::ResponsePoliciesApi`
|
3723
|
+
|
3724
|
+
- **Operation**: [**perform_rt_response_policies_action**](docs/ResponsePoliciesApi.md#perform_rt_response_policies_action)
|
3725
|
+
- **POST**: /policy/entities/response-actions/v1
|
3726
|
+
- **Description**: Perform the specified action on the Response Policies specified in the request
|
3727
|
+
|
3728
|
+
---
|
3729
|
+
|
3730
|
+
**Class**: `Falcon::ResponsePoliciesApi`
|
3731
|
+
|
3732
|
+
- **Operation**: [**query_combined_rt_response_policies**](docs/ResponsePoliciesApi.md#query_combined_rt_response_policies)
|
3733
|
+
- **GET**: /policy/combined/response/v1
|
3734
|
+
- **Description**: Search for Response Policies in your environment by providing an FQL filter and paging details. Returns a set of Response Policies which match the filter criteria
|
3735
|
+
|
3736
|
+
---
|
3737
|
+
|
3738
|
+
**Class**: `Falcon::ResponsePoliciesApi`
|
3739
|
+
|
3740
|
+
- **Operation**: [**query_combined_rt_response_policy_members**](docs/ResponsePoliciesApi.md#query_combined_rt_response_policy_members)
|
3741
|
+
- **GET**: /policy/combined/response-members/v1
|
3742
|
+
- **Description**: Search for members of a Response policy in your environment by providing an FQL filter and paging details. Returns a set of host details which match the filter criteria
|
3743
|
+
|
3744
|
+
---
|
3745
|
+
|
3746
|
+
**Class**: `Falcon::ResponsePoliciesApi`
|
3747
|
+
|
3748
|
+
- **Operation**: [**query_rt_response_policies**](docs/ResponsePoliciesApi.md#query_rt_response_policies)
|
3749
|
+
- **GET**: /policy/queries/response/v1
|
3750
|
+
- **Description**: Search for Response Policies in your environment by providing an FQL filter with sort and/or paging details. This returns a set of Response Policy IDs that match the given criteria.
|
3751
|
+
|
3752
|
+
---
|
3753
|
+
|
3754
|
+
**Class**: `Falcon::ResponsePoliciesApi`
|
3755
|
+
|
3756
|
+
- **Operation**: [**query_rt_response_policy_members**](docs/ResponsePoliciesApi.md#query_rt_response_policy_members)
|
3757
|
+
- **GET**: /policy/queries/response-members/v1
|
3758
|
+
- **Description**: Search for members of a Response policy in your environment by providing an FQL filter and paging details. Returns a set of Agent IDs which match the filter criteria
|
3759
|
+
|
3760
|
+
---
|
3761
|
+
|
3762
|
+
**Class**: `Falcon::ResponsePoliciesApi`
|
3763
|
+
|
3764
|
+
- **Operation**: [**set_rt_response_policies_precedence**](docs/ResponsePoliciesApi.md#set_rt_response_policies_precedence)
|
3765
|
+
- **POST**: /policy/entities/response-precedence/v1
|
3766
|
+
- **Description**: Sets the precedence of Response Policies based on the order of IDs specified in the request. The first ID specified will have the highest precedence and the last ID specified will have the lowest. You must specify all non-Default Policies for a platform when updating precedence
|
3767
|
+
|
3768
|
+
---
|
3769
|
+
|
3770
|
+
**Class**: `Falcon::ResponsePoliciesApi`
|
3771
|
+
|
3772
|
+
- **Operation**: [**update_rt_response_policies**](docs/ResponsePoliciesApi.md#update_rt_response_policies)
|
3773
|
+
- **PATCH**: /policy/entities/response/v1
|
3774
|
+
- **Description**: Update Response Policies by specifying the ID of the policy and details to update
|
3775
|
+
|
3776
|
+
---
|
3777
|
+
|
3778
|
+
**Class**: `Falcon::SampleUploadsApi`
|
3779
|
+
|
3780
|
+
- **Operation**: [**archive_delete_v1**](docs/SampleUploadsApi.md#archive_delete_v1)
|
3781
|
+
- **DELETE**: /archives/entities/archives/v1
|
3782
|
+
- **Description**: Delete an archive that was uploaded previously
|
3783
|
+
|
3784
|
+
---
|
3785
|
+
|
3786
|
+
**Class**: `Falcon::SampleUploadsApi`
|
3787
|
+
|
3788
|
+
- **Operation**: [**archive_get_v1**](docs/SampleUploadsApi.md#archive_get_v1)
|
3789
|
+
- **GET**: /archives/entities/archives/v1
|
3790
|
+
- **Description**: Retrieves the archives upload operation statuses. Status `done` means that archive was processed successfully. Status `error` means that archive was not processed successfully.
|
3791
|
+
|
3792
|
+
---
|
3793
|
+
|
3794
|
+
**Class**: `Falcon::SampleUploadsApi`
|
3795
|
+
|
3796
|
+
- **Operation**: [**archive_list_v1**](docs/SampleUploadsApi.md#archive_list_v1)
|
3797
|
+
- **GET**: /archives/entities/archive-files/v1
|
3798
|
+
- **Description**: Retrieves the archives files in chunks.
|
3799
|
+
|
3800
|
+
---
|
3801
|
+
|
3802
|
+
**Class**: `Falcon::SampleUploadsApi`
|
3803
|
+
|
3804
|
+
- **Operation**: [**archive_upload_v1**](docs/SampleUploadsApi.md#archive_upload_v1)
|
3805
|
+
- **POST**: /archives/entities/archives/v1
|
3806
|
+
- **Description**: Uploads an archive and extracts files list from it. Operation is asynchronous use `/archives/entities/archives/v1` to check the status. After uploading, use `/archives/entities/extractions/v1` to copy the file to internal storage making it available for content analysis. This method is deprecated in favor of `/archives/entities/archives/v2`
|
3807
|
+
|
3808
|
+
---
|
3809
|
+
|
3810
|
+
**Class**: `Falcon::SampleUploadsApi`
|
3811
|
+
|
3812
|
+
- **Operation**: [**archive_upload_v2**](docs/SampleUploadsApi.md#archive_upload_v2)
|
3813
|
+
- **POST**: /archives/entities/archives/v2
|
3814
|
+
- **Description**: Uploads an archive and extracts files list from it. Operation is asynchronous use `/archives/entities/archives/v1` to check the status. After uploading, use `/archives/entities/extractions/v1` to copy the file to internal storage making it available for content analysis.
|
3815
|
+
|
3816
|
+
---
|
3817
|
+
|
3818
|
+
**Class**: `Falcon::SampleUploadsApi`
|
3819
|
+
|
3820
|
+
- **Operation**: [**delete_sample_v3**](docs/SampleUploadsApi.md#delete_sample_v3)
|
3821
|
+
- **DELETE**: /samples/entities/samples/v3
|
3822
|
+
- **Description**: Removes a sample, including file, meta and submissions from the collection
|
3823
|
+
|
3824
|
+
---
|
3825
|
+
|
3826
|
+
**Class**: `Falcon::SampleUploadsApi`
|
3827
|
+
|
3828
|
+
- **Operation**: [**extraction_create_v1**](docs/SampleUploadsApi.md#extraction_create_v1)
|
3829
|
+
- **POST**: /archives/entities/extractions/v1
|
3830
|
+
- **Description**: Extracts files from an uploaded archive and copies them to internal storage making it available for content analysis.
|
3831
|
+
|
3832
|
+
---
|
3833
|
+
|
3834
|
+
**Class**: `Falcon::SampleUploadsApi`
|
3835
|
+
|
3836
|
+
- **Operation**: [**extraction_get_v1**](docs/SampleUploadsApi.md#extraction_get_v1)
|
3837
|
+
- **GET**: /archives/entities/extractions/v1
|
3838
|
+
- **Description**: Retrieves the files extraction operation statuses. Status `done` means that all files were processed successfully. Status `error` means that at least one of the file could not be processed.
|
3839
|
+
|
3840
|
+
---
|
3841
|
+
|
3842
|
+
**Class**: `Falcon::SampleUploadsApi`
|
3843
|
+
|
3844
|
+
- **Operation**: [**extraction_list_v1**](docs/SampleUploadsApi.md#extraction_list_v1)
|
3845
|
+
- **GET**: /archives/entities/extraction-files/v1
|
3846
|
+
- **Description**: Retrieves the files extractions in chunks. Status `done` means that all files were processed successfully. Status `error` means that at least one of the file could not be processed.
|
3847
|
+
|
3848
|
+
---
|
3849
|
+
|
3850
|
+
**Class**: `Falcon::SampleUploadsApi`
|
3851
|
+
|
3852
|
+
- **Operation**: [**get_sample_v3**](docs/SampleUploadsApi.md#get_sample_v3)
|
3853
|
+
- **GET**: /samples/entities/samples/v3
|
3854
|
+
- **Description**: Retrieves the file associated with the given ID (SHA256)
|
3855
|
+
|
3856
|
+
---
|
3857
|
+
|
3858
|
+
**Class**: `Falcon::SampleUploadsApi`
|
3859
|
+
|
3860
|
+
- **Operation**: [**upload_sample_v3**](docs/SampleUploadsApi.md#upload_sample_v3)
|
3861
|
+
- **POST**: /samples/entities/samples/v3
|
3862
|
+
- **Description**: Upload a file for further cloud analysis. After uploading, call the specific analysis API endpoint.
|
3863
|
+
|
3864
|
+
---
|
3865
|
+
|
3866
|
+
**Class**: `Falcon::ScheduledReportsApi`
|
3867
|
+
|
3868
|
+
- **Operation**: [**scheduled_reports_get**](docs/ScheduledReportsApi.md#scheduled_reports_get)
|
3869
|
+
- **GET**: /reports/entities/scheduled-reports/v1
|
3870
|
+
- **Description**: Retrieve scheduled reports for the provided report IDs.
|
3871
|
+
|
3872
|
+
---
|
3873
|
+
|
3874
|
+
**Class**: `Falcon::ScheduledReportsApi`
|
3875
|
+
|
3876
|
+
- **Operation**: [**scheduled_reports_launch**](docs/ScheduledReportsApi.md#scheduled_reports_launch)
|
3877
|
+
- **POST**: /reports/entities/scheduled-reports/execution/v1
|
3878
|
+
- **Description**: Launch scheduled reports executions for the provided report IDs.
|
3879
|
+
|
3880
|
+
---
|
3881
|
+
|
3882
|
+
**Class**: `Falcon::ScheduledReportsApi`
|
3883
|
+
|
3884
|
+
- **Operation**: [**scheduled_reports_query**](docs/ScheduledReportsApi.md#scheduled_reports_query)
|
3885
|
+
- **GET**: /reports/queries/scheduled-reports/v1
|
3886
|
+
- **Description**: Find all report IDs matching the query with filter
|
3887
|
+
|
3888
|
+
---
|
3889
|
+
|
3890
|
+
**Class**: `Falcon::SensorDownloadApi`
|
3891
|
+
|
3892
|
+
- **Operation**: [**download_sensor_installer_by_id**](docs/SensorDownloadApi.md#download_sensor_installer_by_id)
|
3893
|
+
- **GET**: /sensors/entities/download-installer/v1
|
3894
|
+
- **Description**: Download sensor installer by SHA256 ID
|
3895
|
+
|
3896
|
+
---
|
3897
|
+
|
3898
|
+
**Class**: `Falcon::SensorDownloadApi`
|
3899
|
+
|
3900
|
+
- **Operation**: [**get_combined_sensor_installers_by_query**](docs/SensorDownloadApi.md#get_combined_sensor_installers_by_query)
|
3901
|
+
- **GET**: /sensors/combined/installers/v1
|
3902
|
+
- **Description**: Get sensor installer details by provided query
|
3903
|
+
|
3904
|
+
---
|
3905
|
+
|
3906
|
+
**Class**: `Falcon::SensorDownloadApi`
|
3907
|
+
|
3908
|
+
- **Operation**: [**get_sensor_installers_by_query**](docs/SensorDownloadApi.md#get_sensor_installers_by_query)
|
3909
|
+
- **GET**: /sensors/queries/installers/v1
|
3910
|
+
- **Description**: Get sensor installer IDs by provided query
|
3911
|
+
|
3912
|
+
---
|
3913
|
+
|
3914
|
+
**Class**: `Falcon::SensorDownloadApi`
|
3915
|
+
|
3916
|
+
- **Operation**: [**get_sensor_installers_ccidby_query**](docs/SensorDownloadApi.md#get_sensor_installers_ccidby_query)
|
3917
|
+
- **GET**: /sensors/queries/installers/ccid/v1
|
3918
|
+
- **Description**: Get CCID to use with sensor installers
|
3919
|
+
|
3920
|
+
---
|
3921
|
+
|
3922
|
+
**Class**: `Falcon::SensorDownloadApi`
|
3923
|
+
|
3924
|
+
- **Operation**: [**get_sensor_installers_entities**](docs/SensorDownloadApi.md#get_sensor_installers_entities)
|
3925
|
+
- **GET**: /sensors/entities/installers/v1
|
3926
|
+
- **Description**: Get sensor installer details by provided SHA256 IDs
|
3927
|
+
|
3928
|
+
---
|
3929
|
+
|
3930
|
+
**Class**: `Falcon::SensorUpdatePoliciesApi`
|
3931
|
+
|
3932
|
+
- **Operation**: [**create_sensor_update_policies**](docs/SensorUpdatePoliciesApi.md#create_sensor_update_policies)
|
3933
|
+
- **POST**: /policy/entities/sensor-update/v1
|
3934
|
+
- **Description**: Create Sensor Update Policies by specifying details about the policy to create
|
3935
|
+
|
3936
|
+
---
|
3937
|
+
|
3938
|
+
**Class**: `Falcon::SensorUpdatePoliciesApi`
|
3939
|
+
|
3940
|
+
- **Operation**: [**create_sensor_update_policies_v2**](docs/SensorUpdatePoliciesApi.md#create_sensor_update_policies_v2)
|
3941
|
+
- **POST**: /policy/entities/sensor-update/v2
|
3942
|
+
- **Description**: Create Sensor Update Policies by specifying details about the policy to create with additional support for uninstall protection
|
3943
|
+
|
3944
|
+
---
|
3945
|
+
|
3946
|
+
**Class**: `Falcon::SensorUpdatePoliciesApi`
|
3947
|
+
|
3948
|
+
- **Operation**: [**delete_sensor_update_policies**](docs/SensorUpdatePoliciesApi.md#delete_sensor_update_policies)
|
3949
|
+
- **DELETE**: /policy/entities/sensor-update/v1
|
3950
|
+
- **Description**: Delete a set of Sensor Update Policies by specifying their IDs
|
3951
|
+
|
3952
|
+
---
|
3953
|
+
|
3954
|
+
**Class**: `Falcon::SensorUpdatePoliciesApi`
|
3955
|
+
|
3956
|
+
- **Operation**: [**get_sensor_update_policies**](docs/SensorUpdatePoliciesApi.md#get_sensor_update_policies)
|
3957
|
+
- **GET**: /policy/entities/sensor-update/v1
|
3958
|
+
- **Description**: Retrieve a set of Sensor Update Policies by specifying their IDs
|
3959
|
+
|
3960
|
+
---
|
3961
|
+
|
3962
|
+
**Class**: `Falcon::SensorUpdatePoliciesApi`
|
3963
|
+
|
3964
|
+
- **Operation**: [**get_sensor_update_policies_v2**](docs/SensorUpdatePoliciesApi.md#get_sensor_update_policies_v2)
|
3965
|
+
- **GET**: /policy/entities/sensor-update/v2
|
3966
|
+
- **Description**: Retrieve a set of Sensor Update Policies with additional support for uninstall protection by specifying their IDs
|
3967
|
+
|
3968
|
+
---
|
3969
|
+
|
3970
|
+
**Class**: `Falcon::SensorUpdatePoliciesApi`
|
3971
|
+
|
3972
|
+
- **Operation**: [**perform_sensor_update_policies_action**](docs/SensorUpdatePoliciesApi.md#perform_sensor_update_policies_action)
|
3973
|
+
- **POST**: /policy/entities/sensor-update-actions/v1
|
3974
|
+
- **Description**: Perform the specified action on the Sensor Update Policies specified in the request
|
3975
|
+
|
3976
|
+
---
|
3977
|
+
|
3978
|
+
**Class**: `Falcon::SensorUpdatePoliciesApi`
|
3979
|
+
|
3980
|
+
- **Operation**: [**query_combined_sensor_update_builds**](docs/SensorUpdatePoliciesApi.md#query_combined_sensor_update_builds)
|
3981
|
+
- **GET**: /policy/combined/sensor-update-builds/v1
|
3982
|
+
- **Description**: Retrieve available builds for use with Sensor Update Policies
|
3983
|
+
|
3984
|
+
---
|
3985
|
+
|
3986
|
+
**Class**: `Falcon::SensorUpdatePoliciesApi`
|
3987
|
+
|
3988
|
+
- **Operation**: [**query_combined_sensor_update_kernels**](docs/SensorUpdatePoliciesApi.md#query_combined_sensor_update_kernels)
|
3989
|
+
- **GET**: /policy/combined/sensor-update-kernels/v1
|
3990
|
+
- **Description**: Retrieve kernel compatibility info for Sensor Update Builds
|
3991
|
+
|
3992
|
+
---
|
3993
|
+
|
3994
|
+
**Class**: `Falcon::SensorUpdatePoliciesApi`
|
3995
|
+
|
3996
|
+
- **Operation**: [**query_combined_sensor_update_policies**](docs/SensorUpdatePoliciesApi.md#query_combined_sensor_update_policies)
|
3997
|
+
- **GET**: /policy/combined/sensor-update/v1
|
3998
|
+
- **Description**: Search for Sensor Update Policies in your environment by providing an FQL filter and paging details. Returns a set of Sensor Update Policies which match the filter criteria
|
3999
|
+
|
4000
|
+
---
|
4001
|
+
|
4002
|
+
**Class**: `Falcon::SensorUpdatePoliciesApi`
|
4003
|
+
|
4004
|
+
- **Operation**: [**query_combined_sensor_update_policies_v2**](docs/SensorUpdatePoliciesApi.md#query_combined_sensor_update_policies_v2)
|
4005
|
+
- **GET**: /policy/combined/sensor-update/v2
|
4006
|
+
- **Description**: Search for Sensor Update Policies with additional support for uninstall protection in your environment by providing an FQL filter and paging details. Returns a set of Sensor Update Policies which match the filter criteria
|
4007
|
+
|
4008
|
+
---
|
4009
|
+
|
4010
|
+
**Class**: `Falcon::SensorUpdatePoliciesApi`
|
4011
|
+
|
4012
|
+
- **Operation**: [**query_combined_sensor_update_policy_members**](docs/SensorUpdatePoliciesApi.md#query_combined_sensor_update_policy_members)
|
4013
|
+
- **GET**: /policy/combined/sensor-update-members/v1
|
4014
|
+
- **Description**: Search for members of a Sensor Update Policy in your environment by providing an FQL filter and paging details. Returns a set of host details which match the filter criteria
|
4015
|
+
|
4016
|
+
---
|
4017
|
+
|
4018
|
+
**Class**: `Falcon::SensorUpdatePoliciesApi`
|
4019
|
+
|
4020
|
+
- **Operation**: [**query_sensor_update_kernels_distinct**](docs/SensorUpdatePoliciesApi.md#query_sensor_update_kernels_distinct)
|
4021
|
+
- **GET**: /policy/queries/sensor-update-kernels/{distinct-field}/v1
|
4022
|
+
- **Description**: Retrieve kernel compatibility info for Sensor Update Builds
|
4023
|
+
|
4024
|
+
---
|
4025
|
+
|
4026
|
+
**Class**: `Falcon::SensorUpdatePoliciesApi`
|
4027
|
+
|
4028
|
+
- **Operation**: [**query_sensor_update_policies**](docs/SensorUpdatePoliciesApi.md#query_sensor_update_policies)
|
4029
|
+
- **GET**: /policy/queries/sensor-update/v1
|
4030
|
+
- **Description**: Search for Sensor Update Policies in your environment by providing an FQL filter and paging details. Returns a set of Sensor Update Policy IDs which match the filter criteria
|
4031
|
+
|
4032
|
+
---
|
4033
|
+
|
4034
|
+
**Class**: `Falcon::SensorUpdatePoliciesApi`
|
4035
|
+
|
4036
|
+
- **Operation**: [**query_sensor_update_policy_members**](docs/SensorUpdatePoliciesApi.md#query_sensor_update_policy_members)
|
4037
|
+
- **GET**: /policy/queries/sensor-update-members/v1
|
4038
|
+
- **Description**: Search for members of a Sensor Update Policy in your environment by providing an FQL filter and paging details. Returns a set of Agent IDs which match the filter criteria
|
4039
|
+
|
4040
|
+
---
|
4041
|
+
|
4042
|
+
**Class**: `Falcon::SensorUpdatePoliciesApi`
|
4043
|
+
|
4044
|
+
- **Operation**: [**reveal_uninstall_token**](docs/SensorUpdatePoliciesApi.md#reveal_uninstall_token)
|
4045
|
+
- **POST**: /policy/combined/reveal-uninstall-token/v1
|
4046
|
+
- **Description**: Reveals an uninstall token for a specific device. To retrieve the bulk maintenance token pass the value 'MAINTENANCE' as the value for 'device_id'
|
4047
|
+
|
4048
|
+
---
|
4049
|
+
|
4050
|
+
**Class**: `Falcon::SensorUpdatePoliciesApi`
|
4051
|
+
|
4052
|
+
- **Operation**: [**set_sensor_update_policies_precedence**](docs/SensorUpdatePoliciesApi.md#set_sensor_update_policies_precedence)
|
4053
|
+
- **POST**: /policy/entities/sensor-update-precedence/v1
|
4054
|
+
- **Description**: Sets the precedence of Sensor Update Policies based on the order of IDs specified in the request. The first ID specified will have the highest precedence and the last ID specified will have the lowest. You must specify all non-Default Policies for a platform when updating precedence
|
4055
|
+
|
4056
|
+
---
|
4057
|
+
|
4058
|
+
**Class**: `Falcon::SensorUpdatePoliciesApi`
|
4059
|
+
|
4060
|
+
- **Operation**: [**update_sensor_update_policies**](docs/SensorUpdatePoliciesApi.md#update_sensor_update_policies)
|
4061
|
+
- **PATCH**: /policy/entities/sensor-update/v1
|
4062
|
+
- **Description**: Update Sensor Update Policies by specifying the ID of the policy and details to update
|
4063
|
+
|
4064
|
+
---
|
4065
|
+
|
4066
|
+
**Class**: `Falcon::SensorUpdatePoliciesApi`
|
4067
|
+
|
4068
|
+
- **Operation**: [**update_sensor_update_policies_v2**](docs/SensorUpdatePoliciesApi.md#update_sensor_update_policies_v2)
|
4069
|
+
- **PATCH**: /policy/entities/sensor-update/v2
|
4070
|
+
- **Description**: Update Sensor Update Policies by specifying the ID of the policy and details to update with additional support for uninstall protection
|
4071
|
+
|
4072
|
+
---
|
4073
|
+
|
4074
|
+
**Class**: `Falcon::SensorVisibilityExclusionsApi`
|
4075
|
+
|
4076
|
+
- **Operation**: [**create_sv_exclusions_v1**](docs/SensorVisibilityExclusionsApi.md#create_sv_exclusions_v1)
|
4077
|
+
- **POST**: /policy/entities/sv-exclusions/v1
|
4078
|
+
- **Description**: Create the sensor visibility exclusions
|
4079
|
+
|
4080
|
+
---
|
4081
|
+
|
4082
|
+
**Class**: `Falcon::SensorVisibilityExclusionsApi`
|
4083
|
+
|
4084
|
+
- **Operation**: [**delete_sensor_visibility_exclusions_v1**](docs/SensorVisibilityExclusionsApi.md#delete_sensor_visibility_exclusions_v1)
|
4085
|
+
- **DELETE**: /policy/entities/sv-exclusions/v1
|
4086
|
+
- **Description**: Delete the sensor visibility exclusions by id
|
4087
|
+
|
4088
|
+
---
|
4089
|
+
|
4090
|
+
**Class**: `Falcon::SensorVisibilityExclusionsApi`
|
4091
|
+
|
4092
|
+
- **Operation**: [**get_sensor_visibility_exclusions_v1**](docs/SensorVisibilityExclusionsApi.md#get_sensor_visibility_exclusions_v1)
|
4093
|
+
- **GET**: /policy/entities/sv-exclusions/v1
|
4094
|
+
- **Description**: Get a set of Sensor Visibility Exclusions by specifying their IDs
|
4095
|
+
|
4096
|
+
---
|
4097
|
+
|
4098
|
+
**Class**: `Falcon::SensorVisibilityExclusionsApi`
|
4099
|
+
|
4100
|
+
- **Operation**: [**query_sensor_visibility_exclusions_v1**](docs/SensorVisibilityExclusionsApi.md#query_sensor_visibility_exclusions_v1)
|
4101
|
+
- **GET**: /policy/queries/sv-exclusions/v1
|
4102
|
+
- **Description**: Search for sensor visibility exclusions.
|
4103
|
+
|
4104
|
+
---
|
4105
|
+
|
4106
|
+
**Class**: `Falcon::SensorVisibilityExclusionsApi`
|
4107
|
+
|
4108
|
+
- **Operation**: [**update_sensor_visibility_exclusions_v1**](docs/SensorVisibilityExclusionsApi.md#update_sensor_visibility_exclusions_v1)
|
4109
|
+
- **PATCH**: /policy/entities/sv-exclusions/v1
|
4110
|
+
- **Description**: Update the sensor visibility exclusions
|
4111
|
+
|
4112
|
+
---
|
4113
|
+
|
4114
|
+
**Class**: `Falcon::SpotlightEvaluationLogicApi`
|
4115
|
+
|
4116
|
+
- **Operation**: [**combined_query_evaluation_logic**](docs/SpotlightEvaluationLogicApi.md#combined_query_evaluation_logic)
|
4117
|
+
- **GET**: /spotlight/combined/evaluation-logic/v1
|
4118
|
+
- **Description**: Search for evaluation logic in your environment by providing a FQL filter and paging details. Returns a set of evaluation logic entities which match the filter criteria.
|
4119
|
+
|
4120
|
+
---
|
4121
|
+
|
4122
|
+
**Class**: `Falcon::SpotlightEvaluationLogicApi`
|
4123
|
+
|
4124
|
+
- **Operation**: [**get_evaluation_logic**](docs/SpotlightEvaluationLogicApi.md#get_evaluation_logic)
|
4125
|
+
- **GET**: /spotlight/entities/evaluation-logic/v1
|
4126
|
+
- **Description**: Get details on evaluation logic items by providing one or more IDs.
|
4127
|
+
|
4128
|
+
---
|
4129
|
+
|
4130
|
+
**Class**: `Falcon::SpotlightEvaluationLogicApi`
|
4131
|
+
|
4132
|
+
- **Operation**: [**query_evaluation_logic**](docs/SpotlightEvaluationLogicApi.md#query_evaluation_logic)
|
4133
|
+
- **GET**: /spotlight/queries/evaluation-logic/v1
|
4134
|
+
- **Description**: Search for evaluation logic in your environment by providing a FQL filter and paging details. Returns a set of evaluation logic IDs which match the filter criteria.
|
4135
|
+
|
4136
|
+
---
|
4137
|
+
|
4138
|
+
**Class**: `Falcon::SpotlightVulnerabilitiesApi`
|
4139
|
+
|
4140
|
+
- **Operation**: [**combined_query_vulnerabilities**](docs/SpotlightVulnerabilitiesApi.md#combined_query_vulnerabilities)
|
4141
|
+
- **GET**: /spotlight/combined/vulnerabilities/v1
|
4142
|
+
- **Description**: Search for Vulnerabilities in your environment by providing an FQL filter and paging details. Returns a set of Vulnerability entities which match the filter criteria
|
4143
|
+
|
4144
|
+
---
|
4145
|
+
|
4146
|
+
**Class**: `Falcon::SpotlightVulnerabilitiesApi`
|
4147
|
+
|
4148
|
+
- **Operation**: [**get_remediations_v2**](docs/SpotlightVulnerabilitiesApi.md#get_remediations_v2)
|
4149
|
+
- **GET**: /spotlight/entities/remediations/v2
|
4150
|
+
- **Description**: Get details on remediation by providing one or more IDs
|
4151
|
+
|
4152
|
+
---
|
4153
|
+
|
4154
|
+
**Class**: `Falcon::SpotlightVulnerabilitiesApi`
|
4155
|
+
|
4156
|
+
- **Operation**: [**get_vulnerabilities**](docs/SpotlightVulnerabilitiesApi.md#get_vulnerabilities)
|
4157
|
+
- **GET**: /spotlight/entities/vulnerabilities/v2
|
4158
|
+
- **Description**: Get details on vulnerabilities by providing one or more IDs
|
4159
|
+
|
4160
|
+
---
|
4161
|
+
|
4162
|
+
**Class**: `Falcon::SpotlightVulnerabilitiesApi`
|
4163
|
+
|
4164
|
+
- **Operation**: [**query_vulnerabilities**](docs/SpotlightVulnerabilitiesApi.md#query_vulnerabilities)
|
4165
|
+
- **GET**: /spotlight/queries/vulnerabilities/v1
|
4166
|
+
- **Description**: Search for Vulnerabilities in your environment by providing an FQL filter and paging details. Returns a set of Vulnerability IDs which match the filter criteria
|
4167
|
+
|
4168
|
+
---
|
4169
|
+
|
4170
|
+
**Class**: `Falcon::TailoredIntelligenceApi`
|
4171
|
+
|
4172
|
+
- **Operation**: [**get_events_body**](docs/TailoredIntelligenceApi.md#get_events_body)
|
4173
|
+
- **GET**: /ti/events/entities/events-full-body/v2
|
4174
|
+
- **Description**: Get event body for the provided event ID
|
4175
|
+
|
4176
|
+
---
|
4177
|
+
|
4178
|
+
**Class**: `Falcon::TailoredIntelligenceApi`
|
4179
|
+
|
4180
|
+
- **Operation**: [**get_events_entities**](docs/TailoredIntelligenceApi.md#get_events_entities)
|
4181
|
+
- **POST**: /ti/events/entities/events/GET/v2
|
4182
|
+
- **Description**: Get events entities for specified ids.
|
4183
|
+
|
4184
|
+
---
|
4185
|
+
|
4186
|
+
**Class**: `Falcon::TailoredIntelligenceApi`
|
4187
|
+
|
4188
|
+
- **Operation**: [**get_rules_entities**](docs/TailoredIntelligenceApi.md#get_rules_entities)
|
4189
|
+
- **POST**: /ti/rules/entities/rules/GET/v2
|
4190
|
+
- **Description**: Get rules entities for specified ids.
|
4191
|
+
|
4192
|
+
---
|
4193
|
+
|
4194
|
+
**Class**: `Falcon::TailoredIntelligenceApi`
|
4195
|
+
|
4196
|
+
- **Operation**: [**query_events**](docs/TailoredIntelligenceApi.md#query_events)
|
4197
|
+
- **GET**: /ti/events/queries/events/v2
|
4198
|
+
- **Description**: Get events ids that match the provided filter criteria.
|
4199
|
+
|
4200
|
+
---
|
4201
|
+
|
4202
|
+
**Class**: `Falcon::TailoredIntelligenceApi`
|
4203
|
+
|
4204
|
+
- **Operation**: [**query_rules**](docs/TailoredIntelligenceApi.md#query_rules)
|
4205
|
+
- **GET**: /ti/rules/queries/rules/v2
|
4206
|
+
- **Description**: Get rules ids that match the provided filter criteria.
|
4207
|
+
|
4208
|
+
---
|
4209
|
+
|
4210
|
+
**Class**: `Falcon::UserManagementApi`
|
4211
|
+
|
4212
|
+
- **Operation**: [**combined_user_roles_v1**](docs/UserManagementApi.md#combined_user_roles_v1)
|
4213
|
+
- **GET**: /user-management/combined/user-roles/v1
|
4214
|
+
- **Description**: Get User Grant(s). This endpoint lists both direct as well as flight control grants between a User and a Customer.
|
4215
|
+
|
4216
|
+
---
|
4217
|
+
|
4218
|
+
**Class**: `Falcon::UserManagementApi`
|
4219
|
+
|
4220
|
+
- **Operation**: [**create_user**](docs/UserManagementApi.md#create_user)
|
4221
|
+
- **POST**: /users/entities/users/v1
|
4222
|
+
- **Description**: Deprecated : Please use POST /user-management/entities/users/v1. Create a new user. After creating a user, assign one or more roles with POST /user-roles/entities/user-roles/v1
|
4223
|
+
|
4224
|
+
---
|
4225
|
+
|
4226
|
+
**Class**: `Falcon::UserManagementApi`
|
4227
|
+
|
4228
|
+
- **Operation**: [**create_user_v1**](docs/UserManagementApi.md#create_user_v1)
|
4229
|
+
- **POST**: /user-management/entities/users/v1
|
4230
|
+
- **Description**: Create a new user. After creating a user, assign one or more roles with POST '/user-management/entities/user-role-actions/v1'
|
4231
|
+
|
4232
|
+
---
|
4233
|
+
|
4234
|
+
**Class**: `Falcon::UserManagementApi`
|
4235
|
+
|
4236
|
+
- **Operation**: [**delete_user**](docs/UserManagementApi.md#delete_user)
|
4237
|
+
- **DELETE**: /users/entities/users/v1
|
4238
|
+
- **Description**: Deprecated : Please use DELETE /user-management/entities/users/v1. Delete a user permanently
|
4239
|
+
|
4240
|
+
---
|
4241
|
+
|
4242
|
+
**Class**: `Falcon::UserManagementApi`
|
4243
|
+
|
4244
|
+
- **Operation**: [**delete_user_v1**](docs/UserManagementApi.md#delete_user_v1)
|
4245
|
+
- **DELETE**: /user-management/entities/users/v1
|
4246
|
+
- **Description**: Delete a user permanently.
|
4247
|
+
|
4248
|
+
---
|
4249
|
+
|
4250
|
+
**Class**: `Falcon::UserManagementApi`
|
4251
|
+
|
4252
|
+
- **Operation**: [**entities_roles_v1**](docs/UserManagementApi.md#entities_roles_v1)
|
4253
|
+
- **GET**: /user-management/entities/roles/v1
|
4254
|
+
- **Description**: Get info about a role
|
4255
|
+
|
4256
|
+
---
|
4257
|
+
|
4258
|
+
**Class**: `Falcon::UserManagementApi`
|
4259
|
+
|
4260
|
+
- **Operation**: [**get_available_role_ids**](docs/UserManagementApi.md#get_available_role_ids)
|
4261
|
+
- **GET**: /user-roles/queries/user-role-ids-by-cid/v1
|
4262
|
+
- **Description**: Deprecated : Please use GET /user-management/queries/roles/v1. Show role IDs for all roles available in your customer account. For more information on each role, provide the role ID to `/customer/entities/roles/v1`.
|
4263
|
+
|
4264
|
+
---
|
4265
|
+
|
4266
|
+
**Class**: `Falcon::UserManagementApi`
|
4267
|
+
|
4268
|
+
- **Operation**: [**get_roles**](docs/UserManagementApi.md#get_roles)
|
4269
|
+
- **GET**: /user-roles/entities/user-roles/v1
|
4270
|
+
- **Description**: Deprecated : Please use GET /user-management/entities/roles/v1. Get info about a role
|
4271
|
+
|
4272
|
+
---
|
4273
|
+
|
4274
|
+
**Class**: `Falcon::UserManagementApi`
|
4275
|
+
|
4276
|
+
- **Operation**: [**get_user_role_ids**](docs/UserManagementApi.md#get_user_role_ids)
|
4277
|
+
- **GET**: /user-roles/queries/user-role-ids-by-user-uuid/v1
|
4278
|
+
- **Description**: Deprecated : Please use GET /user-management/combined/user-roles/v1. Show role IDs of roles assigned to a user. For more information on each role, provide the role ID to `/customer/entities/roles/v1`.
|
4279
|
+
|
4280
|
+
---
|
4281
|
+
|
4282
|
+
**Class**: `Falcon::UserManagementApi`
|
4283
|
+
|
4284
|
+
- **Operation**: [**grant_user_role_ids**](docs/UserManagementApi.md#grant_user_role_ids)
|
4285
|
+
- **POST**: /user-roles/entities/user-roles/v1
|
4286
|
+
- **Description**: Deprecated : Please use POST /user-management/entities/user-role-actions/v1. Assign one or more roles to a user
|
4287
|
+
|
4288
|
+
---
|
4289
|
+
|
4290
|
+
**Class**: `Falcon::UserManagementApi`
|
4291
|
+
|
4292
|
+
- **Operation**: [**queries_roles_v1**](docs/UserManagementApi.md#queries_roles_v1)
|
4293
|
+
- **GET**: /user-management/queries/roles/v1
|
4294
|
+
- **Description**: Show role IDs for all roles available in your customer account. For more information on each role, provide the role ID to `/user-management/entities/roles/v1`.
|
4295
|
+
|
4296
|
+
---
|
4297
|
+
|
4298
|
+
**Class**: `Falcon::UserManagementApi`
|
4299
|
+
|
4300
|
+
- **Operation**: [**query_user_v1**](docs/UserManagementApi.md#query_user_v1)
|
4301
|
+
- **GET**: /user-management/queries/users/v1
|
4302
|
+
- **Description**: List user IDs for all users in your customer account. For more information on each user, provide the user ID to `/user-management/entities/users/GET/v1`.
|
4303
|
+
|
4304
|
+
---
|
4305
|
+
|
4306
|
+
**Class**: `Falcon::UserManagementApi`
|
4307
|
+
|
4308
|
+
- **Operation**: [**retrieve_emails_by_cid**](docs/UserManagementApi.md#retrieve_emails_by_cid)
|
4309
|
+
- **GET**: /users/queries/emails-by-cid/v1
|
4310
|
+
- **Description**: Deprecated : Please use POST /user-management/entities/users/GET/v1. List the usernames (usually an email address) for all users in your customer account
|
4311
|
+
|
4312
|
+
---
|
4313
|
+
|
4314
|
+
**Class**: `Falcon::UserManagementApi`
|
4315
|
+
|
4316
|
+
- **Operation**: [**retrieve_user**](docs/UserManagementApi.md#retrieve_user)
|
4317
|
+
- **GET**: /users/entities/users/v1
|
4318
|
+
- **Description**: Deprecated : Please use POST /user-management/entities/users/GET/v1. Get info about a user
|
4319
|
+
|
4320
|
+
---
|
4321
|
+
|
4322
|
+
**Class**: `Falcon::UserManagementApi`
|
4323
|
+
|
4324
|
+
- **Operation**: [**retrieve_user_uuid**](docs/UserManagementApi.md#retrieve_user_uuid)
|
4325
|
+
- **GET**: /users/queries/user-uuids-by-email/v1
|
4326
|
+
- **Description**: Deprecated : Please use GET /user-management/queries/users/v1. Get a user's ID by providing a username (usually an email address)
|
4327
|
+
|
4328
|
+
---
|
4329
|
+
|
4330
|
+
**Class**: `Falcon::UserManagementApi`
|
4331
|
+
|
4332
|
+
- **Operation**: [**retrieve_user_uuids_by_cid**](docs/UserManagementApi.md#retrieve_user_uuids_by_cid)
|
4333
|
+
- **GET**: /users/queries/user-uuids-by-cid/v1
|
4334
|
+
- **Description**: Deprecated : Please use GET /user-management/queries/users/v1. List user IDs for all users in your customer account. For more information on each user, provide the user ID to `/users/entities/user/v1`.
|
4335
|
+
|
4336
|
+
---
|
4337
|
+
|
4338
|
+
**Class**: `Falcon::UserManagementApi`
|
4339
|
+
|
4340
|
+
- **Operation**: [**retrieve_users_getv1**](docs/UserManagementApi.md#retrieve_users_getv1)
|
4341
|
+
- **POST**: /user-management/entities/users/GET/v1
|
4342
|
+
- **Description**: Get info about users including their name, UID and CID by providing user UUIDs
|
4343
|
+
|
4344
|
+
---
|
4345
|
+
|
4346
|
+
**Class**: `Falcon::UserManagementApi`
|
4347
|
+
|
4348
|
+
- **Operation**: [**revoke_user_role_ids**](docs/UserManagementApi.md#revoke_user_role_ids)
|
4349
|
+
- **DELETE**: /user-roles/entities/user-roles/v1
|
4350
|
+
- **Description**: Deprecated : Please use POST /user-management/entities/user-role-actions/v1. Revoke one or more roles from a user
|
4351
|
+
|
4352
|
+
---
|
4353
|
+
|
4354
|
+
**Class**: `Falcon::UserManagementApi`
|
4355
|
+
|
4356
|
+
- **Operation**: [**update_user**](docs/UserManagementApi.md#update_user)
|
4357
|
+
- **PATCH**: /users/entities/users/v1
|
4358
|
+
- **Description**: Deprecated : Please use PATCH /user-management/entities/users/v1. Modify an existing user's first or last name
|
4359
|
+
|
4360
|
+
---
|
4361
|
+
|
4362
|
+
**Class**: `Falcon::UserManagementApi`
|
4363
|
+
|
4364
|
+
- **Operation**: [**update_user_v1**](docs/UserManagementApi.md#update_user_v1)
|
4365
|
+
- **PATCH**: /user-management/entities/users/v1
|
4366
|
+
- **Description**: Modify an existing user's first or last name.
|
4367
|
+
|
4368
|
+
---
|
4369
|
+
|
4370
|
+
**Class**: `Falcon::UserManagementApi`
|
4371
|
+
|
4372
|
+
- **Operation**: [**user_action_v1**](docs/UserManagementApi.md#user_action_v1)
|
4373
|
+
- **POST**: /user-management/entities/user-actions/v1
|
4374
|
+
- **Description**: Apply actions to one or more User. Available action names: reset_2fa, reset_password. User UUIDs can be provided in `ids` param as part of request payload.
|
4375
|
+
|
4376
|
+
---
|
4377
|
+
|
4378
|
+
**Class**: `Falcon::UserManagementApi`
|
4379
|
+
|
4380
|
+
- **Operation**: [**user_roles_action_v1**](docs/UserManagementApi.md#user_roles_action_v1)
|
4381
|
+
- **POST**: /user-management/entities/user-role-actions/v1
|
4382
|
+
- **Description**: Grant or Revoke one or more role(s) to a user against a CID. User UUID, CID and Role ID(s) can be provided in request payload. Available Action(s) : grant, revoke
|
4383
|
+
|
4384
|
+
---
|
4385
|
+
|
4386
|
+
**Class**: `Falcon::ZeroTrustAssessmentApi`
|
4387
|
+
|
4388
|
+
- **Operation**: [**get_assessment_v1**](docs/ZeroTrustAssessmentApi.md#get_assessment_v1)
|
4389
|
+
- **GET**: /zero-trust-assessment/entities/assessments/v1
|
4390
|
+
- **Description**: Get Zero Trust Assessment data for one or more hosts by providing agent IDs (AID) and a customer ID (CID).
|
4391
|
+
|
4392
|
+
---
|
4393
|
+
|
4394
|
+
**Class**: `Falcon::ZeroTrustAssessmentApi`
|
4395
|
+
|
4396
|
+
- **Operation**: [**get_assessments_by_score_v1**](docs/ZeroTrustAssessmentApi.md#get_assessments_by_score_v1)
|
4397
|
+
- **GET**: /zero-trust-assessment/queries/assessments/v1
|
4398
|
+
- **Description**: Get Zero Trust Assessment data for one or more hosts by providing a customer ID (CID) and a range of scores.
|
4399
|
+
|
4400
|
+
---
|
4401
|
+
|
4402
|
+
**Class**: `Falcon::ZeroTrustAssessmentApi`
|
4403
|
+
|
4404
|
+
- **Operation**: [**get_audit_v1**](docs/ZeroTrustAssessmentApi.md#get_audit_v1)
|
4405
|
+
- **GET**: /zero-trust-assessment/entities/audit/v1
|
4406
|
+
- **Description**: Get the Zero Trust Assessment audit report for one customer ID (CID).
|
4407
|
+
|
4408
|
+
---
|
4409
|
+
|