crimson-falcon 0.1.2

data/spec/api/host_group_api_spec.rb

@@ -0,0 +1,172 @@
+=begin
+Crimson Falcon - Ruby Client SDK
+
+Code auto-generated by OpenAPI Generator; DO NOT EDIT.
+
+This is free and unencumbered software released into the public domain.
+
+Anyone is free to copy, modify, publish, use, compile, sell, or
+distribute this software, either in source code form or as a compiled
+binary, for any purpose, commercial or non-commercial, and by any
+means.
+
+In jurisdictions that recognize copyright laws, the author or authors
+of this software dedicate any and all copyright interest in the
+software to the public domain. We make this dedication for the benefit
+of the public at large and to the detriment of our heirs and
+successors. We intend this dedication to be an overt act of
+relinquishment in perpetuity of all present and future rights to this
+software under copyright law.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
+EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
+MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.
+IN NO EVENT SHALL THE AUTHORS BE LIABLE FOR ANY CLAIM, DAMAGES OR
+OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE,
+ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR
+OTHER DEALINGS IN THE SOFTWARE.
+
+For more information, please refer to <https://unlicense.org>
+
+CrowdStrike Swagger API Version: 2023-05-30T23:10:32Z
+
+=end
+
+require 'spec_helper'
+require 'json'
+
+# Unit tests for Falcon::HostGroupApi
+# Automatically generated by openapi-generator (https://openapi-generator.tech)
+# Please update as you see appropriate
+describe 'HostGroupApi' do
+  before do
+    # run before each test
+    @api_instance = Falcon::HostGroupApi.new
+  end
+
+  after do
+    # run after each test
+  end
+
+  describe 'test an instance of HostGroupApi' do
+    it 'should create an instance of HostGroupApi' do
+      expect(@api_instance).to be_instance_of(Falcon::HostGroupApi)
+    end
+  end
+
+  # unit tests for create_host_groups
+  # Create Host Groups by specifying details about the group to create
+  # @param body 
+  # @param [Hash] opts the optional parameters
+  # @return [HostGroupsRespV1]
+  describe 'create_host_groups test' do
+    it 'should work' do
+      # assertion here. ref: https://rspec.info/features/3-12/rspec-expectations/built-in-matchers/
+    end
+  end
+
+  # unit tests for delete_host_groups
+  # Delete a set of Host Groups by specifying their IDs
+  # @param ids The IDs of the Host Groups to delete
+  # @param [Hash] opts the optional parameters
+  # @return [MsaQueryResponse]
+  describe 'delete_host_groups test' do
+    it 'should work' do
+      # assertion here. ref: https://rspec.info/features/3-12/rspec-expectations/built-in-matchers/
+    end
+  end
+
+  # unit tests for get_host_groups
+  # Retrieve a set of Host Groups by specifying their IDs
+  # @param ids The IDs of the Host Groups to return
+  # @param [Hash] opts the optional parameters
+  # @return [HostGroupsRespV1]
+  describe 'get_host_groups test' do
+    it 'should work' do
+      # assertion here. ref: https://rspec.info/features/3-12/rspec-expectations/built-in-matchers/
+    end
+  end
+
+  # unit tests for perform_group_action
+  # Perform the specified action on the Host Groups specified in the request
+  # @param action_name The action to perform
+  # @param body 
+  # @param [Hash] opts the optional parameters
+  # @option opts [Boolean] :disable_hostname_check Bool to disable hostname check on add-member
+  # @return [HostGroupsRespV1]
+  describe 'perform_group_action test' do
+    it 'should work' do
+      # assertion here. ref: https://rspec.info/features/3-12/rspec-expectations/built-in-matchers/
+    end
+  end
+
+  # unit tests for query_combined_group_members
+  # Search for members of a Host Group in your environment by providing an FQL filter and paging details. Returns a set of host details which match the filter criteria
+  # @param [Hash] opts the optional parameters
+  # @option opts [String] :id The ID of the Host Group to search for members of
+  # @option opts [String] :filter The filter expression that should be used to limit the results
+  # @option opts [Integer] :offset The offset to start retrieving records from
+  # @option opts [Integer] :limit The maximum records to return. [1-5000]
+  # @option opts [String] :sort The property to sort by
+  # @return [HostGroupsMembersRespV1]
+  describe 'query_combined_group_members test' do
+    it 'should work' do
+      # assertion here. ref: https://rspec.info/features/3-12/rspec-expectations/built-in-matchers/
+    end
+  end
+
+  # unit tests for query_combined_host_groups
+  # Search for Host Groups in your environment by providing an FQL filter and paging details. Returns a set of Host Groups which match the filter criteria
+  # @param [Hash] opts the optional parameters
+  # @option opts [String] :filter The filter expression that should be used to limit the results
+  # @option opts [Integer] :offset The offset to start retrieving records from
+  # @option opts [Integer] :limit The maximum records to return. [1-5000]
+  # @option opts [String] :sort The property to sort by
+  # @return [HostGroupsRespV1]
+  describe 'query_combined_host_groups test' do
+    it 'should work' do
+      # assertion here. ref: https://rspec.info/features/3-12/rspec-expectations/built-in-matchers/
+    end
+  end
+
+  # unit tests for query_group_members
+  # Search for members of a Host Group in your environment by providing an FQL filter and paging details. Returns a set of Agent IDs which match the filter criteria
+  # @param [Hash] opts the optional parameters
+  # @option opts [String] :id The ID of the Host Group to search for members of
+  # @option opts [String] :filter The filter expression that should be used to limit the results
+  # @option opts [Integer] :offset The offset to start retrieving records from
+  # @option opts [Integer] :limit The maximum records to return. [1-5000]
+  # @option opts [String] :sort The property to sort by
+  # @return [MsaQueryResponse]
+  describe 'query_group_members test' do
+    it 'should work' do
+      # assertion here. ref: https://rspec.info/features/3-12/rspec-expectations/built-in-matchers/
+    end
+  end
+
+  # unit tests for query_host_groups
+  # Search for Host Groups in your environment by providing an FQL filter and paging details. Returns a set of Host Group IDs which match the filter criteria
+  # @param [Hash] opts the optional parameters
+  # @option opts [String] :filter The filter expression that should be used to limit the results
+  # @option opts [Integer] :offset The offset to start retrieving records from
+  # @option opts [Integer] :limit The maximum records to return. [1-5000]
+  # @option opts [String] :sort The property to sort by
+  # @return [MsaQueryResponse]
+  describe 'query_host_groups test' do
+    it 'should work' do
+      # assertion here. ref: https://rspec.info/features/3-12/rspec-expectations/built-in-matchers/
+    end
+  end
+
+  # unit tests for update_host_groups
+  # Update Host Groups by specifying the ID of the group and details to update
+  # @param body 
+  # @param [Hash] opts the optional parameters
+  # @return [HostGroupsRespV1]
+  describe 'update_host_groups test' do
+    it 'should work' do
+      # assertion here. ref: https://rspec.info/features/3-12/rspec-expectations/built-in-matchers/
+    end
+  end
+
+end

data/spec/api/hosts_api_spec.rb

@@ -0,0 +1,202 @@
+=begin
+Crimson Falcon - Ruby Client SDK
+
+Code auto-generated by OpenAPI Generator; DO NOT EDIT.
+
+This is free and unencumbered software released into the public domain.
+
+Anyone is free to copy, modify, publish, use, compile, sell, or
+distribute this software, either in source code form or as a compiled
+binary, for any purpose, commercial or non-commercial, and by any
+means.
+
+In jurisdictions that recognize copyright laws, the author or authors
+of this software dedicate any and all copyright interest in the
+software to the public domain. We make this dedication for the benefit
+of the public at large and to the detriment of our heirs and
+successors. We intend this dedication to be an overt act of
+relinquishment in perpetuity of all present and future rights to this
+software under copyright law.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
+EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
+MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.
+IN NO EVENT SHALL THE AUTHORS BE LIABLE FOR ANY CLAIM, DAMAGES OR
+OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE,
+ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR
+OTHER DEALINGS IN THE SOFTWARE.
+
+For more information, please refer to <https://unlicense.org>
+
+CrowdStrike Swagger API Version: 2023-05-30T23:10:32Z
+
+=end
+
+require 'spec_helper'
+require 'json'
+
+# Unit tests for Falcon::HostsApi
+# Automatically generated by openapi-generator (https://openapi-generator.tech)
+# Please update as you see appropriate
+describe 'HostsApi' do
+  before do
+    # run before each test
+    @api_instance = Falcon::HostsApi.new
+  end
+
+  after do
+    # run after each test
+  end
+
+  describe 'test an instance of HostsApi' do
+    it 'should create an instance of HostsApi' do
+      expect(@api_instance).to be_instance_of(Falcon::HostsApi)
+    end
+  end
+
+  # unit tests for entities_perform_action
+  # Performs the specified action on the provided prevention policy IDs.
+  # @param ids The group ids to act on
+  # @param action_name The action to perform.
+  # @param body 
+  # @param [Hash] opts the optional parameters
+  # @option opts [Boolean] :disable_hostname_check Bool to disable hostname check on add-member
+  # @return [DeviceapiGroupsResponseV1]
+  describe 'entities_perform_action test' do
+    it 'should work' do
+      # assertion here. ref: https://rspec.info/features/3-12/rspec-expectations/built-in-matchers/
+    end
+  end
+
+  # unit tests for get_device_details
+  # Deprecated: Please use new GET or POST /devices/entities/devices/v2 endpoints.  This endpoint will be removed on or sometime after February 9, 2023.  Get details on one or more hosts by providing agent IDs (AID). You can get a host&#39;s agent IDs (AIDs) from the /devices/queries/devices/v1 endpoint, the Falcon console or the Streaming API
+  # @param ids The host agentIDs used to get details on
+  # @param [Hash] opts the optional parameters
+  # @return [DeviceapiDeviceDetailsResponseSwagger]
+  describe 'get_device_details test' do
+    it 'should work' do
+      # assertion here. ref: https://rspec.info/features/3-12/rspec-expectations/built-in-matchers/
+    end
+  end
+
+  # unit tests for get_device_details_v2
+  # Get details on one or more hosts by providing host IDs as a query parameter.  Supports up to a maximum 100 IDs.
+  # @param ids The host agentIDs used to get details on
+  # @param [Hash] opts the optional parameters
+  # @return [DeviceapiDeviceDetailsResponseSwagger]
+  describe 'get_device_details_v2 test' do
+    it 'should work' do
+      # assertion here. ref: https://rspec.info/features/3-12/rspec-expectations/built-in-matchers/
+    end
+  end
+
+  # unit tests for get_online_state_v1
+  # Get the online status for one or more hosts by specifying each host’s unique ID. Successful requests return an HTTP 200 response and the status for each host identified by a &#x60;state&#x60; of &#x60;online&#x60;, &#x60;offline&#x60;, or &#x60;unknown&#x60; for each host, identified by host &#x60;id&#x60;.  Make a &#x60;GET&#x60; request to &#x60;/devices/queries/devices/v1&#x60; to get a list of host IDs.
+  # @param ids The unique ID of the host to get the online status of.
+  # @param [Hash] opts the optional parameters
+  # @return [StateOnlineStateRespV1]
+  describe 'get_online_state_v1 test' do
+    it 'should work' do
+      # assertion here. ref: https://rspec.info/features/3-12/rspec-expectations/built-in-matchers/
+    end
+  end
+
+  # unit tests for perform_action_v2
+  # Take various actions on the hosts in your environment. Contain or lift containment on a host. Delete or restore a host.
+  # @param action_name Specify one of these actions:  - &#x60;contain&#x60; - This action contains the host, which stops any network communications to locations other than the CrowdStrike cloud and IPs specified in your [containment policy](https://falcon.crowdstrike.com/support/documentation/11/getting-started-guide#containmentpolicy) - &#x60;lift_containment&#x60;: This action lifts containment on the host, which returns its network communications to normal - &#x60;hide_host&#x60;: This action will delete a host. After the host is deleted, no new detections for that host will be reported via UI or APIs - &#x60;unhide_host&#x60;: This action will restore a host. Detection reporting will resume after the host is restored
+  # @param body The host agent ID (AID) of the host you want to contain. Get an agent ID from a detection, the Falcon console, or the Streaming API.  Provide the ID in JSON format with the key &#x60;ids&#x60; and the value in square brackets, such as:   &#x60;\&quot;ids\&quot;: [\&quot;123456789\&quot;]&#x60;
+  # @param [Hash] opts the optional parameters
+  # @return [MsaReplyAffectedEntities]
+  describe 'perform_action_v2 test' do
+    it 'should work' do
+      # assertion here. ref: https://rspec.info/features/3-12/rspec-expectations/built-in-matchers/
+    end
+  end
+
+  # unit tests for post_device_details_v2
+  # Get details on one or more hosts by providing host IDs in a POST body.  Supports up to a maximum 5000 IDs.
+  # @param body 
+  # @param [Hash] opts the optional parameters
+  # @return [DeviceapiDeviceDetailsResponseSwagger]
+  describe 'post_device_details_v2 test' do
+    it 'should work' do
+      # assertion here. ref: https://rspec.info/features/3-12/rspec-expectations/built-in-matchers/
+    end
+  end
+
+  # unit tests for query_device_login_history
+  # Retrieve details about recent login sessions for a set of devices.
+  # @param body 
+  # @param [Hash] opts the optional parameters
+  # @return [DeviceapiLoginHistoryResponseV1]
+  describe 'query_device_login_history test' do
+    it 'should work' do
+      # assertion here. ref: https://rspec.info/features/3-12/rspec-expectations/built-in-matchers/
+    end
+  end
+
+  # unit tests for query_devices_by_filter
+  # Search for hosts in your environment by platform, hostname, IP, and other criteria.
+  # @param [Hash] opts the optional parameters
+  # @option opts [Integer] :offset The offset to start retrieving records from
+  # @option opts [Integer] :limit The maximum records to return. [1-5000]
+  # @option opts [String] :sort The property to sort by (e.g. status.desc or hostname.asc)
+  # @option opts [String] :filter The filter expression that should be used to limit the results
+  # @return [MsaQueryResponse]
+  describe 'query_devices_by_filter test' do
+    it 'should work' do
+      # assertion here. ref: https://rspec.info/features/3-12/rspec-expectations/built-in-matchers/
+    end
+  end
+
+  # unit tests for query_devices_by_filter_scroll
+  # Search for hosts in your environment by platform, hostname, IP, and other criteria with continuous pagination capability (based on offset pointer which expires after 2 minutes with no maximum limit)
+  # @param [Hash] opts the optional parameters
+  # @option opts [String] :offset The offset to page from, for the next result set
+  # @option opts [Integer] :limit The maximum records to return. [1-5000]
+  # @option opts [String] :sort The property to sort by (e.g. status.desc or hostname.asc)
+  # @option opts [String] :filter The filter expression that should be used to limit the results
+  # @return [DeviceapiDeviceResponse]
+  describe 'query_devices_by_filter_scroll test' do
+    it 'should work' do
+      # assertion here. ref: https://rspec.info/features/3-12/rspec-expectations/built-in-matchers/
+    end
+  end
+
+  # unit tests for query_get_network_address_history_v1
+  # Retrieve history of IP and MAC addresses of devices.
+  # @param body 
+  # @param [Hash] opts the optional parameters
+  # @return [DeviceapiNetworkAddressHistoryResponseV1]
+  describe 'query_get_network_address_history_v1 test' do
+    it 'should work' do
+      # assertion here. ref: https://rspec.info/features/3-12/rspec-expectations/built-in-matchers/
+    end
+  end
+
+  # unit tests for query_hidden_devices
+  # Retrieve hidden hosts that match the provided filter criteria.
+  # @param [Hash] opts the optional parameters
+  # @option opts [Integer] :offset The offset to start retrieving records from
+  # @option opts [Integer] :limit The maximum records to return. [1-5000]
+  # @option opts [String] :sort The property to sort by (e.g. status.desc or hostname.asc)
+  # @option opts [String] :filter The filter expression that should be used to limit the results
+  # @return [MsaQueryResponse]
+  describe 'query_hidden_devices test' do
+    it 'should work' do
+      # assertion here. ref: https://rspec.info/features/3-12/rspec-expectations/built-in-matchers/
+    end
+  end
+
+  # unit tests for update_device_tags
+  # Append or remove one or more Falcon Grouping Tags on one or more hosts.  Tags must be of the form FalconGroupingTags/
+  # @param body 
+  # @param [Hash] opts the optional parameters
+  # @return [DeviceapiUpdateDeviceTagsSwaggerV1]
+  describe 'update_device_tags test' do
+    it 'should work' do
+      # assertion here. ref: https://rspec.info/features/3-12/rspec-expectations/built-in-matchers/
+    end
+  end
+
+end

data/spec/api/identity_protection_api_spec.rb

@@ -0,0 +1,68 @@
+=begin
+Crimson Falcon - Ruby Client SDK
+
+Code auto-generated by OpenAPI Generator; DO NOT EDIT.
+
+This is free and unencumbered software released into the public domain.
+
+Anyone is free to copy, modify, publish, use, compile, sell, or
+distribute this software, either in source code form or as a compiled
+binary, for any purpose, commercial or non-commercial, and by any
+means.
+
+In jurisdictions that recognize copyright laws, the author or authors
+of this software dedicate any and all copyright interest in the
+software to the public domain. We make this dedication for the benefit
+of the public at large and to the detriment of our heirs and
+successors. We intend this dedication to be an overt act of
+relinquishment in perpetuity of all present and future rights to this
+software under copyright law.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
+EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
+MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.
+IN NO EVENT SHALL THE AUTHORS BE LIABLE FOR ANY CLAIM, DAMAGES OR
+OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE,
+ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR
+OTHER DEALINGS IN THE SOFTWARE.
+
+For more information, please refer to <https://unlicense.org>
+
+CrowdStrike Swagger API Version: 2023-05-30T23:10:32Z
+
+=end
+
+require 'spec_helper'
+require 'json'
+
+# Unit tests for Falcon::IdentityProtectionApi
+# Automatically generated by openapi-generator (https://openapi-generator.tech)
+# Please update as you see appropriate
+describe 'IdentityProtectionApi' do
+  before do
+    # run before each test
+    @api_instance = Falcon::IdentityProtectionApi.new
+  end
+
+  after do
+    # run after each test
+  end
+
+  describe 'test an instance of IdentityProtectionApi' do
+    it 'should create an instance of IdentityProtectionApi' do
+      expect(@api_instance).to be_instance_of(Falcon::IdentityProtectionApi)
+    end
+  end
+
+  # unit tests for api_preempt_proxy_post_graphql
+  # Identity Protection GraphQL API. Allows to retrieve entities, timeline activities, identity-based incidents and security assessment. Allows to perform actions on entities and identity-based incidents.
+  # @param authorization Authorization Header
+  # @param [Hash] opts the optional parameters
+  # @return [nil]
+  describe 'api_preempt_proxy_post_graphql test' do
+    it 'should work' do
+      # assertion here. ref: https://rspec.info/features/3-12/rspec-expectations/built-in-matchers/
+    end
+  end
+
+end

data/spec/api/incidents_api_spec.rb

@@ -0,0 +1,134 @@
+=begin
+Crimson Falcon - Ruby Client SDK
+
+Code auto-generated by OpenAPI Generator; DO NOT EDIT.
+
+This is free and unencumbered software released into the public domain.
+
+Anyone is free to copy, modify, publish, use, compile, sell, or
+distribute this software, either in source code form or as a compiled
+binary, for any purpose, commercial or non-commercial, and by any
+means.
+
+In jurisdictions that recognize copyright laws, the author or authors
+of this software dedicate any and all copyright interest in the
+software to the public domain. We make this dedication for the benefit
+of the public at large and to the detriment of our heirs and
+successors. We intend this dedication to be an overt act of
+relinquishment in perpetuity of all present and future rights to this
+software under copyright law.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
+EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
+MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.
+IN NO EVENT SHALL THE AUTHORS BE LIABLE FOR ANY CLAIM, DAMAGES OR
+OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE,
+ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR
+OTHER DEALINGS IN THE SOFTWARE.
+
+For more information, please refer to <https://unlicense.org>
+
+CrowdStrike Swagger API Version: 2023-05-30T23:10:32Z
+
+=end
+
+require 'spec_helper'
+require 'json'
+
+# Unit tests for Falcon::IncidentsApi
+# Automatically generated by openapi-generator (https://openapi-generator.tech)
+# Please update as you see appropriate
+describe 'IncidentsApi' do
+  before do
+    # run before each test
+    @api_instance = Falcon::IncidentsApi.new
+  end
+
+  after do
+    # run after each test
+  end
+
+  describe 'test an instance of IncidentsApi' do
+    it 'should create an instance of IncidentsApi' do
+      expect(@api_instance).to be_instance_of(Falcon::IncidentsApi)
+    end
+  end
+
+  # unit tests for crowd_score
+  # Query environment wide CrowdScore and return the entity data
+  # @param [Hash] opts the optional parameters
+  # @option opts [String] :filter Optional filter and sort criteria in the form of an FQL query. For more information about FQL queries, see [our FQL documentation in Falcon](https://falcon.crowdstrike.com/support/documentation/45/falcon-query-language-feature-guide).
+  # @option opts [Integer] :offset Starting index of overall result set from which to return ids.
+  # @option opts [Integer] :limit The maximum records to return. [1-2500]
+  # @option opts [String] :sort The property to sort on, followed by a dot (.), followed by the sort direction, either \&quot;asc\&quot; or \&quot;desc\&quot;.
+  # @return [DomainMsaEnvironmentScoreResponse]
+  describe 'crowd_score test' do
+    it 'should work' do
+      # assertion here. ref: https://rspec.info/features/3-12/rspec-expectations/built-in-matchers/
+    end
+  end
+
+  # unit tests for get_behaviors
+  # Get details on behaviors by providing behavior IDs
+  # @param body 
+  # @param [Hash] opts the optional parameters
+  # @return [DomainMsaExternalBehaviorResponse]
+  describe 'get_behaviors test' do
+    it 'should work' do
+      # assertion here. ref: https://rspec.info/features/3-12/rspec-expectations/built-in-matchers/
+    end
+  end
+
+  # unit tests for get_incidents
+  # Get details on incidents by providing incident IDs
+  # @param body 
+  # @param [Hash] opts the optional parameters
+  # @return [DomainMsaExternalIncidentResponse]
+  describe 'get_incidents test' do
+    it 'should work' do
+      # assertion here. ref: https://rspec.info/features/3-12/rspec-expectations/built-in-matchers/
+    end
+  end
+
+  # unit tests for perform_incident_action
+  # Perform a set of actions on one or more incidents, such as adding tags or comments or updating the incident name or description
+  # @param body Incident Update request body containing minimum 1 and maximum 5000 Incident ID(s) and action param(s) to be performed action against.
+  # @param [Hash] opts the optional parameters
+  # @option opts [Boolean] :update_detects If true, update assigned-to-uuid and or status of detections associated with the incident(s). Defaults to false
+  # @option opts [Boolean] :overwrite_detects If true and update-detects is true, the assigned-to-uuid or status for ALL detections associated with the incident(s) will be overwritten. If false, only detects that have default values for assigned-to-uuid and/or status will be updated. Defaults to false. Ignored if &#39;update-detects&#39; is missing or false.
+  # @return [DomainMsaIncidentPerformActionResponse]
+  describe 'perform_incident_action test' do
+    it 'should work' do
+      # assertion here. ref: https://rspec.info/features/3-12/rspec-expectations/built-in-matchers/
+    end
+  end
+
+  # unit tests for query_behaviors
+  # Search for behaviors by providing an FQL filter, sorting, and paging details
+  # @param [Hash] opts the optional parameters
+  # @option opts [String] :filter Optional filter and sort criteria in the form of an FQL query. For more information about FQL queries, see [our FQL documentation in Falcon](https://falcon.crowdstrike.com/support/documentation/45/falcon-query-language-feature-guide).
+  # @option opts [Integer] :offset Starting index of overall result set from which to return ids.
+  # @option opts [Integer] :limit The maximum records to return. [1-500]
+  # @option opts [String] :sort The property to sort on, followed by a dot (.), followed by the sort direction, either \&quot;asc\&quot; or \&quot;desc\&quot;.
+  # @return [MsaQueryResponse]
+  describe 'query_behaviors test' do
+    it 'should work' do
+      # assertion here. ref: https://rspec.info/features/3-12/rspec-expectations/built-in-matchers/
+    end
+  end
+
+  # unit tests for query_incidents
+  # Search for incidents by providing an FQL filter, sorting, and paging details
+  # @param [Hash] opts the optional parameters
+  # @option opts [String] :sort The property to sort on, followed by a dot (.), followed by the sort direction, either \&quot;asc\&quot; or \&quot;desc\&quot;.
+  # @option opts [String] :filter Optional filter and sort criteria in the form of an FQL query. For more information about FQL queries, see [our FQL documentation in Falcon](https://falcon.crowdstrike.com/support/documentation/45/falcon-query-language-feature-guide).
+  # @option opts [Integer] :offset Starting index of overall result set from which to return ids.
+  # @option opts [Integer] :limit The maximum records to return. [1-500]
+  # @return [DomainMsaIncidentQueryResponse]
+  describe 'query_incidents test' do
+    it 'should work' do
+      # assertion here. ref: https://rspec.info/features/3-12/rspec-expectations/built-in-matchers/
+    end
+  end
+
+end