crimson-falcon 0.3.0 → 0.4.0

data/spec/api/real_time_response_audit_api_spec.rb

@@ -0,0 +1,67 @@
+=begin
+Crimson Falcon - Ruby Client SDK
+
+Code auto-generated by OpenAPI Generator; DO NOT EDIT.
+
+MIT License
+
+Copyright (c) 2023 Crowdstrike
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+
+=end
+
+require 'spec_helper'
+require 'json'
+
+# Unit tests for Falcon::RealTimeResponseAuditApi
+# Automatically generated by openapi-generator (https://openapi-generator.tech)
+# Please update as you see appropriate
+describe 'RealTimeResponseAuditApi' do
+  before do
+    # run before each test
+    @api_instance = Falcon::RealTimeResponseAuditApi.new
+  end
+
+  after do
+    # run after each test
+  end
+
+  describe 'test an instance of RealTimeResponseAuditApi' do
+    it 'should create an instance of RealTimeResponseAuditApi' do
+      expect(@api_instance).to be_instance_of(Falcon::RealTimeResponseAuditApi)
+    end
+  end
+
+  # unit tests for r_tr_audit_sessions
+  # Get all the RTR sessions created for a customer in a specified duration
+  # @param [Hash] opts the optional parameters
+  # @option opts [String] :filter Optional filter criteria in the form of an FQL query. For more information about FQL queries, see our [FQL documentation in Falcon](https://falcon.crowdstrike.com/support/documentation/45/falcon-query-language-feature-guide).
+  # @option opts [String] :sort how to sort the session IDs. e.g. sort=created_at|desc will sort the results based on createdAt in descending order
+  # @option opts [String] :limit number of sessions to be returned
+  # @option opts [String] :offset offset value to be used for paginated results
+  # @option opts [Boolean] :with_command_info get sessions with command info included; by default sessions are returned without command info which include cloud_request_ids and logs fields
+  # @return [DomainSessionResponseWrapper]
+  describe 'r_tr_audit_sessions test' do
+    it 'should work' do
+      # assertion here. ref: https://rspec.info/features/3-12/rspec-expectations/built-in-matchers/
+    end
+  end
+
+end

data/spec/api/recon_api_spec.rb

@@ -50,7 +50,7 @@ describe 'ReconApi' do
   end
 
   # unit tests for aggregate_notifications_exposed_data_records_v1
-  # Get notification exposed data record aggregates as specified via JSON in request body. The valid aggregation fields are: [cid notification_id created_date rule.id rule.name rule.topic source_category site author file.name]
+  # Get notification exposed data record aggregates as specified via JSON in request body. The valid aggregation fields are: [cid notification_id created_date rule.id rule.name rule.topic source_category site author file.name credential_status bot.operating_system.hardware_id bot.bot_id]
   # @param body
   # @param [Hash] opts the optional parameters
   # @return [DomainAggregatesResponse]
@@ -280,7 +280,7 @@ describe 'ReconApi' do
   # @option opts [Integer] :offset Starting index of overall result set from which to return ids.
   # @option opts [Integer] :limit Number of IDs to return. Offset + limit should NOT be above 10K.
   # @option opts [String] :sort Possible order by fields: created_date, updated_date. Ex: 'updated_date|desc'.
-  # @option opts [String] :filter FQL query to filter notifications by. Possible filter properties are: [id cid user_uuid created_date exposure_date rule.id rule.name rule.topic notification_id source_category site site_id author author_id user_id user_name credentials_url credentials_domain credentials_ip email domain hash_type display_name full_name user_ip phone_number company job_position file.name file.complete_data_set file.download_urls location.postal_code location.city location.state location.federal_district location.federal_admin_region location.country_code social.twitter_id social.facebook_id social.vk_id social.vk_token social.aim_id social.icq_id social.msn_id social.instagram_id social.skype_id financial.credit_card financial.bank_account financial.crypto_currency_addresses login_id _all]
+  # @option opts [String] :filter FQL query to filter notifications by. Possible filter properties are: [id cid user_uuid created_date exposure_date rule.id rule.name rule.topic notification_id source_category site site_id author author_id user_id user_name credentials_url credentials_domain credentials_ip email domain hash_type display_name full_name user_ip phone_number company job_position file.name file.complete_data_set file.download_urls location.postal_code location.city location.state location.federal_district location.federal_admin_region location.country_code social.twitter_id social.facebook_id social.vk_id social.vk_token social.aim_id social.icq_id social.msn_id social.instagram_id social.skype_id financial.credit_card financial.bank_account financial.crypto_currency_addresses login_id credential_status _all bot.operating_system.hardware_id bot.bot_id]
   # @option opts [String] :q Free text search across all indexed fields.
   # @return [DomainQueryResponse]
   describe 'query_notifications_exposed_data_records_v1 test' do
@@ -295,7 +295,7 @@ describe 'ReconApi' do
   # @option opts [Integer] :offset Starting index of overall result set from which to return IDs.
   # @option opts [Integer] :limit Number of IDs to return. Offset + limit should NOT be above 10K.
   # @option opts [String] :sort Possible order by fields: `created_date`, `updated_date`. Ex: `updated_date|desc`.
-  # @option opts [String] :filter FQL query to filter notifications by. Possible filter properties are: [id cid user_uuid status rule_id rule_name rule_topic rule_priority item_type item_site typosquatting.id typosquatting.unicode_format typosquatting.punycode_format typosquatting.parent_domain.id typosquatting.parent_domain.unicode_format typosquatting.parent_domain.punycode_format typosquatting.base_domain.id typosquatting.base_domain.unicode_format typosquatting.base_domain.punycode_format typosquatting.base_domain.is_registered typosquatting.base_domain.whois.registrar.name typosquatting.base_domain.whois.registrar.status typosquatting.base_domain.whois.registrant.email typosquatting.base_domain.whois.registrant.name typosquatting.base_domain.whois.registrant.org typosquatting.base_domain.whois.name_servers created_date updated_date assigned_to_uuid]
+  # @option opts [String] :filter FQL query to filter notifications by. Possible filter properties are: [id cid user_uuid status rule_id rule_name rule_topic rule_priority item_type item_site typosquatting.id typosquatting.unicode_format typosquatting.punycode_format typosquatting.parent_domain.id typosquatting.parent_domain.unicode_format typosquatting.parent_domain.punycode_format typosquatting.base_domain.id typosquatting.base_domain.unicode_format typosquatting.base_domain.punycode_format typosquatting.base_domain.is_registered typosquatting.base_domain.whois.registrar.name typosquatting.base_domain.whois.registrar.status typosquatting.base_domain.whois.registrant.email typosquatting.base_domain.whois.registrant.name typosquatting.base_domain.whois.registrant.org typosquatting.base_domain.whois.name_servers created_date updated_date assigned_to_uuid breach_summary.credential_statuses breach_summary.is_retroactively_deduped]
   # @option opts [String] :q Free text search across all indexed fields.
   # @return [DomainQueryResponse]
   describe 'query_notifications_v1 test' do

data/spec/api/runtime_detections_api_spec.rb

@@ -0,0 +1,66 @@
+=begin
+Crimson Falcon - Ruby Client SDK
+
+Code auto-generated by OpenAPI Generator; DO NOT EDIT.
+
+MIT License
+
+Copyright (c) 2023 Crowdstrike
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+
+=end
+
+require 'spec_helper'
+require 'json'
+
+# Unit tests for Falcon::RuntimeDetectionsApi
+# Automatically generated by openapi-generator (https://openapi-generator.tech)
+# Please update as you see appropriate
+describe 'RuntimeDetectionsApi' do
+  before do
+    # run before each test
+    @api_instance = Falcon::RuntimeDetectionsApi.new
+  end
+
+  after do
+    # run after each test
+  end
+
+  describe 'test an instance of RuntimeDetectionsApi' do
+    it 'should create an instance of RuntimeDetectionsApi' do
+      expect(@api_instance).to be_instance_of(Falcon::RuntimeDetectionsApi)
+    end
+  end
+
+  # unit tests for get_runtime_detections_combined_v2
+  # Retrieve container runtime detections by the provided search criteria
+  # @param [Hash] opts the optional parameters
+  # @option opts [String] :filter Filter Container Runtime Detections using a query in Falcon Query Language (FQL). Supported filters:  action_taken,aid,cid,cloud,cluster_name,command_line,computer_name,container_id,detect_timestamp,detection_description,detection_id,file_name,file_path,host_id,host_type,image_id,name,namespace,pod_name,severity,tactic
+  # @option opts [Integer] :limit The upper-bound on the number of records to retrieve.
+  # @option opts [Integer] :offset The offset from where to begin.
+  # @option opts [String] :sort The field to sort the records on.
+  # @return [RuntimedetectionsDetectionsEntityResponse]
+  describe 'get_runtime_detections_combined_v2 test' do
+    it 'should work' do
+      # assertion here. ref: https://rspec.info/features/3-12/rspec-expectations/built-in-matchers/
+    end
+  end
+
+end

data/spec/api/{vulnerabilities_evaluation_logic_api_spec.rb → spotlight_evaluation_logic_api_spec.rb}

@@ -30,22 +30,22 @@ SOFTWARE.
 require 'spec_helper'
 require 'json'
 
-# Unit tests for Falcon::VulnerabilitiesEvaluationLogicApi
+# Unit tests for Falcon::SpotlightEvaluationLogicApi
 # Automatically generated by openapi-generator (https://openapi-generator.tech)
 # Please update as you see appropriate
-describe 'VulnerabilitiesEvaluationLogicApi' do
+describe 'SpotlightEvaluationLogicApi' do
   before do
     # run before each test
-    @api_instance = Falcon::VulnerabilitiesEvaluationLogicApi.new
+    @api_instance = Falcon::SpotlightEvaluationLogicApi.new
   end
 
   after do
     # run after each test
   end
 
-  describe 'test an instance of VulnerabilitiesEvaluationLogicApi' do
-    it 'should create an instance of VulnerabilitiesEvaluationLogicApi' do
-      expect(@api_instance).to be_instance_of(Falcon::VulnerabilitiesEvaluationLogicApi)
+  describe 'test an instance of SpotlightEvaluationLogicApi' do
+    it 'should create an instance of SpotlightEvaluationLogicApi' do
+      expect(@api_instance).to be_instance_of(Falcon::SpotlightEvaluationLogicApi)
     end
   end
 

data/spec/api/{vulnerabilities_api_spec.rb → spotlight_vulnerabilities_api_spec.rb}

@@ -30,28 +30,28 @@ SOFTWARE.
 require 'spec_helper'
 require 'json'
 
-# Unit tests for Falcon::VulnerabilitiesApi
+# Unit tests for Falcon::SpotlightVulnerabilitiesApi
 # Automatically generated by openapi-generator (https://openapi-generator.tech)
 # Please update as you see appropriate
-describe 'VulnerabilitiesApi' do
+describe 'SpotlightVulnerabilitiesApi' do
   before do
     # run before each test
-    @api_instance = Falcon::VulnerabilitiesApi.new
+    @api_instance = Falcon::SpotlightVulnerabilitiesApi.new
   end
 
   after do
     # run after each test
   end
 
-  describe 'test an instance of VulnerabilitiesApi' do
-    it 'should create an instance of VulnerabilitiesApi' do
-      expect(@api_instance).to be_instance_of(Falcon::VulnerabilitiesApi)
+  describe 'test an instance of SpotlightVulnerabilitiesApi' do
+    it 'should create an instance of SpotlightVulnerabilitiesApi' do
+      expect(@api_instance).to be_instance_of(Falcon::SpotlightVulnerabilitiesApi)
     end
   end
 
   # unit tests for combined_query_vulnerabilities
   # Search for Vulnerabilities in your environment by providing an FQL filter and paging details. Returns a set of Vulnerability entities which match the filter criteria
-  # @param filter Filter items using a query in Falcon Query Language (FQL). Wildcards * and empty filter values are unsupported.    Available filter fields that supports match (~): N/A    Available filter fields that supports exact match: aid, cid, last_seen_within, status, cve.id, cve.is_cisa_kev, cve.remediation_level, cve.cps_rating, cve.exprt_rating, cve.exploit_status_to_include, cve.severity, host_info.asset_criticality, host_info.asset_roles, host_info.internet_exposure, host_info.tags, host_info.groups, host_info.product_type_desc, host_info.platform_name, suppression_info.is_suppressed, suppression_info.reason    Available filter fields that supports wildcard (*): N/A    Available filter fields that supports range comparisons (>, <, >=, <=): created_timestamp, closed_timestamp, updated_timestamp
+  # @param filter Filter items using a query in Falcon Query Language (FQL). Wildcards * and empty filter values are unsupported.    Available filter fields that supports match (~): N/A    Available filter fields that supports exact match: aid, cid, last_seen_within, status, cve.id, cve.is_cisa_kev, cve.remediation_level, cve.cps_rating, cve.exprt_rating, cve.exploit_status_to_include, cve.severity, cve.types, host_info.asset_criticality, host_info.asset_roles, host_info.internet_exposure, host_info.tags, host_info.groups, host_info.product_type_desc, host_info.platform_name, suppression_info.is_suppressed, suppression_info.reason    Available filter fields that supports wildcard (*): N/A    Available filter fields that supports range comparisons (>, <, >=, <=): created_timestamp, closed_timestamp, updated_timestamp
   # @param [Hash] opts the optional parameters
   # @option opts [String] :after A pagination token used with the `limit` parameter to manage pagination of results. On your first request, don't provide an `after` token. On subsequent requests, provide the `after` token from the previous response to continue from that place in the results.
   # @option opts [Integer] :limit The number of items to return in this response (default: 100, max: 5000). Use with the after parameter to manage pagination of results.
@@ -88,7 +88,7 @@ describe 'VulnerabilitiesApi' do
 
   # unit tests for query_vulnerabilities
   # Search for Vulnerabilities in your environment by providing an FQL filter and paging details. Returns a set of Vulnerability IDs which match the filter criteria
-  # @param filter Filter items using a query in Falcon Query Language (FQL). Wildcards * and empty filter values are unsupported.    Available filter fields that supports match (~): N/A    Available filter fields that supports exact match: aid, cid, last_seen_within, status, cve.id, cve.is_cisa_kev, cve.remediation_level, cve.cps_rating, cve.exprt_rating, cve.exploit_status_to_include, cve.severity, host_info.asset_criticality, host_info.asset_roles, host_info.internet_exposure, host_info.tags, host_info.groups, host_info.product_type_desc, host_info.platform_name, suppression_info.is_suppressed, suppression_info.reason    Available filter fields that supports wildcard (*): N/A    Available filter fields that supports range comparisons (>, <, >=, <=): created_timestamp, closed_timestamp, updated_timestamp
+  # @param filter Filter items using a query in Falcon Query Language (FQL). Wildcards * and empty filter values are unsupported.    Available filter fields that supports match (~): N/A    Available filter fields that supports exact match: aid, cid, last_seen_within, status, cve.id, cve.is_cisa_kev, cve.remediation_level, cve.cps_rating, cve.exprt_rating, cve.exploit_status_to_include, cve.severity, cve.types, host_info.asset_criticality, host_info.asset_roles, host_info.internet_exposure, host_info.tags, host_info.groups, host_info.product_type_desc, host_info.platform_name, suppression_info.is_suppressed, suppression_info.reason    Available filter fields that supports wildcard (*): N/A    Available filter fields that supports range comparisons (>, <, >=, <=): created_timestamp, closed_timestamp, updated_timestamp
   # @param [Hash] opts the optional parameters
   # @option opts [String] :after A pagination token used with the `limit` parameter to manage pagination of results. On your first request, don't provide an `after` token. On subsequent requests, provide the `after` token from the previous response to continue from that place in the results.
   # @option opts [Integer] :limit The number of items to return in this response (default: 100, max: 400). Use with the after parameter to manage pagination of results.

data/spec/api/unidentified_containers_api_spec.rb

@@ -0,0 +1,88 @@
+=begin
+Crimson Falcon - Ruby Client SDK
+
+Code auto-generated by OpenAPI Generator; DO NOT EDIT.
+
+MIT License
+
+Copyright (c) 2023 Crowdstrike
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+
+=end
+
+require 'spec_helper'
+require 'json'
+
+# Unit tests for Falcon::UnidentifiedContainersApi
+# Automatically generated by openapi-generator (https://openapi-generator.tech)
+# Please update as you see appropriate
+describe 'UnidentifiedContainersApi' do
+  before do
+    # run before each test
+    @api_instance = Falcon::UnidentifiedContainersApi.new
+  end
+
+  after do
+    # run after each test
+  end
+
+  describe 'test an instance of UnidentifiedContainersApi' do
+    it 'should create an instance of UnidentifiedContainersApi' do
+      expect(@api_instance).to be_instance_of(Falcon::UnidentifiedContainersApi)
+    end
+  end
+
+  # unit tests for read_unidentified_containers_by_date_range_count
+  # Returns the count of Unidentified Containers over the last 7 days
+  # @param [Hash] opts the optional parameters
+  # @option opts [String] :filter Filter Unidentified Containers using a query in Falcon Query Language (FQL). Supported filters:  assessed_images_count,cid,cluster_name,containers_impacted_count,detections_count,image_assessment_detections_count,last_seen,namespace,node_name,severity,unassessed_images_count,visible_to_k8s
+  # @return [ModelsAggregateValuesByFieldResponse]
+  describe 'read_unidentified_containers_by_date_range_count test' do
+    it 'should work' do
+      # assertion here. ref: https://rspec.info/features/3-12/rspec-expectations/built-in-matchers/
+    end
+  end
+
+  # unit tests for read_unidentified_containers_count
+  # Returns the total count of Unidentified Containers over a time period
+  # @param [Hash] opts the optional parameters
+  # @option opts [String] :filter Filter Unidentified Containers using a query in Falcon Query Language (FQL). Supported filters:  assessed_images_count,cid,cluster_name,containers_impacted_count,detections_count,image_assessment_detections_count,last_seen,namespace,node_name,severity,unassessed_images_count,visible_to_k8s
+  # @return [UnidentifiedcontainersUnidentifiedContainersCountValue]
+  describe 'read_unidentified_containers_count test' do
+    it 'should work' do
+      # assertion here. ref: https://rspec.info/features/3-12/rspec-expectations/built-in-matchers/
+    end
+  end
+
+  # unit tests for search_and_read_unidentified_containers
+  # Search Unidentified Containers by the provided search criteria
+  # @param [Hash] opts the optional parameters
+  # @option opts [String] :filter Search Unidentified Containers using a query in Falcon Query Language (FQL). Supported filters:  assessed_images_count,cid,cluster_name,containers_impacted_count,detections_count,image_assessment_detections_count,last_seen,namespace,node_name,severity,unassessed_images_count,visible_to_k8s
+  # @option opts [Integer] :limit The upper-bound on the number of records to retrieve.
+  # @option opts [Integer] :offset The offset from where to begin.
+  # @option opts [String] :sort The fields to sort the records on.
+  # @return [UnidentifiedcontainersUnidentifiedContainerAPIResponse]
+  describe 'search_and_read_unidentified_containers test' do
+    it 'should work' do
+      # assertion here. ref: https://rspec.info/features/3-12/rspec-expectations/built-in-matchers/
+    end
+  end
+
+end

data/spec/api/workflows_api_spec.rb

@@ -0,0 +1,224 @@
+=begin
+Crimson Falcon - Ruby Client SDK
+
+Code auto-generated by OpenAPI Generator; DO NOT EDIT.
+
+MIT License
+
+Copyright (c) 2023 Crowdstrike
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+
+=end
+
+require 'spec_helper'
+require 'json'
+
+# Unit tests for Falcon::WorkflowsApi
+# Automatically generated by openapi-generator (https://openapi-generator.tech)
+# Please update as you see appropriate
+describe 'WorkflowsApi' do
+  before do
+    # run before each test
+    @api_instance = Falcon::WorkflowsApi.new
+  end
+
+  after do
+    # run after each test
+  end
+
+  describe 'test an instance of WorkflowsApi' do
+    it 'should create an instance of WorkflowsApi' do
+      expect(@api_instance).to be_instance_of(Falcon::WorkflowsApi)
+    end
+  end
+
+  # unit tests for workflow_definitions_combined
+  # Search workflow definitions based on the provided filter
+  # @param [Hash] opts the optional parameters
+  # @option opts [String] :filter FQL query specifying filter parameters.
+  # @option opts [String] :offset Starting pagination offset of records to return.
+  # @option opts [Integer] :limit Maximum number of records to return.
+  # @option opts [String] :sort Sort items by providing a comma separated list of property and direction (eg name.desc,time.asc). If direction is omitted, defaults to descending.
+  # @return [DefinitionsDefinitionExternalResponse]
+  describe 'workflow_definitions_combined test' do
+    it 'should work' do
+      # assertion here. ref: https://rspec.info/features/3-12/rspec-expectations/built-in-matchers/
+    end
+  end
+
+  # unit tests for workflow_definitions_create
+  # Creates a workflow definition based on the provided model
+  # @param body
+  # @param [Hash] opts the optional parameters
+  # @option opts [Boolean] :validate_only When enabled, prevents saving workflow after validating
+  # @return [ApiResourceIDsResponse]
+  describe 'workflow_definitions_create test' do
+    it 'should work' do
+      # assertion here. ref: https://rspec.info/features/3-12/rspec-expectations/built-in-matchers/
+    end
+  end
+
+  # unit tests for workflow_definitions_export
+  # Exports a workflow definition for the given definition ID
+  # @param id ID of workflow definitions to return details for
+  # @param [Hash] opts the optional parameters
+  # @return [Array<Integer>]
+  describe 'workflow_definitions_export test' do
+    it 'should work' do
+      # assertion here. ref: https://rspec.info/features/3-12/rspec-expectations/built-in-matchers/
+    end
+  end
+
+  # unit tests for workflow_definitions_import
+  # Imports a workflow definition based on the provided model
+  # @param data_file A workflow definition in YAML format to import
+  # @param [Hash] opts the optional parameters
+  # @option opts [String] :name Workflow name to override
+  # @option opts [Boolean] :validate_only When enabled, prevents saving workflow after validating
+  # @return [DefinitionsDefinitionImportResponse]
+  describe 'workflow_definitions_import test' do
+    it 'should work' do
+      # assertion here. ref: https://rspec.info/features/3-12/rspec-expectations/built-in-matchers/
+    end
+  end
+
+  # unit tests for workflow_definitions_update
+  # Updates a workflow definition based on the provided model
+  # @param body
+  # @param [Hash] opts the optional parameters
+  # @option opts [Boolean] :validate_only When enabled, prevents saving workflow after validating
+  # @return [ApiResourceIDsResponse]
+  describe 'workflow_definitions_update test' do
+    it 'should work' do
+      # assertion here. ref: https://rspec.info/features/3-12/rspec-expectations/built-in-matchers/
+    end
+  end
+
+  # unit tests for workflow_execute
+  # Executes an on-demand Workflow, the body is JSON used to trigger the execution, the response the execution ID(s)
+  # @param body
+  # @param [Hash] opts the optional parameters
+  # @option opts [Array<String>] :execution_cid CID(s) to execute on. This can be a child if this is a flight control enabled definition. If unset the definition CID is used.
+  # @option opts [Array<String>] :definition_id Definition ID to execute, either a name or an ID can be specified.
+  # @option opts [String] :name Workflow name to execute, either a name or an ID can be specified.
+  # @option opts [String] :key Key used to help deduplicate executions, if unset a new UUID is used
+  # @option opts [Integer] :depth Used to record the execution depth to help limit execution loops when a workflow triggers another. The maximum depth is 4.
+  # @option opts [String] :source_event_url Used to record a URL to the source that led to triggering this workflow
+  # @return [ApiResourceIDsResponse]
+  describe 'workflow_execute test' do
+    it 'should work' do
+      # assertion here. ref: https://rspec.info/features/3-12/rspec-expectations/built-in-matchers/
+    end
+  end
+
+  # unit tests for workflow_execution_results
+  # Get execution result of a given execution
+  # @param ids workflow execution id to return results for.
+  # @param [Hash] opts the optional parameters
+  # @return [ApiExecutionResultsResponse]
+  describe 'workflow_execution_results test' do
+    it 'should work' do
+      # assertion here. ref: https://rspec.info/features/3-12/rspec-expectations/built-in-matchers/
+    end
+  end
+
+  # unit tests for workflow_executions_action
+  # Allows a user to resume/retry a failed workflow execution.
+  # @param action_name Specify one of these actions:  - &#x60;resume&#x60;: resume/retry the workflow execution(s) specified in ids
+  # @param body
+  # @param [Hash] opts the optional parameters
+  # @return [DefinitionsDefinitionEntitiesResponse]
+  describe 'workflow_executions_action test' do
+    it 'should work' do
+      # assertion here. ref: https://rspec.info/features/3-12/rspec-expectations/built-in-matchers/
+    end
+  end
+
+  # unit tests for workflow_executions_combined
+  # Search workflow executions based on the provided filter
+  # @param [Hash] opts the optional parameters
+  # @option opts [String] :filter FQL query specifying filter parameters.
+  # @option opts [String] :offset Starting pagination offset of records to return.
+  # @option opts [Integer] :limit Maximum number of records to return.
+  # @option opts [String] :sort Sort items by providing a comma separated list of property and direction (eg name.desc,time.asc). If direction is omitted, defaults to descending.
+  # @return [ApiExecutionResultsResponse]
+  describe 'workflow_executions_combined test' do
+    it 'should work' do
+      # assertion here. ref: https://rspec.info/features/3-12/rspec-expectations/built-in-matchers/
+    end
+  end
+
+  # unit tests for workflow_get_human_input_v1
+  # Gets one or more specific human inputs by their IDs.
+  # @param ids IDs of human inputs to read
+  # @param [Hash] opts the optional parameters
+  # @return [ModelUserInputReadResponse]
+  describe 'workflow_get_human_input_v1 test' do
+    it 'should work' do
+      # assertion here. ref: https://rspec.info/features/3-12/rspec-expectations/built-in-matchers/
+    end
+  end
+
+  # unit tests for workflow_system_definitions_de_provision
+  # Deprovisions a system definition that was previously provisioned on the target CID
+  # @param body
+  # @param [Hash] opts the optional parameters
+  # @return [ClientSystemDefinitionCreateResponse]
+  describe 'workflow_system_definitions_de_provision test' do
+    it 'should work' do
+      # assertion here. ref: https://rspec.info/features/3-12/rspec-expectations/built-in-matchers/
+    end
+  end
+
+  # unit tests for workflow_system_definitions_promote
+  # Promotes a version of a system definition for a customer. The customer must already have been provisioned. This allows the caller to apply an updated template version to a specific cid and expects all parameters to be supplied. If the template supports multi-instance the customer scope definition ID must be supplied to determine which customer workflow should be updated.
+  # @param body
+  # @param [Hash] opts the optional parameters
+  # @return [ClientSystemDefinitionCreateResponse]
+  describe 'workflow_system_definitions_promote test' do
+    it 'should work' do
+      # assertion here. ref: https://rspec.info/features/3-12/rspec-expectations/built-in-matchers/
+    end
+  end
+
+  # unit tests for workflow_system_definitions_provision
+  # Provisions a system definition onto the target CID by using the template and provided parameters
+  # @param body
+  # @param [Hash] opts the optional parameters
+  # @return [ClientSystemDefinitionCreateResponse]
+  describe 'workflow_system_definitions_provision test' do
+    it 'should work' do
+      # assertion here. ref: https://rspec.info/features/3-12/rspec-expectations/built-in-matchers/
+    end
+  end
+
+  # unit tests for workflow_update_human_input_v1
+  # Provides an input in response to a human input action. Depending on action configuration, one or more of Approve, Decline, and/or Escalate are permitted.
+  # @param id ID of human input to provide an input to
+  # @param body
+  # @param [Hash] opts the optional parameters
+  # @return [ApiResourceIDsResponse]
+  describe 'workflow_update_human_input_v1 test' do
+    it 'should work' do
+      # assertion here. ref: https://rspec.info/features/3-12/rspec-expectations/built-in-matchers/
+    end
+  end
+
+end

data/spec/models/alerts_container_alerts_count_value_spec.rb

@@ -0,0 +1,63 @@
+=begin
+Crimson Falcon - Ruby Client SDK
+
+Code auto-generated by OpenAPI Generator; DO NOT EDIT.
+
+MIT License
+
+Copyright (c) 2023 Crowdstrike
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+
+=end
+
+require 'spec_helper'
+require 'json'
+require 'date'
+
+# Unit tests for Falcon::AlertsContainerAlertsCountValue
+# Automatically generated by openapi-generator (https://openapi-generator.tech)
+# Please update as you see appropriate
+describe Falcon::AlertsContainerAlertsCountValue do
+  let(:instance) { Falcon::AlertsContainerAlertsCountValue.new }
+
+  describe 'test an instance of AlertsContainerAlertsCountValue' do
+    it 'should create an instance of AlertsContainerAlertsCountValue' do
+      expect(instance).to be_instance_of(Falcon::AlertsContainerAlertsCountValue)
+    end
+  end
+  describe 'test attribute "resources"' do
+    it 'should work' do
+      # assertion here. ref: https://rspec.info/features/3-12/rspec-expectations/built-in-matchers/
+    end
+  end
+
+  describe 'test attribute "errors"' do
+    it 'should work' do
+      # assertion here. ref: https://rspec.info/features/3-12/rspec-expectations/built-in-matchers/
+    end
+  end
+
+  describe 'test attribute "meta"' do
+    it 'should work' do
+      # assertion here. ref: https://rspec.info/features/3-12/rspec-expectations/built-in-matchers/
+    end
+  end
+
+end