crimson-falcon 1.0.1 → 1.2.0

data/spec/api/exposure_management_spec.rb

@@ -148,6 +148,17 @@ describe 'ExposureManagement' do
     end
   end
 
+  # unit tests for post_external_assets_inventory_v1
+  # Add external assets for external asset scanning.
+  # @param body Asset addition specification.
+  # @param [Hash] opts the optional parameters
+  # @return [InventoryapiUserExternalAssetCreateResponseV1]
+  describe 'post_external_assets_inventory_v1 test' do
+    it 'should work' do
+      # assertion here. ref: https://rspec.info/features/3-12/rspec-expectations/built-in-matchers/
+    end
+  end
+
   # unit tests for query_ecosystem_subsidiaries
   # Retrieves a list of IDs for ecosystem subsidiaries. Use these IDs with the /entities/ecosystem-subsidiaries/v1 endpoints.
   # @param [Hash] opts the optional parameters
@@ -177,4 +188,18 @@ describe 'ExposureManagement' do
     end
   end
 
+  # unit tests for query_external_assets_v2
+  # Get a list of external asset IDs that match the provided filter conditions. Use these IDs with the /entities/external-assets/v1 endpoint
+  # @param [Hash] opts the optional parameters
+  # @option opts [String] :after A pagination token used with the `limit` parameter to manage pagination of results. On your first request, don't provide an `after` token. On subsequent requests, provide the `after` token from the previous response to continue from that place in the results.
+  # @option opts [Integer] :limit number of IDs to return.
+  # @option opts [String] :sort Order by fields.
+  # @option opts [String] :filter Filter assets using an FQL query. Common filter options include:<ul><li>asset_type:'ip'</li><li>last_seen_timestamp:>'now-7d'</li></ul>    </br>Available filter fields that support exact match: asset_id, asset_type, confidence, connectivity_status, criticality, criticality_description, criticality_timestamp, criticality_username, data_providers, discovered_by, dns_domain.fqdn, dns_domain.isps, dns_domain.parent_domain, dns_domain.resolved_ips, dns_domain.services.applications.category, dns_domain.services.applications.cpe, dns_domain.services.applications.name, dns_domain.services.applications.vendor, dns_domain.services.applications.version, dns_domain.services.cloud_provider, dns_domain.services.cpes, dns_domain.services.hosting_provider, dns_domain.services.last_seen, dns_domain.services.platform_name, dns_domain.services.port, dns_domain.services.protocol, dns_domain.services.protocol_port, dns_domain.services.status, dns_domain.services.status_code, dns_domain.services.transport, dns_domain.type, first_seen, id, internet_exposure, ip.asn, ip.cloud_provider, ip.cloud_vm.description, ip.cloud_vm.instance_id, ip.cloud_vm.lifecycle, ip.cloud_vm.mac_address, ip.cloud_vm.owner_id, ip.cloud_vm.platform, ip.cloud_vm.private_ip, ip.cloud_vm.public_ip, ip.cloud_vm.region, ip.cloud_vm.security_groups, ip.cloud_vm.source, ip.cloud_vm.status, ip.fqdns, ip.ip_address, ip.isp, ip.location.area_code, ip.location.city, ip.location.country_code, ip.location.country_name, ip.location.postal_code, ip.location.region_code, ip.location.region_name, ip.location.timezone, ip.ptr, ip.aid, ip.services.applications.category, ip.services.applications.cpe, ip.services.applications.name, ip.services.applications.vendor, ip.services.applications.version, ip.services.cloud_provider, ip.services.cpes, ip.services.first_seen, ip.services.last_seen, ip.services.platform_name, ip.services.port, ip.services.protocol, ip.services.protocol_port, ip.services.status, ip.services.status_code, ip.services.transport, last_seen, manual, perimeter, subsidiaries.id, subsidiaries.name, triage.action, triage.assigned_to, triage.status, triage.updated_by, triage.updated_timestamp    </br>Available filter fields that supports wildcard (*): asset_id, asset_type, confidence, connectivity_status, criticality, criticality_username, data_providers, discovered_by, dns_domain.fqdn, dns_domain.isps, dns_domain.parent_domain, dns_domain.resolved_ips, dns_domain.services.applications.category, dns_domain.services.applications.cpe, dns_domain.services.applications.name, dns_domain.services.applications.vendor, dns_domain.services.applications.version, dns_domain.services.cloud_provider, dns_domain.services.cpes, dns_domain.services.hosting_provider, dns_domain.services.id, dns_domain.services.platform_name, dns_domain.services.port, dns_domain.services.protocol, dns_domain.services.protocol_port, dns_domain.services.status, dns_domain.services.status_code, dns_domain.services.transport, dns_domain.type, id, internet_exposure, ip.asn, ip.cloud_vm.instance_id, ip.cloud_vm.lifecycle, ip.cloud_vm.mac_address, ip.cloud_vm.owner_id, ip.cloud_vm.platform, ip.cloud_vm.private_ip, ip.cloud_vm.public_ip, ip.cloud_vm.region, ip.cloud_vm.security_groups, ip.cloud_vm.source, ip.cloud_vm.status, ip.fqdns, ip.ip_address, ip.isp, ip.location.area_code, ip.location.city, ip.location.country_code, ip.location.country_name, ip.location.postal_code, ip.location.region_code, ip.location.region_name, ip.location.timezone, ip.ptr, ip.aid, ip.services.applications.category, ip.services.applications.cpe, ip.services.applications.name, ip.services.applications.vendor, ip.services.applications.version, ip.services.cloud_provider, ip.services.cpes, ip.services.platform_name, ip.services.port, ip.services.protocol, ip.services.protocol_port, ip.services.status, ip.services.status_code, ip.services.transport, manual, perimeter, subsidiaries.id, subsidiaries.name, triage.action, triage.assigned_to, triage.status, triage.updated_by    </br>Available filter fields that supports in ([v1, v2]): asset_id, asset_type, confidence, connectivity_status, criticality, criticality_username, data_providers, discovered_by, dns_domain.fqdn, dns_domain.isps, dns_domain.parent_domain, dns_domain.services.applications.category, dns_domain.services.applications.cpe, dns_domain.services.applications.name, dns_domain.services.applications.vendor, dns_domain.services.applications.version, dns_domain.services.cloud_provider, dns_domain.services.cpes, dns_domain.services.id, dns_domain.services.platform_name, dns_domain.services.port, dns_domain.services.protocol, dns_domain.services.protocol_port, dns_domain.services.status, dns_domain.services.status_code, dns_domain.services.transport, dns_domain.type, id, internet_exposure, ip.asn, ip.cloud_vm.instance_id, ip.cloud_vm.lifecycle, ip.cloud_vm.mac_address, ip.cloud_vm.owner_id, ip.cloud_vm.platform, ip.cloud_vm.region, ip.cloud_vm.security_groups, ip.cloud_vm.source, ip.cloud_vm.status, ip.fqdns, ip.isp, ip.location.area_code, ip.location.city, ip.location.country_code, ip.location.country_name, ip.location.postal_code, ip.location.region_code, ip.location.region_name, ip.location.timezone, ip.ptr, ip.aid, ip.services.applications.category, ip.services.applications.cpe, ip.services.applications.name, ip.services.applications.vendor, ip.services.applications.version, ip.services.cloud_provider, ip.services.cpes, ip.services.platform_name, ip.services.port, ip.services.protocol, ip.services.protocol_port, ip.services.status, ip.services.status_code, ip.services.transport, manual, perimeter, subsidiaries.id, subsidiaries.name, triage.action, triage.assigned_to, triage.status, triage.updated_by    </br>Available filter fields that supports range comparisons (>, <, >=, <=): criticality_timestamp, dns_domain.resolved_ips, dns_domain.services.first_seen, dns_domain.services.last_seen, dns_domain.services.port, dns_domain.services.status_code, first_seen, ip.cloud_vm.private_ip, ip.cloud_vm.public_ip, ip.ip_address, ip.services.first_seen, ip.services.last_seen, ip.services.port, ip.services.status_code, last_seen, triage.updated_timestamp    </br>All filter fields and operations supports negation (!).
+  # @return [DomainDiscoverAPIResponse]
+  describe 'query_external_assets_v2 test' do
+    it 'should work' do
+      # assertion here. ref: https://rspec.info/features/3-12/rspec-expectations/built-in-matchers/
+    end
+  end
+
 end

data/spec/api/falcon_complete_dashboard_spec.rb

@@ -50,7 +50,7 @@ describe 'FalconCompleteDashboard' do
   end
 
   # unit tests for aggregate_alerts
-  # Retrieve aggregate alerts values based on the matched filter
+  # Retrieve aggregate epp alerts values based on the matched filter
   # @param body
   # @param [Hash] opts the optional parameters
   # @return [MsaAggregatesResponse]
@@ -197,7 +197,7 @@ describe 'FalconCompleteDashboard' do
   end
 
   # unit tests for query_alert_ids_by_filter
-  # Retrieve Alerts Ids that match the provided FQL filter criteria with scrolling enabled
+  # Retrieve Alerts Ids for epp that match the provided FQL filter criteria with scrolling enabled
   # @param [Hash] opts the optional parameters
   # @option opts [Integer] :limit The maximum records to return. [1-500]
   # @option opts [String] :sort The property to sort on, followed by a dot (.), followed by the sort direction, either \"asc\" or \"desc\".
@@ -210,6 +210,20 @@ describe 'FalconCompleteDashboard' do
     end
   end
 
+  # unit tests for query_alert_ids_by_filter_v2
+  # Retrieve Alerts Ids for epp, idp and ngsiem that match the provided FQL filter criteria with scrolling enabled
+  # @param [Hash] opts the optional parameters
+  # @option opts [Integer] :limit The maximum records to return. [1-500]
+  # @option opts [String] :sort The property to sort on, followed by a dot (.), followed by the sort direction, either \"asc\" or \"desc\".
+  # @option opts [String] :filter Optional filter and sort criteria in the form of an FQL query. For more information about FQL queries, see [our FQL documentation in Falcon](https://falcon.crowdstrike.com/support/documentation/45/falcon-query-language-feature-guide).
+  # @option opts [String] :offset Starting index of overall result set from which to return ids.
+  # @return [MsaspecQueryResponse]
+  describe 'query_alert_ids_by_filter_v2 test' do
+    it 'should work' do
+      # assertion here. ref: https://rspec.info/features/3-12/rspec-expectations/built-in-matchers/
+    end
+  end
+
   # unit tests for query_allow_list_filter
   # Retrieve allowlist tickets that match the provided filter criteria with scrolling enabled
   # @param [Hash] opts the optional parameters

data/spec/api/falcon_container_image_spec.rb

@@ -82,6 +82,16 @@ describe 'FalconContainerImage' do
     end
   end
 
+  # unit tests for head_image_scan_inventory
+  # Get headers for POST request for image scan inventory
+  # @param [Hash] opts the optional parameters
+  # @return [nil]
+  describe 'head_image_scan_inventory test' do
+    it 'should work' do
+      # assertion here. ref: https://rspec.info/features/3-12/rspec-expectations/built-in-matchers/
+    end
+  end
+
   # unit tests for launch_export_job
   # Launch an export job of a Container Security resource. Maximum of 1 job in progress per resource
   # @param body Supported resources: - `assets.clusters` - `assets.containers` - `assets.deployments` - `assets.images` - `assets.namespaces` - `assets.nodes` - `assets.pods` - `images.images-assessment-detections-expanded` - `images.images-assessment-expanded` - `images.images-assessment-vulnerabilities-expanded` - `images.images-assessment` - `images.images-detections` - `images.packages` - `images.vulnerabilities` - `investigate.container-alerts` - `investigate.drift-indicators` - `investigate.kubernetes-ioms` - `investigate.runtime-detections` - `investigate.unidentified-containers` - `network.events` - `policies.exclusions`
@@ -93,6 +103,17 @@ describe 'FalconContainerImage' do
     end
   end
 
+  # unit tests for post_image_scan_inventory
+  # Post image scan inventory
+  # @param body
+  # @param [Hash] opts the optional parameters
+  # @return [nil]
+  describe 'post_image_scan_inventory test' do
+    it 'should work' do
+      # assertion here. ref: https://rspec.info/features/3-12/rspec-expectations/built-in-matchers/
+    end
+  end
+
   # unit tests for query_export_jobs
   # Query export jobs entities
   # @param [Hash] opts the optional parameters

data/spec/api/falconx_sandbox_spec.rb

@@ -193,7 +193,7 @@ describe 'FalconxSandbox' do
     end
   end
 
-  # unit tests for query_submissions_mixin0
+  # unit tests for query_submissions
   # Find submission IDs for uploaded files by providing an FQL filter and paging details. Returns a set of submission IDs that match your criteria.
   # @param [Hash] opts the optional parameters
   # @option opts [String] :filter Optional filter and sort criteria in the form of an FQL query. For more information about FQL queries, see [our FQL documentation in Falcon](https://falcon.crowdstrike.com/support/documentation/45/falcon-query-language-feature-guide).
@@ -201,7 +201,7 @@ describe 'FalconxSandbox' do
   # @option opts [Integer] :limit Maximum number of submission IDs to return. Max: 5000.
   # @option opts [String] :sort Sort order: `asc` or `desc`.
   # @return [MsaspecQueryResponse]
-  describe 'query_submissions_mixin0 test' do
+  describe 'query_submissions test' do
     it 'should work' do
       # assertion here. ref: https://rspec.info/features/3-12/rspec-expectations/built-in-matchers/
     end
@@ -209,7 +209,7 @@ describe 'FalconxSandbox' do
 
   # unit tests for submit
   # Submit an uploaded file or a URL for sandbox analysis. Time required for analysis varies but is usually less than 15 minutes.
-  # @param body Submit either a URL or a sample SHA256 for sandbox analysis. The sample file must have been previously uploaded through `/samples/entities/samples/v2`. You must specify a JSON object that includes the `falconx.SubmissionParametersV1` key/value pairs shown below.  **`environment_id`**: Specifies the sandbox environment used for analysis. Values:  - `400`: MacOS Catalina 10.15 - `410`: MacOS Sonoma ARM 64 bit - `300`: Linux Ubuntu 16.04, 64-bit - `200`: Android (static analysis) - `160`: Windows 10, 64-bit - `140`: Windows 11, 64-bit - `110`: Windows 7, 64-bit - `100`: Windows 7, 32-bit  **`sha256`** ID of the sample, which is a SHA256 hash value. Find a sample ID from the response when uploading a malware sample or search with `/falconx/queries/submissions/v1`.The `url` parameter must be unset if `sha256` is used.  **`url`** A web page or file URL. It can be HTTP(S) or FTP. The `sha256` parameter must be unset if `url` is used.  **`action_script`** (optional): Runtime script for sandbox analysis. Values:  - `default` - `default_maxantievasion` - `default_randomfiles` - `default_randomtheme` - `default_openie`  **`command_line`** (optional): Command line script passed to the submitted file at runtime. Max length: 2048 characters  **`document_password`** (optional): Auto-filled for Adobe or Office files that prompt for a password. Max length: 32 characters  **`enable_tor`** (optional): Deprecated, please use `network_settings` instead. If `true`, sandbox analysis routes network traffic via TOR. Default: `false`.  **`network_settings`** (optional): Specifies the sandbox network_settings used for analysis. Values:  - `default`: Fully operating network - `tor`: Route network traffic via TOR - `simulated`: Simulate network traffic - `offline`: No network traffic  **`submit_name`** (optional): Name of the malware sample that's used for file type detection and analysis  **`system_date`** (optional): Set a custom date in the format `yyyy-MM-dd` for the sandbox environment  **`system_time`** (optional): Set a custom time in the format `HH:mm` for the sandbox environment.
+  # @param body Submit either a URL or a sample SHA256 for sandbox analysis. The sample file must have been previously uploaded through `/samples/entities/samples/v2`. You must specify a JSON object that includes the `falconx.SubmissionParametersV1` key/value pairs shown below.  **`environment_id`**: Specifies the sandbox environment used for analysis. Values:  - `400`: MacOS Catalina 10.15 - `300`: Linux Ubuntu 16.04, 64-bit - deprecated - `310`: Linux Ubuntu 20, 64-bit - `200`: Android (static analysis) - `160`: Windows 10, 64-bit - `140`: Windows 11, 64-bit - `110`: Windows 7, 64-bit - `100`: Windows 7, 32-bit  **`sha256`** ID of the sample, which is a SHA256 hash value. Find a sample ID from the response when uploading a malware sample or search with `/falconx/queries/submissions/v1`.The `url` parameter must be unset if `sha256` is used.  **`url`** A web page or file URL. It can be HTTP(S) or FTP. The `sha256` parameter must be unset if `url` is used.  **`action_script`** (optional): Runtime script for sandbox analysis. Values:  - `default` - `default_maxantievasion` - `default_randomfiles` - `default_randomtheme` - `default_openie`  **`command_line`** (optional): Command line script passed to the submitted file at runtime. Max length: 2048 characters  **`document_password`** (optional): Auto-filled for Adobe or Office files that prompt for a password. Max length: 32 characters  **`enable_tor`** (optional): Deprecated, please use `network_settings` instead. If `true`, sandbox analysis routes network traffic via TOR. Default: `false`.  **`network_settings`** (optional): Specifies the sandbox network_settings used for analysis. Values:  - `default`: Fully operating network - `tor`: Route network traffic via TOR - `simulated`: Simulate network traffic - `offline`: No network traffic  **`submit_name`** (optional): Name of the malware sample that's used for file type detection and analysis  **`system_date`** (optional): Set a custom date in the format `yyyy-MM-dd` for the sandbox environment  **`system_time`** (optional): Set a custom time in the format `HH:mm` for the sandbox environment.
   # @param [Hash] opts the optional parameters
   # @option opts [String] :aid Agent ID
   # @return [FalconxSubmissionV1Response]

data/spec/api/host_migration_spec.rb

@@ -69,7 +69,7 @@ describe 'HostMigration' do
   # @option opts [Integer] :offset The offset to start retrieving records from
   # @option opts [Integer] :limit The maximum records to return. [1-10000]
   # @option opts [String] :sort The property to sort by.
-  # @option opts [String] :filter The filter expression that should be used to limit the results. Valid fields: groups, static_host_groups, status, target_cid, migration_id, created_time, host_migration_id, hostgroups, hostname, source_cid, id
+  # @option opts [String] :filter The filter expression that should be used to limit the results. Valid fields: migration_id, id, created_time, hostgroups, static_host_groups, hostname, status, groups, target_cid, source_cid, host_migration_id
   # @return [MsaspecQueryResponse]
   describe 'get_host_migration_ids_v1 test' do
     it 'should work' do
@@ -107,7 +107,7 @@ describe 'HostMigration' do
   # @option opts [Integer] :offset The offset to start retrieving records from
   # @option opts [Integer] :limit The maximum records to return. [1-10000]
   # @option opts [String] :sort The property to sort by.
-  # @option opts [String] :filter The filter expression that should be used to limit the results. Valid fields: target_cid, status, migration_status, created_by, created_time, name, id, migration_id
+  # @option opts [String] :filter The filter expression that should be used to limit the results. Valid fields: migration_status, created_by, created_time, name, id, migration_id, target_cid, status
   # @return [MsaspecQueryResponse]
   describe 'get_migration_ids_v1 test' do
     it 'should work' do

data/spec/api/hosts_spec.rb

@@ -49,6 +49,36 @@ describe 'Hosts' do
     end
   end
 
+  # unit tests for combined_devices_by_filter
+  # Search for hosts in your environment by platform, hostname, IP, and other criteria. Returns full device records.
+  # @param [Hash] opts the optional parameters
+  # @option opts [String] :offset The offset to page from, provided from the previous call as the \"next\" value, for the next result set. For the first call, do not supply an offset.
+  # @option opts [Integer] :limit The maximum records to return. [1-10000]
+  # @option opts [String] :sort The property to sort by (e.g. status.desc or hostname.asc). If not specified, the default sort will be device_id.asc. This should be supplied for each consecutive call.
+  # @option opts [String] :filter The filter expression that should be used to limit the results. This should be supplied for each consecutive call.
+  # @option opts [String] :fields The fields to return, comma delimited if specifying more than one field. For example: fields=hostname,device_id would return device records only containing the hostname and device_id
+  # @return [DeviceapiDeviceCombinedResponseSwagger]
+  describe 'combined_devices_by_filter test' do
+    it 'should work' do
+      # assertion here. ref: https://rspec.info/features/3-12/rspec-expectations/built-in-matchers/
+    end
+  end
+
+  # unit tests for combined_hidden_devices_by_filter
+  # Search for hidden hosts in your environment by platform, hostname, IP, and other criteria. Returns full device records.
+  # @param [Hash] opts the optional parameters
+  # @option opts [String] :offset The offset to page from, provided from the previous call as the \"next\" value, for the next result set. For the first call, do not supply an offset.
+  # @option opts [Integer] :limit The maximum records to return. [1-10000]
+  # @option opts [String] :sort The property to sort by (e.g. status.desc or hostname.asc). If not specified, the default sort will be device_id.asc. This should be supplied for each consecutive call.
+  # @option opts [String] :filter The filter expression that should be used to limit the results. This should be supplied for each consecutive call.
+  # @option opts [String] :fields The fields to return, comma delimited if specifying more than one field. For example: fields=hostname,device_id would return device records only containing the hostname and device_id
+  # @return [DeviceapiDeviceCombinedResponseSwagger]
+  describe 'combined_hidden_devices_by_filter test' do
+    it 'should work' do
+      # assertion here. ref: https://rspec.info/features/3-12/rspec-expectations/built-in-matchers/
+    end
+  end
+
   # unit tests for entities_perform_action
   # Performs the specified action on the provided group IDs.
   # @param ids The group ids to act on

data/spec/api/installation_tokens_settings_spec.rb

@@ -53,7 +53,7 @@ describe 'InstallationTokensSettings' do
   # Update installation token settings.
   # @param body
   # @param [Hash] opts the optional parameters
-  # @return [MsaspecQueryResponse]
+  # @return [ApiCustomerSettingsResponseV1]
   describe 'customer_settings_update test' do
     it 'should work' do
       # assertion here. ref: https://rspec.info/features/3-12/rspec-expectations/built-in-matchers/

data/spec/api/installation_tokens_spec.rb

@@ -136,7 +136,7 @@ describe 'InstallationTokens' do
   # @param ids The token ids to update.
   # @param body
   # @param [Hash] opts the optional parameters
-  # @return [MsaspecQueryResponse]
+  # @return [ApiTokenDetailsResponseV1]
   describe 'tokens_update test' do
     it 'should work' do
       # assertion here. ref: https://rspec.info/features/3-12/rspec-expectations/built-in-matchers/

data/spec/api/integration_builder_spec.rb

@@ -0,0 +1,102 @@
+=begin
+Crimson Falcon - Ruby Client SDK
+
+Code auto-generated by OpenAPI Generator; DO NOT EDIT.
+
+MIT License
+
+Copyright (c) 2023 Crowdstrike
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+
+=end
+
+require 'spec_helper'
+require 'json'
+
+# Unit tests for Falcon::IntegrationBuilder
+# Automatically generated by openapi-generator (https://openapi-generator.tech)
+# Please update as you see appropriate
+describe 'IntegrationBuilder' do
+  before(:all) do
+    # run before each test
+    @api_instance = Falcon::IntegrationBuilder.new
+  end
+
+  after(:all) do
+    # run after each test
+  end
+
+  describe 'test an instance of IntegrationBuilder' do
+    it 'should create an instance of IntegrationBuilder' do
+      expect(@api_instance).to be_instance_of(Falcon::IntegrationBuilder)
+    end
+  end
+
+  # unit tests for integration_builder_end_transaction_v3
+  # POST Data Upload Transaction Completion
+  # Make a close transaction call after uploading the data
+  # @param id Integration ID
+  # @param [Hash] opts the optional parameters
+  # @return [GetEndTransaction]
+  describe 'integration_builder_end_transaction_v3 test' do
+    it 'should work' do
+      # assertion here. ref: https://rspec.info/features/3-12/rspec-expectations/built-in-matchers/
+    end
+  end
+
+  # unit tests for integration_builder_get_status_v3
+  # GET Status
+  # Get transaction status for a custom integration
+  # @param id Integration ID
+  # @param [Hash] opts the optional parameters
+  # @return [GetTransactionStatus]
+  describe 'integration_builder_get_status_v3 test' do
+    it 'should work' do
+      # assertion here. ref: https://rspec.info/features/3-12/rspec-expectations/built-in-matchers/
+    end
+  end
+
+  # unit tests for integration_builder_reset_v3
+  # Reset
+  # Make a reset call to a custom integration
+  # @param id Integration ID
+  # @param [Hash] opts the optional parameters
+  # @return [GetTransactionStatus]
+  describe 'integration_builder_reset_v3 test' do
+    it 'should work' do
+      # assertion here. ref: https://rspec.info/features/3-12/rspec-expectations/built-in-matchers/
+    end
+  end
+
+  # unit tests for integration_builder_upload_v3
+  # POST Upload
+  # Send data to a specific source in a custom integration
+  # @param id Integration ID
+  # @param source_id Source ID
+  # @param data
+  # @param [Hash] opts the optional parameters
+  # @return [UploadDataResponse]
+  describe 'integration_builder_upload_v3 test' do
+    it 'should work' do
+      # assertion here. ref: https://rspec.info/features/3-12/rspec-expectations/built-in-matchers/
+    end
+  end
+
+end

data/spec/api/intel_spec.rb

@@ -200,7 +200,7 @@ describe 'Intel' do
   # @option opts [Integer] :offset Set the starting row number to return actors from. Defaults to 0.
   # @option opts [Integer] :limit Set the number of actors to return. The value must be between 1 and 5000.
   # @option opts [String] :sort Order fields in ascending or descending order.  Ex: created_date|asc.
-  # @option opts [String] :filter Filter your query by specifying FQL filter parameters. Filter parameters include:  actor_type, capabilities, capability, capability.id, capability.slug, capability.value, created_date, description, ecrime_kill_chain.attribution, ecrime_kill_chain.crimes, ecrime_kill_chain.customers, ecrime_kill_chain.marketing, ecrime_kill_chain.monetization, ecrime_kill_chain.services_offered, ecrime_kill_chain.services_used, ecrime_kill_chain.technical_tradecraft, ecrime_kill_chain.victims, first_activity_date, group, group.id, group.slug, group.value, id, kill_chain.actions_and_objectives, kill_chain.actions_on_objectives, kill_chain.command_and_control, kill_chain.delivery, kill_chain.exploitation, kill_chain.installation, kill_chain.objectives, kill_chain.reconnaissance, kill_chain.weaponization, known_as, last_activity_date, last_modified_date, motivations, motivations.id, motivations.slug, motivations.value, name, objectives, origins, origins.id, origins.slug, origins.value, region, region.id, region.slug, region.value, short_description, slug, status, target_countries, target_countries.id, target_countries.slug, target_countries.value, target_industries, target_industries.id, target_industries.slug, target_industries.value, target_regions, target_regions.id, target_regions.slug, target_regions.value.
+  # @option opts [String] :filter Filter your query by specifying FQL filter parameters. Filter parameters include:  actor_type, animal_classifier, capabilities, capability, capability.id, capability.slug, capability.value, created_date, description, ecrime_kill_chain.attribution, ecrime_kill_chain.crimes, ecrime_kill_chain.customers, ecrime_kill_chain.marketing, ecrime_kill_chain.monetization, ecrime_kill_chain.services_offered, ecrime_kill_chain.services_used, ecrime_kill_chain.technical_tradecraft, ecrime_kill_chain.victims, first_activity_date, group, group.id, group.slug, group.value, id, kill_chain.actions_and_objectives, kill_chain.actions_on_objectives, kill_chain.command_and_control, kill_chain.delivery, kill_chain.exploitation, kill_chain.installation, kill_chain.objectives, kill_chain.reconnaissance, kill_chain.weaponization, known_as, last_activity_date, last_modified_date, motivations, motivations.id, motivations.slug, motivations.value, name, objectives, origins, origins.id, origins.slug, origins.value, region, region.id, region.slug, region.value, short_description, slug, status, target_countries, target_countries.id, target_countries.slug, target_countries.value, target_industries, target_industries.id, target_industries.slug, target_industries.value, target_regions, target_regions.id, target_regions.slug, target_regions.value.
   # @option opts [String] :q Perform a generic substring search across all fields.
   # @option opts [Array<String>] :fields The fields to return, or a predefined set of fields in the form of the collection name surrounded by two underscores like:  \\_\\_\\&lt;collection\\&gt;\\_\\_.  Ex: slug \\_\\_full\\_\\_.  Defaults to \\_\\_basic\\_\\_.
   # @return [DomainActorsResponse]
@@ -216,7 +216,7 @@ describe 'Intel' do
   # @option opts [Integer] :offset Set the starting row number to return actors IDs from. Defaults to 0.
   # @option opts [Integer] :limit Set the number of actor IDs to return. The value must be between 1 and 5000.
   # @option opts [String] :sort Order fields in ascending or descending order.  Ex: created_date|asc.
-  # @option opts [String] :filter Filter your query by specifying FQL filter parameters. Filter parameters include:  actor_type, capabilities, capability, capability.id, capability.slug, capability.value, created_date, description, ecrime_kill_chain.attribution, ecrime_kill_chain.crimes, ecrime_kill_chain.customers, ecrime_kill_chain.marketing, ecrime_kill_chain.monetization, ecrime_kill_chain.services_offered, ecrime_kill_chain.services_used, ecrime_kill_chain.technical_tradecraft, ecrime_kill_chain.victims, first_activity_date, group, group.id, group.slug, group.value, id, kill_chain.actions_and_objectives, kill_chain.actions_on_objectives, kill_chain.command_and_control, kill_chain.delivery, kill_chain.exploitation, kill_chain.installation, kill_chain.objectives, kill_chain.reconnaissance, kill_chain.weaponization, known_as, last_activity_date, last_modified_date, motivations, motivations.id, motivations.slug, motivations.value, name, objectives, origins, origins.id, origins.slug, origins.value, region, region.id, region.slug, region.value, short_description, slug, status, target_countries, target_countries.id, target_countries.slug, target_countries.value, target_industries, target_industries.id, target_industries.slug, target_industries.value, target_regions, target_regions.id, target_regions.slug, target_regions.value.
+  # @option opts [String] :filter Filter your query by specifying FQL filter parameters. Filter parameters include:  actor_type, animal_classifier, capabilities, capability, capability.id, capability.slug, capability.value, created_date, description, ecrime_kill_chain.attribution, ecrime_kill_chain.crimes, ecrime_kill_chain.customers, ecrime_kill_chain.marketing, ecrime_kill_chain.monetization, ecrime_kill_chain.services_offered, ecrime_kill_chain.services_used, ecrime_kill_chain.technical_tradecraft, ecrime_kill_chain.victims, first_activity_date, group, group.id, group.slug, group.value, id, kill_chain.actions_and_objectives, kill_chain.actions_on_objectives, kill_chain.command_and_control, kill_chain.delivery, kill_chain.exploitation, kill_chain.installation, kill_chain.objectives, kill_chain.reconnaissance, kill_chain.weaponization, known_as, last_activity_date, last_modified_date, motivations, motivations.id, motivations.slug, motivations.value, name, objectives, origins, origins.id, origins.slug, origins.value, region, region.id, region.slug, region.value, short_description, slug, status, target_countries, target_countries.id, target_countries.slug, target_countries.value, target_industries, target_industries.id, target_industries.slug, target_industries.value, target_regions, target_regions.id, target_regions.slug, target_regions.value.
   # @option opts [String] :q Perform a generic substring search across all fields.
   # @return [MsaQueryResponse]
   describe 'query_intel_actor_ids test' do
@@ -265,7 +265,7 @@ describe 'Intel' do
   # @option opts [Integer] :offset Set the starting row number to return reports from. Defaults to 0.
   # @option opts [Integer] :limit Set the number of reports to return. The value must be between 1 and 5000.
   # @option opts [String] :sort Order fields in ascending or descending order. Ex: created_date|asc.
-  # @option opts [String] :filter Filter your query by specifying FQL filter parameters. Filter parameters include:  actors, actors.id, actors.name, actors.slug, actors.url, created_date, description, id, last_modified_date, malware, malware.community_identifiers, malware.family_name, malware.slug, motivations, motivations.id, motivations.slug, motivations.value, name, name.raw, short_description, slug, sub_type, sub_type.id, sub_type.name, sub_type.slug, tags, tags.id, tags.slug, tags.value, target_countries, target_countries.id, target_countries.slug, target_countries.value, target_industries, target_industries.id, target_industries.slug, target_industries.value, type, type.id, type.name, type.slug, url.
+  # @option opts [String] :filter Filter your query by specifying FQL filter parameters. Filter parameters include:  actors, actors.animal_classifier, actors.id, actors.name, actors.slug, actors.url, created_date, description, id, last_modified_date, malware, malware.community_identifiers, malware.family_name, malware.slug, motivations, motivations.id, motivations.slug, motivations.value, name, name.raw, short_description, slug, sub_type, sub_type.id, sub_type.name, sub_type.slug, tags, tags.id, tags.slug, tags.value, target_countries, target_countries.id, target_countries.slug, target_countries.value, target_industries, target_industries.id, target_industries.slug, target_industries.value, type, type.id, type.name, type.slug, url.
   # @option opts [String] :q Perform a generic substring search across all fields.
   # @option opts [Array<String>] :fields The fields to return, or a predefined set of fields in the form of the collection name surrounded by two underscores like:  \\_\\_\\&lt;collection\\&gt;\\_\\_.  Ex: slug \\_\\_full\\_\\_.  Defaults to \\_\\_basic\\_\\_.
   # @return [DomainNewsResponse]
@@ -281,7 +281,7 @@ describe 'Intel' do
   # @option opts [Integer] :offset Set the starting row number to return report IDs from. Defaults to 0.
   # @option opts [Integer] :limit Set the number of report IDs to return. The value must be between 1 and 5000.
   # @option opts [String] :sort Order fields in ascending or descending order.  Ex: created_date|asc.
-  # @option opts [String] :filter Filter your query by specifying FQL filter parameters. Filter parameters include:  actors, actors.id, actors.name, actors.slug, actors.url, created_date, description, id, last_modified_date, malware, malware.community_identifiers, malware.family_name, malware.slug, motivations, motivations.id, motivations.slug, motivations.value, name, name.raw, short_description, slug, sub_type, sub_type.id, sub_type.name, sub_type.slug, tags, tags.id, tags.slug, tags.value, target_countries, target_countries.id, target_countries.slug, target_countries.value, target_industries, target_industries.id, target_industries.slug, target_industries.value, type, type.id, type.name, type.slug, url.
+  # @option opts [String] :filter Filter your query by specifying FQL filter parameters. Filter parameters include:  actors, actors.animal_classifier, actors.id, actors.name, actors.slug, actors.url, created_date, description, id, last_modified_date, malware, malware.community_identifiers, malware.family_name, malware.slug, motivations, motivations.id, motivations.slug, motivations.value, name, name.raw, short_description, slug, sub_type, sub_type.id, sub_type.name, sub_type.slug, tags, tags.id, tags.slug, tags.value, target_countries, target_countries.id, target_countries.slug, target_countries.value, target_industries, target_industries.id, target_industries.slug, target_industries.value, type, type.id, type.name, type.slug, url.
   # @option opts [String] :q Perform a generic substring search across all fields.
   # @return [MsaQueryResponse]
   describe 'query_intel_report_ids test' do
@@ -325,6 +325,22 @@ describe 'Intel' do
     end
   end
 
+  # unit tests for query_malware_entities
+  # Get malware entities that match provided FQL filters.
+  # @param [Hash] opts the optional parameters
+  # @option opts [Integer] :offset Set the starting row number to return malware IDs from. Defaults to 0.
+  # @option opts [Integer] :limit Set the number of malware IDs to return. The value must be between 1 and 5000.
+  # @option opts [String] :sort Order fields in ascending or descending order.  Ex: created_date|asc.
+  # @option opts [String] :filter Filter your query by specifying FQL filter parameters.
+  # @option opts [String] :q Perform a generic substring search across all fields.
+  # @option opts [Array<String>] :fields The fields to return
+  # @return [DomainMalwareResponse]
+  describe 'query_malware_entities test' do
+    it 'should work' do
+      # assertion here. ref: https://rspec.info/features/3-12/rspec-expectations/built-in-matchers/
+    end
+  end
+
   # unit tests for query_mitre_attacks
   # Gets MITRE tactics and techniques for the given actor, returning concatenation of id and tactic and technique ids, example: fancy-bear_TA0011_T1071
   # @param [Hash] opts the optional parameters
@@ -354,7 +370,7 @@ describe 'Intel' do
   # @option opts [String] :offset Starting index of result set from which to return IDs.
   # @option opts [Integer] :limit Number of IDs to return.
   # @option opts [String] :sort Order by fields.
-  # @option opts [String] :filter FQL query specifying the filter parameters.
+  # @option opts [String] :filter FQL query specifying the filter parameters. Filter parameters include:  _all, affected_products.product, affected_products.vendor, community_identifiers, cve, cvss_v3_base, cvss_v3_base.score, cvss_v3_base.severity, exploit_status, publish_date, related_actors, related_actors.animal_classifier, related_actors.name, related_reports.serial_id, related_reports.title, related_threats, related_threats.name, severity, updated_timestamp.
   # @option opts [String] :q Match phrase_prefix query criteria; included fields: _all (all filter string fields indexed).
   # @return [MsaQueryResponse]
   describe 'query_vulnerabilities test' do

data/spec/api/{datascanner_spec.rb → intelligence_feeds_spec.rb}

@@ -30,53 +30,54 @@ SOFTWARE.
 require 'spec_helper'
 require 'json'
 
-# Unit tests for Falcon::Datascanner
+# Unit tests for Falcon::IntelligenceFeeds
 # Automatically generated by openapi-generator (https://openapi-generator.tech)
 # Please update as you see appropriate
-describe 'Datascanner' do
+describe 'IntelligenceFeeds' do
   before(:all) do
     # run before each test
-    @api_instance = Falcon::Datascanner.new
+    @api_instance = Falcon::IntelligenceFeeds.new
   end
 
   after(:all) do
     # run after each test
   end
 
-  describe 'test an instance of Datascanner' do
-    it 'should create an instance of Datascanner' do
-      expect(@api_instance).to be_instance_of(Falcon::Datascanner)
+  describe 'test an instance of IntelligenceFeeds' do
+    it 'should create an instance of IntelligenceFeeds' do
+      expect(@api_instance).to be_instance_of(Falcon::IntelligenceFeeds)
     end
   end
 
-  # unit tests for get_data_scanner_tasks
-  # - GetDataScannerTasks is a route for the data scanner to fetch pending tasks
-  # @param x_scanner_id ID of the data scanner
+  # unit tests for download_feed_archive
+  # Downloads the content as a zip archive for a given feed item ID
+  # @param feed_item_id Feed ID
   # @param [Hash] opts the optional parameters
-  # @return [Hash<String, String>]
-  describe 'get_data_scanner_tasks test' do
+  # @return [nil]
+  describe 'download_feed_archive test' do
     it 'should work' do
       # assertion here. ref: https://rspec.info/features/3-12/rspec-expectations/built-in-matchers/
     end
   end
 
-  # unit tests for get_image_registry_credentials
-  # - GetImageRegistryCredentials is a route that gets credentials in order to fetch the data scanner image.
+  # unit tests for list_feed_types
+  # Lists the accessible feed types for a given customer
   # @param [Hash] opts the optional parameters
-  # @return [Hash<String, String>]
-  describe 'get_image_registry_credentials test' do
+  # @return [RestapiIndicatorGetFeedsResponse]
+  describe 'list_feed_types test' do
     it 'should work' do
       # assertion here. ref: https://rspec.info/features/3-12/rspec-expectations/built-in-matchers/
     end
   end
 
-  # unit tests for update_data_scanner_tasks
-  # - PatchDataScannerTasks is a route for the data scanner to report back on tasks statuses
-  # @param x_scanner_id ID of the data scanner
-  # @param x_machine_id Provider ID of machine
+  # unit tests for query_feed_archives
+  # Queries the accessible feed types for a customer. Returns a list of feed item IDs which can be later downloaded
+  # @param feed_name Feed Name
+  # @param feed_interval Feed interval must be one of: dump|daily|hourly|minutely
   # @param [Hash] opts the optional parameters
-  # @return [Hash<String, String>]
-  describe 'update_data_scanner_tasks test' do
+  # @option opts [String] :since Since is a valid timestamp in RFC3399 format. Restrictions: minutely: now()-2h, hourly: now()-2d, daily: now()-5d; dump: now()-7d
+  # @return [RestapiIndicatorFeedQueryResponse]
+  describe 'query_feed_archives test' do
     it 'should work' do
       # assertion here. ref: https://rspec.info/features/3-12/rspec-expectations/built-in-matchers/
     end

data/spec/api/intelligence_indicator_graph_spec.rb

@@ -49,11 +49,24 @@ describe 'IntelligenceIndicatorGraph' do
     end
   end
 
+  # unit tests for lookup_indicators
+  # Get indicators based on their value.
+  # Look up intelligence data for multiple indicators. Supports various indicator types including domains, IP addresses, and file hashes (MD5, SHA1, SHA256). Provide up to 100 indicators in a single request.
+  # @param body
+  # @param [Hash] opts the optional parameters
+  # @return [RestapiLookupIndicatorResponse]
+  describe 'lookup_indicators test' do
+    it 'should work' do
+      # assertion here. ref: https://rspec.info/features/3-12/rspec-expectations/built-in-matchers/
+    end
+  end
+
   # unit tests for search_indicators
   # Search indicators based on FQL filter.
-  # @param x_cs_useruuid User ID.
   # @param body
   # @param [Hash] opts the optional parameters
+  # @option opts [String] :sort Parameter to specify the order(field examples: FileDetails.SHA256, URLDetails.URL, PublishDate, MaliciousConfidence) Ex: 'PublishDate|asc'.
+  # @option opts [String] :filter FQL query specifying the filter parameters.
   # @option opts [Integer] :limit Limit
   # @option opts [String] :offset Offset
   # @return [RestapiIndicatorResponse]

data/spec/api/inventories_spec.rb

@@ -0,0 +1,85 @@
+=begin
+Crimson Falcon - Ruby Client SDK
+
+Code auto-generated by OpenAPI Generator; DO NOT EDIT.
+
+MIT License
+
+Copyright (c) 2023 Crowdstrike
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+
+=end
+
+require 'spec_helper'
+require 'json'
+
+# Unit tests for Falcon::Inventories
+# Automatically generated by openapi-generator (https://openapi-generator.tech)
+# Please update as you see appropriate
+describe 'Inventories' do
+  before(:all) do
+    # run before each test
+    @api_instance = Falcon::Inventories.new
+  end
+
+  after(:all) do
+    # run after each test
+  end
+
+  describe 'test an instance of Inventories' do
+    it 'should create an instance of Inventories' do
+      expect(@api_instance).to be_instance_of(Falcon::Inventories)
+    end
+  end
+
+  # unit tests for get_device_inventory_v3
+  # GET Device Inventory
+  # Get a list of all devices
+  # @param [Hash] opts the optional parameters
+  # @option opts [String] :integration_id Comma separated integration ID's
+  # @option opts [Integer] :limit The maximum number of objects to return
+  # @option opts [Integer] :offset The starting index of the results
+  # @option opts [String] :email Email
+  # @option opts [Boolean] :privileged_only Privileged Only
+  # @option opts [Boolean] :unassociated_devices Unassociated Devices
+  # @return [GetDeviceInventory]
+  describe 'get_device_inventory_v3 test' do
+    it 'should work' do
+      # assertion here. ref: https://rspec.info/features/3-12/rspec-expectations/built-in-matchers/
+    end
+  end
+
+  # unit tests for get_user_inventory_v3
+  # GET User Inventory
+  # Get a list of all users
+  # @param [Hash] opts the optional parameters
+  # @option opts [String] :integration_id Comma separated integration ID's
+  # @option opts [Integer] :limit The maximum number of objects to return
+  # @option opts [Integer] :offset The starting index of the results
+  # @option opts [String] :email Email
+  # @option opts [Boolean] :privileged_only Privileged Only
+  # @return [GetUserInventory]
+  describe 'get_user_inventory_v3 test' do
+    it 'should work' do
+      # assertion here. ref: https://rspec.info/features/3-12/rspec-expectations/built-in-matchers/
+    end
+  end
+
+end