crowdstrike-falconpy-dev 1.4.4__tar.gz → 1.4.5__tar.gz

{crowdstrike-falconpy-dev-1.4.4 → crowdstrike-falconpy-dev-1.4.5}/AUTHORS.md

@@ -94,6 +94,13 @@ This has been a critical element in the development of the FalconPy project.
 + `@PeroSoy`
 + Shubham, `@i-shubham01`
 + Don "Swanson" I., `@Don-Swanson-Adobe`
++ Nick, `nickforsythbarr`
++ `nesies`
++ `David-M-Berry`
++ Oke Okumo, `@okewoma`
++ Alexander Moomaw, `@alhumaw`
++ Esha Kumar, `@exk200006`
++ Griffin Ansel, `@gansel51`
 
 
 ## Sponsors

{crowdstrike-falconpy-dev-1.4.4/src/crowdstrike_falconpy_dev.egg-info → crowdstrike-falconpy-dev-1.4.5}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.1
 Name: crowdstrike-falconpy-dev
-Version: 1.4.4
+Version: 1.4.5
 Summary: The CrowdStrike Falcon SDK for Python 3
 Home-page: https://github.com/CrowdStrike/falconpy
 Author: CrowdStrike

{crowdstrike-falconpy-dev-1.4.4 → crowdstrike-falconpy-dev-1.4.5}/setup.py

@@ -91,6 +91,7 @@ setup(
             "pytest-cov",
             "pytest",
             "bandit",
+            "setuptools~=70.3.0"
         ],
     },
     classifiers=[

{crowdstrike-falconpy-dev-1.4.4 → crowdstrike-falconpy-dev-1.4.5/src/crowdstrike_falconpy_dev.egg-info}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.1
 Name: crowdstrike-falconpy-dev
-Version: 1.4.4
+Version: 1.4.5
 Summary: The CrowdStrike Falcon SDK for Python 3
 Home-page: https://github.com/CrowdStrike/falconpy
 Author: CrowdStrike

{crowdstrike-falconpy-dev-1.4.4 → crowdstrike-falconpy-dev-1.4.5}/src/crowdstrike_falconpy_dev.egg-info/SOURCES.txt

@@ -12,8 +12,10 @@ src/falconpydev/__init__.py
 src/falconpydev/_version.py
 src/falconpydev/alerts.py
 src/falconpydev/api_integrations.py
+src/falconpydev/certificate_based_exclusions.py
 src/falconpydev/cloud_connect_aws.py
 src/falconpydev/cloud_snapshots.py
+src/falconpydev/compliance_assessments.py
 src/falconpydev/configuration_assessment.py
 src/falconpydev/configuration_assessment_evaluation_logic.py
 src/falconpydev/container_alerts.py
@@ -41,6 +43,7 @@ src/falconpydev/firewall_management.py
 src/falconpydev/firewall_policies.py
 src/falconpydev/foundry_logscale.py
 src/falconpydev/host_group.py
+src/falconpydev/host_migration.py
 src/falconpydev/hosts.py
 src/falconpydev/identity_protection.py
 src/falconpydev/image_assessment_policies.py
@@ -98,8 +101,10 @@ src/falconpydev/_constant/__init__.py
 src/falconpydev/_endpoint/__init__.py
 src/falconpydev/_endpoint/_alerts.py
 src/falconpydev/_endpoint/_api_integrations.py
+src/falconpydev/_endpoint/_certificate_based_exclusions.py
 src/falconpydev/_endpoint/_cloud_connect_aws.py
 src/falconpydev/_endpoint/_cloud_snapshots.py
+src/falconpydev/_endpoint/_compliance_assessments.py
 src/falconpydev/_endpoint/_configuration_assessment.py
 src/falconpydev/_endpoint/_configuration_assessment_evaluation_logic.py
 src/falconpydev/_endpoint/_container_alerts.py
@@ -126,6 +131,7 @@ src/falconpydev/_endpoint/_firewall_management.py
 src/falconpydev/_endpoint/_firewall_policies.py
 src/falconpydev/_endpoint/_foundry_logscale.py
 src/falconpydev/_endpoint/_host_group.py
+src/falconpydev/_endpoint/_host_migration.py
 src/falconpydev/_endpoint/_hosts.py
 src/falconpydev/_endpoint/_identity_protection.py
 src/falconpydev/_endpoint/_image_assessment_policies.py
@@ -167,6 +173,7 @@ src/falconpydev/_endpoint/_user_management.py
 src/falconpydev/_endpoint/_workflows.py
 src/falconpydev/_endpoint/_zero_trust_assessment.py
 src/falconpydev/_endpoint/deprecated/__init__.py
+src/falconpydev/_endpoint/deprecated/_certificate_based_exclusions.py
 src/falconpydev/_endpoint/deprecated/_custom_ioa.py
 src/falconpydev/_endpoint/deprecated/_d4c_registration.py
 src/falconpydev/_endpoint/deprecated/_discover.py
@@ -197,6 +204,7 @@ src/falconpydev/_log/_facility.py
 src/falconpydev/_payload/__init__.py
 src/falconpydev/_payload/_alerts.py
 src/falconpydev/_payload/_api_integrations.py
+src/falconpydev/_payload/_certificate_based_exclusions.py
 src/falconpydev/_payload/_cloud_connect_aws.py
 src/falconpydev/_payload/_cloud_snapshots.py
 src/falconpydev/_payload/_container.py
@@ -253,8 +261,10 @@ tests/test_api_integrations.py
 tests/test_api_request.py
 tests/test_authentications.py
 tests/test_authorization.py
+tests/test_certificate_based_exclusions.py
 tests/test_cloud_connect_aws.py
 tests/test_cloud_snapshots.py
+tests/test_compliance_assessments.py
 tests/test_configuration_assessment.py
 tests/test_configuration_assessment_evaluation_logic.py
 tests/test_container_alerts.py
@@ -281,6 +291,7 @@ tests/test_firewall_management.py
 tests/test_firewall_policies.py
 tests/test_foundry_logscale.py
 tests/test_host_group.py
+tests/test_host_migration.py
 tests/test_hosts.py
 tests/test_identity_protection.py
 tests/test_image_assessment_policies.py

{crowdstrike-falconpy-dev-1.4.4 → crowdstrike-falconpy-dev-1.4.5}/src/falconpydev/__init__.py

@@ -90,7 +90,9 @@ from ._api_request import (
 from .alerts import Alerts
 from .api_integrations import APIIntegrations
 from .api_complete import APIHarness, APIHarnessV2
+from .certificate_based_exclusions import CertificateBasedExclusions
 from .cloud_snapshots import CloudSnapshots
+from .compliance_assessments import ComplianceAssessments
 from .configuration_assessment_evaluation_logic import ConfigurationAssessmentEvaluationLogic
 from .configuration_assessment import ConfigurationAssessment
 from .container_alerts import ContainerAlerts
@@ -119,6 +121,7 @@ from .firewall_policies import FirewallPolicies
 from .foundry_logscale import FoundryLogScale
 from .host_group import HostGroup
 from .hosts import Hosts
+from .host_migration import HostMigration
 from .identity_protection import IdentityProtection
 from .image_assessment_policies import ImageAssessmentPolicies
 from .incidents import Incidents
@@ -198,7 +201,8 @@ __all__ = [
     "SDKDeprecationWarning", "ConfigurationAssessmentEvaluationLogic", "ConfigurationAssessment",
     "ContainerAlerts", "ContainerDetections", "ContainerImages", "ContainerPackages",
     "ContainerVulnerabilities", "DriftIndicators", "UnidentifiedContainers",
-    "ImageAssessmentPolicies", "APIIntegrations", "ThreatGraph", "ExposureManagement"
+    "ImageAssessmentPolicies", "APIIntegrations", "ThreatGraph", "ExposureManagement",
+    "CertificateBasedExclusions", "ComplianceAssessments", "HostMigration"
     ]
 """
 This is free and unencumbered software released into the public domain.

{crowdstrike-falconpy-dev-1.4.4 → crowdstrike-falconpy-dev-1.4.5}/src/falconpydev/_auth_object/_falcon_interface.py

@@ -73,7 +73,7 @@ class FalconInterface(BaseFalconAuth):
     # The default constructor for all authentication objects. Ingests provided credentials
     # and sets the necessary class attributes based upon the authentication detail received.
     # pylint: disable=R0912,R0913,R0914
-    def __init__(self,
+    def __init__(self,  # noqa: C901
                  access_token: Optional[Union[str, bool]] = False,
                  base_url: Optional[str] = "https://api.crowdstrike.com",
                  creds: Optional[Dict[str, str]] = None,
@@ -167,7 +167,8 @@ class FalconInterface(BaseFalconAuth):
                         if cvar.cs_cloud:
                             self._config.base_url = confirm_base_url(cvar.cs_cloud)
                     except AttributeError:
-                        pass
+                        if self.token_value:
+                            self._config.base_url = confirm_base_url(os.getenv("CS_CLOUD", "auto"))
                     self._auth_style = "CONTEXT"
                     break
                 except AttributeError:

{crowdstrike-falconpy-dev-1.4.4 → crowdstrike-falconpy-dev-1.4.5}/src/falconpydev/_endpoint/__init__.py

@@ -36,13 +36,16 @@ from .deprecated import _real_time_response_admin_deprecated
 from .deprecated import _report_executions_deprecated
 from .deprecated import _scheduled_reports_deprecated
 from .deprecated import _zero_trust_assessment_deprecated
+from .deprecated import _certificate_based_exclusions_deprecated
 from .deprecated import _deprecated_operation_mapping
 from .deprecated import _deprecated_class_mapping
 
 from ._alerts import _alerts_endpoints
 from ._api_integrations import _api_integrations_endpoints
+from ._certificate_based_exclusions import _certificate_based_exclusions_endpoints
 from ._cloud_connect_aws import _cloud_connect_aws_endpoints
 from ._cloud_snapshots import _cloud_snapshots_endpoints
+from ._compliance_assessments import _complianceassessments_endpoints
 from ._configuration_assessment_evaluation_logic import _configuration_assessment_evaluation_logic_endpoints
 from ._configuration_assessment import _configuration_assessment_endpoints
 from ._container_alerts import _container_alerts_endpoints
@@ -69,6 +72,7 @@ from ._firewall_policies import _firewall_policies_endpoints
 from ._foundry_logscale import _foundry_logscale_endpoints
 from ._host_group import _host_group_endpoints
 from ._hosts import _hosts_endpoints
+from ._host_migration import _host_migration_endpoints
 from ._identity_protection import _identity_protection_endpoints
 from ._image_assessment_policies import _image_assessment_policies_endpoints
 from ._incidents import _incidents_endpoints
@@ -112,8 +116,10 @@ from ._zero_trust_assessment import _zero_trust_assessment_endpoints
 api_endpoints: List[Any] = []
 api_endpoints.extend(_alerts_endpoints)
 api_endpoints.extend(_api_integrations_endpoints)
+api_endpoints.extend(_certificate_based_exclusions_endpoints)
 api_endpoints.extend(_cloud_connect_aws_endpoints)
 api_endpoints.extend(_cloud_snapshots_endpoints)
+api_endpoints.extend(_complianceassessments_endpoints)
 api_endpoints.extend(_configuration_assessment_evaluation_logic_endpoints)
 api_endpoints.extend(_configuration_assessment_endpoints)
 api_endpoints.extend(_container_alerts_endpoints)
@@ -140,6 +146,7 @@ api_endpoints.extend(_firewall_policies_endpoints)
 api_endpoints.extend(_foundry_logscale_endpoints)
 api_endpoints.extend(_host_group_endpoints)
 api_endpoints.extend(_hosts_endpoints)
+api_endpoints.extend(_host_migration_endpoints)
 api_endpoints.extend(_identity_protection_endpoints)
 api_endpoints.extend(_image_assessment_policies_endpoints)
 api_endpoints.extend(_incidents_endpoints)
@@ -182,6 +189,7 @@ api_endpoints.extend(_zero_trust_assessment_endpoints)
 
 # Deprecated endpoints
 deprecated_endpoints = []
+deprecated_endpoints.extend(_certificate_based_exclusions_deprecated)
 deprecated_endpoints.extend(_custom_ioa_deprecated)
 deprecated_endpoints.extend(_d4c_registration_deprecated)
 deprecated_endpoints.extend(_discover_deprecated)

crowdstrike-falconpy-dev-1.4.5/src/falconpydev/_endpoint/_certificate_based_exclusions.py

@@ -0,0 +1,171 @@
+"""Internal API endpoint constant library.
+
+ _______                        __ _______ __        __ __
+|   _   .----.-----.--.--.--.--|  |   _   |  |_.----|__|  |--.-----.
+|.  1___|   _|  _  |  |  |  |  _  |   1___|   _|   _|  |    <|  -__|
+|.  |___|__| |_____|________|_____|____   |____|__| |__|__|__|_____|
+|:  1   |                         |:  1   |
+|::.. . |   CROWDSTRIKE FALCON    |::.. . |    FalconPy
+`-------'                         `-------'
+
+OAuth2 API - Customer SDK
+
+This is free and unencumbered software released into the public domain.
+
+Anyone is free to copy, modify, publish, use, compile, sell, or
+distribute this software, either in source code form or as a compiled
+binary, for any purpose, commercial or non-commercial, and by any
+means.
+
+In jurisdictions that recognize copyright laws, the author or authors
+of this software dedicate any and all copyright interest in the
+software to the public domain. We make this dedication for the benefit
+of the public at large and to the detriment of our heirs and
+successors. We intend this dedication to be an overt act of
+relinquishment in perpetuity of all present and future rights to this
+software under copyright law.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
+EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
+MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.
+IN NO EVENT SHALL THE AUTHORS BE LIABLE FOR ANY CLAIM, DAMAGES OR
+OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE,
+ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR
+OTHER DEALINGS IN THE SOFTWARE.
+
+For more information, please refer to <https://unlicense.org>
+"""
+
+_certificate_based_exclusions_endpoints = [
+  [
+    "cb_exclusions_get_v1",
+    "GET",
+    "/exclusions/entities/cert-based-exclusions/v1",
+    "Find all exclusion IDs matching the query with filter",
+    "certificate_based_exclusions",
+    [
+      {
+        "type": "array",
+        "items": {
+          "type": "string"
+        },
+        "collectionFormat": "multi",
+        "description": "The ids of the exclusions to retrieve",
+        "name": "ids",
+        "in": "query",
+        "required": True
+      }
+    ]
+  ],
+  [
+    "cb_exclusions_create_v1",
+    "POST",
+    "/exclusions/entities/cert-based-exclusions/v1",
+    "Create new Certificate Based Exclusions.",
+    "certificate_based_exclusions",
+    [
+      {
+        "name": "body",
+        "in": "body",
+        "required": True
+      }
+    ]
+  ],
+  [
+    "cb_exclusions_update_v1",
+    "PATCH",
+    "/exclusions/entities/cert-based-exclusions/v1",
+    "Updates existing Certificate Based Exclusions",
+    "certificate_based_exclusions",
+    [
+      {
+        "name": "body",
+        "in": "body",
+        "required": True
+      }
+    ]
+  ],
+  [
+    "cb_exclusions_delete_v1",
+    "DELETE",
+    "/exclusions/entities/cert-based-exclusions/v1",
+    "Delete the exclusions by id",
+    "certificate_based_exclusions",
+    [
+      {
+        "type": "array",
+        "items": {
+          "type": "string"
+        },
+        "collectionFormat": "multi",
+        "description": "The ids of the exclusions to delete",
+        "name": "ids",
+        "in": "query",
+        "required": True
+      },
+      {
+        "type": "string",
+        "description": "The comment why these exclusions were deleted",
+        "name": "comment",
+        "in": "query"
+      }
+    ]
+  ],
+  [
+    "certificates_get_v1",
+    "GET",
+    "/exclusions/entities/certificates/v1",
+    "Retrieves certificate signing information for a file",
+    "certificate_based_exclusions",
+    [
+      {
+        "type": "string",
+        "description": "The SHA256 Hash of the file to retrieve certificate signing info for",
+        "name": "ids",
+        "in": "query",
+        "required": True
+      }
+    ]
+  ],
+  [
+    "cb_exclusions_query_v1",
+    "GET",
+    "/exclusions/queries/cert-based-exclusions/v1",
+    "Search for cert-based exclusions.",
+    "certificate_based_exclusions",
+    [
+      {
+        "type": "string",
+        "description": "The filter expression that should be used to limit the results.",
+        "name": "filter",
+        "in": "query"
+      },
+      {
+        "type": "integer",
+        "description": "The offset to start retrieving records from",
+        "name": "offset",
+        "in": "query"
+      },
+      {
+        "maximum": 100,
+        "type": "integer",
+        "description": "The maximum records to return. [1-100]",
+        "name": "limit",
+        "in": "query"
+      },
+      {
+        "enum": [
+          "created_by",
+          "created_on",
+          "modified_by",
+          "modified_on",
+          "name"
+        ],
+        "type": "string",
+        "description": "The sort expression that should be used to sort the results.",
+        "name": "sort",
+        "in": "query"
+      }
+    ]
+  ]
+]