crowdstrike-falconpy-dev 1.4.8.dev1__tar.gz → 1.5.0__tar.gz

{crowdstrike_falconpy_dev-1.4.8.dev1 → crowdstrike_falconpy_dev-1.5.0}/AUTHORS.md

@@ -105,6 +105,7 @@ This has been a critical element in the development of the FalconPy project.
 + `@am-cs-se`
 + Jesko, `@jhhcs`
 + Evan Stoner, `@evanstoner`
++ Gage Schaffer, `@Gage-BCCA`
 
 
 ## Sponsors

{crowdstrike_falconpy_dev-1.4.8.dev1 → crowdstrike_falconpy_dev-1.5.0}/CHANGELOG.md

@@ -1,3 +1,233 @@
+# Version 1.5.0
+## Added features and functionality
++ Added: Streaming download functionality. Closes #965.
+    - `_api_request/_request_behavior.py`
+    - `_api_request/_request.py`
+    - `_util/_functions.py`
+    - `_util/_uber.py`
+    - `api_complete/_advanced.py`
+    > Unit testing expanded to complete code coverage.
+    - `tests/test_api_request.py`
+    - `tests/test_ngsiem.py`
+
++ Added: Streaming download support for the _GetArtifacts_, _GetMemoryDumpExtractedStrings_, _GetMemoryDumpHexDump_, _GetMemoryDump_, and _GetSampleV2_ operations within the __Falcon Intelligence Sandbox__ service collection. Related to #965.
+    - `falconx_sandbox.py`
+
++ Added: Streaming download support for the _DownloadFeedArchive_ operation within the __Intelligence Feeds__ service collection. Related to #965.
+    - `intelligence_feeds.py`
+
++ Added: Streaming download support for the _GetMalQueryDownloadV1_ and _GetMalQueryEntitiesSamplesFetchV1_ operations within the __MalQuery__ service collection. Related to #965.
+    - `malquery.py`
+
++ Added: Streaming download support for the _GetLookupV1_, _GetLookupFromPackageWithNamespaceV1_, and _GetLookupFromPackageV1_ operations within the __NGSIEM__ service collection. Related to #965.
+    - `ngsiem.py`
+
++ Added: Streaming download support for the _RTR_GetExtractedFileContents_ operation within the __Real Time Response__ service collection. Related to #965.
+    - `real_time_response.py`
+
++ Added: Streaming download support for the _GetSampleV3_ operation within the __Sample Uploads__ service collection. Related to #965.
+    - `sample_uploads.py`
+
++ Added: Streaming download support for the _DownloadSensorInstallerById_ and _DownloadSensorInstallerByIdV2_ operations within the __Sensor Download__ service collection. Related to #965.
+    - `sensor_download.py`
+
++ Added: Added new _RunIntegrationTaskAdmin_ and _RunIntegrationTaskV2_ operations to the __ASPM__ service collection.
+    - `_endpoint/_aspm.py`
+    - `aspm.py`
+    > Unit testing expanded to complete code coverage.
+    - `tests/test_aspm.py`
+
++ Added: Added `remove-pinned-content-version` and `set-pinned-content-version` as allowed values for the `action_name` parameter in the _performContentUpdatePoliciesAction_ operation within the __Content Update Policies__ service collection.
+    - `_endpoint/_content_update_policies.py`
+    - `content_update_policies.py`
+
++ Added: Added new _queryPinnableContentVersions_ operation to the __Content Update Policies__ service collection.
+    - `_endpoint/_content_update_policies.py`
+    - `content_update_policies.py`
+    > Unit testing expanded to complete code coverage.
+    - `tests/test_content_update_policies.py`
+
++ Added: Added new `tags` query string parameter to the _GetCSPMAwsConsoleSetupURLs_ operation within the __CSPM Registration__ service collection.
+    - `_endpoint/_cspm_registration.py`
+    - `cspm_registration.py`
+
++ Added: Added new `tags` query string parameter to the _GetD4CAWSAccountScriptsAttachment_ operation within the __D4C Registration__ service collection.
+    - `_endpoint/_d4c_registration.py`
+    - `d4c_registration.py`
+
+## Issues resolved
++ Fixed: Path variable handling issue with Uber class usage of __NGSIEM__ service collection operations. Closes #1324.
+    - `_util/_uber.py`
+    - Thanks go out to @tsullivan06 for identifying and reporting this issue. 🙇
+
++ Fixed: Resolved typo for `is_descendant_process` parameter within the _exclusion_payload_ payload handler used by the __SensorVisibilityExclusions__ Service Class. Closes #1325.
+    - `_payload/_generic.py`
+    - `sensor_visibility_exclusions.py`
+
++ Fixed: Query string parameter keyword argument handling issue in the _PostAggregatesAlertsV2_, _PatchEntitiesAlertsV3_, and _PostEntitiesAlertsV2_ operations within the __Alerts__ Service Class. Closes #1326.
+    - `alerts.py`
+
++ Fixed: Resolved issue with not checking for a provided `id` parameter within the _content_update_policy_payload_ payload handler used by the __ContentUpdatePolicies__ Service Class. Closes #1323.
+    - `_payload/_content_update_policy.py`
+
++ Fixed: Resolved issue with not parsing the `ids` parameter when provided a comma-delimited list within the _content_update_policy_action_payload_ payload handler used by the __ContentUpdatePolicies__ Service Class. Closes #1321.
+    - `_payload/_content_update_policy.py`
+
++ Updated: Updated docstring for the `create_policies` method (_createContentUpdatePolicies_ operation) within the __ContentUpdatePolicies__ Service Class. Closes #1322.
+    - `content_update_policies.py`
+
++ Fixed: Updated payload handler to create an `exclusions` instead of `resources` list for the _cb_exclusions_create_v1_ and _cb_exclusions_update_v1_ operations within the __CertificateBasedExclusions__ Service Class.
+    - `_payload/_certificate_based_exclusions.py`
+    - `certificate_based_exclusions.py`
+
+## Other
++ Removed: Removed decommissioned _cloud_registration_aws_validate_accounts_ from the __Cloud AWS Registration__ service collection.
+    - `_endpoint/_cloud_aws_registration.py`
+    - `_endpoint/deprecated/_cloud_aws_registration.py`
+    - `cloud_aws_registration.py`
+    > Unit testing adjusted to reflect new code coverage requirements.
+    - `tests/test_cloud_aws_registration.py`
+
++ Updated: Cosmetic update to the `filter` parameter description in the _cloud_security_registration_oci_get_account_ operation within the __Cloud OCI Registration__ service collection.
+    - `_endpoint/_cloud_oci_registration.py`
+    - `_endpoint/deprecated/_cloud_oci_registration.py`
+
++ Updated: Cosmetic update to the allowed values enum for the `sort` parameter within the _CombinedHiddenDevicesByFilter_ and _CombinedDevicesByFilter_ operations within the __Hosts__ service collection.
+    - `_endpoint/_hosts.py`
+
++ Renamed: Renamed `custom_role_name` parameter to `iam_role_arn` in the _GetD4CAWSAccountScriptsAttachment_ operation within the __D4C Registration__ service collection.
+    - `_endpoint/_d4c_registration.py`
+    - `d4c_registration.py`
+    > Unit testing expanded to complete code coverage.
+    - `tests/test_d4c_registration.py`
+
+---
+
+# Version 1.4.9
+## Added features and functionality
++ Added: Added new __CAO Hunting__ service collection with 4 new operations.
+    - `_endpoint/__init__.py`
+    - `_endpoint/_cao_hunting.py`
+    - `_payload/_generic.py`
+    - `__init__.py`
+    - `cao_hunting.py`
+    > Unit testing expanded to complete code coverage.
+    - `tests/test_cao_hunting.py`
+
++ Added: Added new _cloud_security_assets_combined_compliance_by_account_ operation to the __Cloud Security Assets__ service collection.
+    - `_endpoint/_cloud_security_assets.py`
+    - `_endpoint/deprecated/_cloud_security_assets.py`
+    - `cloud_security_assets.py`
+    > Unit testing expanded to complete code coverage.
+    - `tests/test_cloud_security_assets.py`
+
++ Added: Added 6 new operations to the __Custom Storage__ service collection.
+    - _ListCollections_
+    - _DescribeCollections_
+    - _DescribeCollection_
+    - _ListSchemas_
+    - _GetSchema_
+    - _GetSchemaMetadata_
+    - `_endpoint/_custom_storage.py`
+    - `_util/_functions.py`
+    - `custom_storage.py`
+    > Unit testing expanded to complete code coverage.
+    - `tests/test_custom_storage.py`
+
++ Added: Added new __FaaS Execution__ service collection with 1 new operation.
+    - _ReadRequestBody_
+    - `_endpoint/__init__.py`
+    - `_endpoint/_faas_execution.py`
+    - `__init__.py`
+    - `faas_execution.py`
+    > Unit testing expanded to complete code coverage.
+    - `tests/test_faas_execution.py`
+
++ Added: Added new _ReadClusterCombinedV2_ operation to the __Kubernetes Protection__ service collection.
+    - `_endpoint/_kubernetes_protection.py`
+    - `kubernetes_protection.py`
+    > Unit testing expanded to complete code coverage.
+    - `tests/test_kubernetes_protection.py`
+
++ Added: Added _aggregateUsersV1_ operation to the __User Management__ service collection.
+    - `_endpoint/_user_management.py`
+    - `user_management.py`
+    > Unit testing expanded to complete code coverage.
+    - `tests/test_user_management.py`
+
+## Other
++ Updated: Cosmetic update to `filter` and `sort` parameter descriptions in the _cloud_security_registration_oci_get_account_ operation of the __Cloud OCI Registration__ service collection.
+    - `_endpoint/_cloud_oci_registration.py`
+    - `_endpoint/deprecated/_cloud_oci_registration.py`
+
++ Removed: Removed the _cloud_security_assets_entities_artifacts_get_ operation from the __Cloud Security Assets__ service collection.
+    - `_endpoint/_cloud_security_assets.py`
+    - `_endpoint/deprecated/_cloud_security_assets.py`
+    - `cloud_security_assets.py`
+    > Unit testing updated to reflect currently available operations.
+    - `tests/test_cloud_security_assets.py`
+
++ Added: Added `service_category` as an allowed value for the `sort` parameter in the __cloud_security_assets_queries__ operation within the __Cloud Security Assets__ service collection.
+    - `_endpoint/_cloud_security_assets.py`
+    - `cloud_security_assets.py`
+
++ Renamed: Renamed to the __Compliance Assessments__ service collection to __Container Image Compliance__. Legacy service collection name maintained as an alias within the Service Class.
+    - `_endpoint/__init__.py`
+    - `_endpoint/_compliance_assessments.py` (Removed)
+    - `_endpoint/_container_image_compliance.py`
+    - `__init__.py`
+    - `compliance_assessments.py` -> `container_image_compliance.py`
+    > Unit testing updated to reflect new code pattern.
+    - `tests/test_compliance_assessments.py` -> `tests/test_container_compliance.py`
+
++ Updated: Cosmetic update to the `offset` parameter description in the _CombinedImageByVulnerabilityCount_ operation within the __Container Images__ service collection.
+    - `_endpoint/_container_images.py`
+
++ Added: Added `ai_related` as an allowed value for the `filter` parameter in 10 operations within the __Kubernetes Protection__ service collection.
+    - _FindContainersByContainerRunTimeVersion_
+    - _GroupContainersByManaged_
+    - _ReadContainersByDateRangeCount_
+    - _ReadContainerImageDetectionsCountByDate_
+    - _ReadVulnerableContainerImageCount_
+    - _ReadContainerCount_
+    - _ReadContainersSensorCoverage_
+    - _ReadContainerVulnerabilitiesBySeverityCount_
+    - _ReadDistinctContainerImageCount_
+    - _ReadContainerImagesByMostUsed_
+    - _ReadContainerCombined_
+    - `_endpoint/_kubernetes_protection.py`
+    - `kubernetes_protection.py`
+
++ Added: Added multiple new allowed values for the `filter` parameter in the _ReadClusterCombined_ operation within the __Kubernetes Protection__ service collection.
+    - `kubernetes_protection.py`
+
++ Added: Added `containers_impacted_ai_related` as an allowed value for the `filter` parameter in 2 operations within the __Kubernetes Protection__ service collection.
+    - _SearchAndReadKubernetesIomEntities_
+    - _SearchKubernetesIoms_
+    - `_endpoint/_kubernetes_protection.py`
+    - `kubernetes_protection.py`
+
++ Updated: Added `host_info.instance_state` as an allowed value for the `filter` parameter in the _combinedQueryVulnerabilities_ and _queryVulnerabilities_ operations within the __Spotlight Vulnerabilities__ service collection.
+    - `_endpoint/_spotlight_vulnerabilities.py`
+
++ Updated: Added `accessed_by_process` as an allowed value to the `edge_type` parameter in the _combined_edges_get_ operation within the __ThreatGraph__ service collection.
+    - `_endpoint/_threatgraph.py`
+    - `threatgraph.py`
+
++ Updated: Added `expires_at` as an allowed value for the `filter` and `sort` parameters in the _combinedUserRolesV1_ operation within the __User Management__ service collection.
+    - `_endpoint/_user_management.py`
+    - `user_management.py`
+
++ Updated: Added `has_temporary_roles` as an allowed value for the `filter` and `sort` parameters in the _queryUserV1_ operation within the __User Management__ service collection.
+    - `_endpoint/_user_management.py`
+    - `user_management.py`
+
++ Updated: Added `direct_assigned_cids` and `status` as allowed values for the `filter` parameter in the _queryUserV1_ operation within the __User Management__ service collection.
+    - `_endpoint/_user_management.py`
+    - `user_management.py`
+
+---
+
 # Version 1.4.8
 ## Added features and functionality
 + Added: Added 1 new operation to the __Alerts__ service collection.
@@ -297,6 +527,12 @@
 + Fixed: Payload handler / docstring issue with _entities_rules_patch_v1_ operation within the __CorrelationRules__ Service Class.  Closes #1294.
     - `correlation_rules.py`
 
++ Fixed: Added missing keyword arguments for updated body payloads in the __CSPM Registration__ Service Class. Closes #1273.
+    - `_payload/_cspm_registration.py`
+    - `cspm_registration.py`
+    > Unit testing expanded to complete code coverage.
+    - `tests/test_cspm_registration.py`
+
 + Fixed: Pylance issue with type hints for Service Class methods when pythonic mode is being used. Closes #1274.
     - `alerts.py`
     - `api_integrations.py`

{crowdstrike_falconpy_dev-1.4.8.dev1 → crowdstrike_falconpy_dev-1.5.0}/PKG-INFO

@@ -1,10 +1,10 @@
 Metadata-Version: 2.4
 Name: crowdstrike-falconpy-dev
-Version: 1.4.8.dev1
+Version: 1.5.0
 Summary: The CrowdStrike Falcon SDK for Python
 Project-URL: Documentation, https://www.falconpy.io
 Project-URL: Homepage, https://github.com/CrowdStrike/falconpy
-Project-URL: Source, https://github.com/CrowdStrike/falconpy/tree/main/src/falconpy
+Project-URL: Source, https://github.com/CrowdStrike/falconpy/tree/main/src/falconpydev
 Project-URL: Tracker, https://github.com/CrowdStrike/falconpy/issues
 Author-email: CrowdStrike <falconpy@crowdstrike.com>
 Maintainer-email: Joshua Hiller <falconpy@crowdstrike.com>
@@ -79,6 +79,10 @@ Description-Content-Type: text/markdown
 
 # FalconPy - The CrowdStrike Falcon SDK for Python
 
+![Development Package](https://img.shields.io/badge/-Development%20Package-red?style=for-the-badge&logo=data:image/png;base64,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)
+
+> This is the development package. Please check https://pypi.org/project/crowdstrike-falconpy/ for the stable release.
+
 [![Package Status](https://img.shields.io/pypi/status/crowdstrike-falconpy?label=package%20status)](https://pypi.org/project/crowdstrike-falconpy/)
 [![PyPI](https://img.shields.io/pypi/v/crowdstrike-falconpy?label=current%20version)](https://pypi.org/project/crowdstrike-falconpy/#history)
 [![Release date](https://img.shields.io/github/release-date/CrowdStrike/falconpy)](https://github.com/CrowdStrike/falconpy/releases)
@@ -194,7 +198,7 @@ While the [usage syntax](https://www.falconpy.io/Usage/Basic-Uber-Class-usage.ht
 Stable releases of FalconPy are available on the Python Package Index. In a terminal, execute the following command:
 
 ```shell
-python3 -m pip install crowdstrike-falconpy
+python3 -m pip install crowdstrike-falconpy-dev
 ```
 
 Once installed, you can immediately begin using CrowdStrike functionality in your Python projects.
@@ -202,7 +206,7 @@ Once installed, you can immediately begin using CrowdStrike functionality in you
 ```python
 """CrowdStrike FalconPy Quick Start."""
 import os
-from falconpy import Hosts
+from falconpydev import Hosts
 
 # Use the API Clients and Keys page within your Falcon console to generate credentials.
 # You will need to assign the Hosts: READ scope to your client to run this example.

{crowdstrike_falconpy_dev-1.4.8.dev1 → crowdstrike_falconpy_dev-1.5.0}/README.md

@@ -5,6 +5,10 @@
 
 # FalconPy - The CrowdStrike Falcon SDK for Python
 
+![Development Package](https://img.shields.io/badge/-Development%20Package-red?style=for-the-badge&logo=data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAABIAAAAOCAYAAAAi2ky3AAABhWlDQ1BJQ0MgcHJvZmlsZQAAKJF9kT1Iw1AUhU9TpaIVBzuIOGSoDmJBVEQ3rUIRKoRaoVUHk5f+CE0akhQXR8G14ODPYtXBxVlXB1dBEPwBcXNzUnSREu9LCi1ifPB4H+e9c7jvXkColZhmtY0Cmm6bqURczGRXxNAruhAEMI1hmVnGrCQl4bu+7hHg512MZ/m/+3N1qzmLAQGReIYZpk28Tjy5aRuc94kjrCirxOfEIyYVSPzIdcXjN84FlwWeGTHTqTniCLFYaGGlhVnR1IgniKOqplO+kPFY5bzFWStVWKNO/sNwTl9e4jrtASSwgEVIEKGggg2UYCNGp06KhRTdx338/a5fIpdCrg0wcsyjDA2y6wefwe/eWvnxMS8pHAfaXxznYxAI7QL1quN8HztO/QQIPgNXetNfrgFTn6RXm1r0COjZBi6um5qyB1zuAH1PhmzKrsTnL+TzwPsZjSkL9N4Cnate3xr3OH0A0tSr5A1wcAgMFSh7zeffHa19+/dNo38/hq9yr+iELI0AAAAGYktHRAAAAAAAAPlDu38AAAAJcEhZcwAACxMAAAsTAQCanBgAAAAHdElNRQflDAsTByz7Va2cAAAAGXRFWHRDb21tZW50AENyZWF0ZWQgd2l0aCBHSU1QV4EOFwAAAYBJREFUKM+lkjFIlVEYht/zn3sFkYYUyUnIRcemhCtCU6JQOLiIU+QeJEQg6BBIm0s4RBCBLjq5OEvgJC1uOniJhivesLx17/97/vO9b4NK4g25157hfHCGB773/cA0HZIEAKiMj+LWiOxljG/i96pnCFP58XHnrWX2+9cj0dYl9Yu2FE9/9rXrcAAgs2eSyiBfOe/XRD503h/CuffOubQVUXL+Jh9BllzBbyJJBgDclVkO4Kukd8zzkXJbeUljIldFTstsmSHM6S81ma2KfPKlFdkGAMY4wzx/bbXapMy21My+YizdKNq5mDzLkrxafSxySFKjSWX2oTmjKzz4vN0r2lOFcL/Q3V0/mX95ILMXTTGYVfaut/aP2+oCMAvnZgCcsF5fcR0dg65YHAdwB+QApADvu0AuOe/ftlJAD7Nsgmm6yBjDtfWORJZlNtFyo/lR5Z7MyheKA5ktSur7sTAHazSG27pehjAiaVfkN8b4XFIJ/wOzbOx07VNRUuHy7w98CzCcGPyWywAAAABJRU5ErkJggg==)
+
+> This is the development package. Please check https://pypi.org/project/crowdstrike-falconpy/ for the stable release.
+
 [![Package Status](https://img.shields.io/pypi/status/crowdstrike-falconpy?label=package%20status)](https://pypi.org/project/crowdstrike-falconpy/)
 [![PyPI](https://img.shields.io/pypi/v/crowdstrike-falconpy?label=current%20version)](https://pypi.org/project/crowdstrike-falconpy/#history)
 [![Release date](https://img.shields.io/github/release-date/CrowdStrike/falconpy)](https://github.com/CrowdStrike/falconpy/releases)
@@ -120,7 +124,7 @@ While the [usage syntax](https://www.falconpy.io/Usage/Basic-Uber-Class-usage.ht
 Stable releases of FalconPy are available on the Python Package Index. In a terminal, execute the following command:
 
 ```shell
-python3 -m pip install crowdstrike-falconpy
+python3 -m pip install crowdstrike-falconpy-dev
 ```
 
 Once installed, you can immediately begin using CrowdStrike functionality in your Python projects.
@@ -128,7 +132,7 @@ Once installed, you can immediately begin using CrowdStrike functionality in you
 ```python
 """CrowdStrike FalconPy Quick Start."""
 import os
-from falconpy import Hosts
+from falconpydev import Hosts
 
 # Use the API Clients and Keys page within your Falcon console to generate credentials.
 # You will need to assign the Hosts: READ scope to your client to run this example.

{crowdstrike_falconpy_dev-1.4.8.dev1 → crowdstrike_falconpy_dev-1.5.0}/pyproject.toml

@@ -69,7 +69,7 @@ dev = [
 [project.urls]
 Documentation = "https://www.falconpy.io"
 Homepage = "https://github.com/CrowdStrike/falconpy"
-Source = "https://github.com/CrowdStrike/falconpy/tree/main/src/falconpy"
+Source = "https://github.com/CrowdStrike/falconpy/tree/main/src/falconpydev"
 Tracker = "https://github.com/CrowdStrike/falconpy/issues"
 
 [tool.hatch.version]
@@ -96,4 +96,4 @@ package = [
     "src/falconpydev"
 ]
 include = ["src/falconpydev"]
-sources = ["src"]
+sources = ["src"]

{crowdstrike_falconpy_dev-1.4.8.dev1 → crowdstrike_falconpy_dev-1.5.0}/src/falconpydev/__init__.py

@@ -91,13 +91,14 @@ from .alerts import Alerts
 from .api_integrations import APIIntegrations
 from .api_complete import APIHarness, APIHarnessV2
 from .aspm import ASPM
+from .cao_hunting import CAOHunting
 from .certificate_based_exclusions import CertificateBasedExclusions
 from .cloud_aws_registration import CloudAWSRegistration
 from .cloud_azure_registration import CloudAzureRegistration
 from .cloud_oci_registration import CloudOCIRegistration
 from .cloud_security_assets import CloudSecurityAssets
 from .cloud_snapshots import CloudSnapshots
-from .compliance_assessments import ComplianceAssessments
+from .container_image_compliance import ContainerImageCompliance, ComplianceAssessments
 from .configuration_assessment_evaluation_logic import ConfigurationAssessmentEvaluationLogic
 from .configuration_assessment import ConfigurationAssessment
 from .container_alerts import ContainerAlerts
@@ -123,6 +124,7 @@ from .downloads import Downloads
 from .drift_indicators import DriftIndicators
 from .event_streams import EventStreams
 from .exposure_management import ExposureManagement
+from .faas_execution import FaaSExecution
 from .falcon_complete_dashboard import CompleteDashboard
 from .falcon_container import FalconContainer
 from .falconx_sandbox import FalconXSandbox
@@ -224,7 +226,8 @@ __all__ = [
     "DataScanner", "SensorUsage", "Downloads", "DeliverySettings", "ASPM", "IntelligenceFeeds",
     "NGSIEM", "CorrelationRules", "CloudAWSRegistration", "CloudAzureRegistration",
     "CloudOCIRegistration", "CloudSecurityAssets", "Deployments", "ServerlessVulnerabilities",
-    "DeviceContent", "IntelligenceIndicatorGraph", "ContentUpdatePolicies"
+    "DeviceContent", "IntelligenceIndicatorGraph", "ContentUpdatePolicies", "CAOHunting",
+    "ContainerImageCompliance", "FaaSExecution"
     ]
 """
 This is free and unencumbered software released into the public domain.

{crowdstrike_falconpy_dev-1.4.8.dev1 → crowdstrike_falconpy_dev-1.5.0}/src/falconpydev/_api_request/_request.py

@@ -74,6 +74,7 @@ class APIRequest:
             # Behavioral flags that alter the behavior of request processing
             self._behavior = RequestBehavior(expand_result=initializer.get("expand_result", False),
                                              container=initializer.get("container", False),
+                                             stream=initializer.get("stream", False),
                                              authenticating=initializer.get("authenticating", False),
                                              perform=initializer.get("perform", True),
                                              body_validator=initializer.get("body_validator", None),
@@ -193,6 +194,11 @@ class APIRequest:
         """Return a boolean indicating if this is a container API request."""
         return self.behavior.container
 
+    @property
+    def stream(self) -> bool:
+        """Return a boolean indicating if this is a streaming download request."""
+        return self.behavior.stream
+
     @property
     def authenticating(self) -> bool:
         """Return a boolean indicating if this is an authentication request."""

{crowdstrike_falconpy_dev-1.4.8.dev1 → crowdstrike_falconpy_dev-1.5.0}/src/falconpydev/_api_request/_request_behavior.py

@@ -49,6 +49,7 @@ class RequestBehavior:
     def __init__(self,
                  expand_result: Optional[bool] = False,
                  container: Optional[bool] = False,
+                 stream: Optional[bool] = False,
                  authenticating: Optional[bool] = False,
                  perform: Optional[bool] = True,
                  body_validator: Optional[Dict[str, Any]] = None,
@@ -63,6 +64,10 @@ class RequestBehavior:
         if isinstance(container, bool):
             self._container = container
 
+        self._stream = False
+        if isinstance(stream, bool):
+            self._stream = stream
+
         self._authenticating = False
         if isinstance(authenticating, bool):
             self._authenticating = authenticating
@@ -102,6 +107,16 @@ class RequestBehavior:
         """Change the container value."""
         self._container = value
 
+    @property
+    def stream(self) -> bool:
+        """Indicate if this request is for a streaming download."""
+        return self._stream
+
+    @stream.setter
+    def stream(self, value: bool):
+        """Change the stream value."""
+        self._stream = value
+
     @property
     def authenticating(self) -> bool:
         """Indicate if this request is for authentication."""

{crowdstrike_falconpy_dev-1.4.8.dev1 → crowdstrike_falconpy_dev-1.5.0}/src/falconpydev/_endpoint/__init__.py

@@ -50,6 +50,7 @@ from .deprecated import _deprecated_class_mapping
 from ._alerts import _alerts_endpoints
 from ._api_integrations import _api_integrations_endpoints
 from ._aspm import _aspm_endpoints
+from ._cao_hunting import _cao_hunting_endpoints
 from ._certificate_based_exclusions import _certificate_based_exclusions_endpoints
 from ._cloud_aws_registration import _cloud_aws_registration_endpoints
 from ._cloud_azure_registration import _cloud_azure_registration_endpoints
@@ -57,7 +58,7 @@ from ._cloud_oci_registration import _cloud_oci_registration_endpoints
 from ._cloud_security_assets import _cloud_security_assets_endpoints
 from ._cloud_connect_aws import _cloud_connect_aws_endpoints
 from ._cloud_snapshots import _cloud_snapshots_endpoints
-from ._compliance_assessments import _compliance_assessments_endpoints
+from ._container_image_compliance import _container_image_compliance_endpoints
 from ._configuration_assessment_evaluation_logic import _configuration_assessment_evaluation_logic_endpoints
 from ._configuration_assessment import _configuration_assessment_endpoints
 from ._container_alerts import _container_alerts_endpoints
@@ -82,6 +83,7 @@ from ._downloads import _downloads_endpoints
 from ._drift_indicators import _drift_indicators_endpoints
 from ._event_streams import _event_streams_endpoints
 from ._exposure_management import _exposure_management_endpoints
+from ._faas_execution import _faas_execution_endpoints
 from ._falcon_complete_dashboard import _falcon_complete_dashboard_endpoints
 from ._falcon_container import _falcon_container_endpoints
 from ._falconx_sandbox import _falconx_sandbox_endpoints
@@ -142,6 +144,7 @@ api_endpoints: List[Any] = []
 api_endpoints.extend(_alerts_endpoints)
 api_endpoints.extend(_api_integrations_endpoints)
 api_endpoints.extend(_aspm_endpoints)
+api_endpoints.extend(_cao_hunting_endpoints)
 api_endpoints.extend(_certificate_based_exclusions_endpoints)
 api_endpoints.extend(_cloud_connect_aws_endpoints)
 api_endpoints.extend(_cloud_aws_registration_endpoints)
@@ -149,7 +152,7 @@ api_endpoints.extend(_cloud_azure_registration_endpoints)
 api_endpoints.extend(_cloud_oci_registration_endpoints)
 api_endpoints.extend(_cloud_security_assets_endpoints)
 api_endpoints.extend(_cloud_snapshots_endpoints)
-api_endpoints.extend(_compliance_assessments_endpoints)
+api_endpoints.extend(_container_image_compliance_endpoints)
 api_endpoints.extend(_configuration_assessment_evaluation_logic_endpoints)
 api_endpoints.extend(_configuration_assessment_endpoints)
 api_endpoints.extend(_container_alerts_endpoints)
@@ -174,6 +177,7 @@ api_endpoints.extend(_downloads_endpoints)
 api_endpoints.extend(_drift_indicators_endpoints)
 api_endpoints.extend(_event_streams_endpoints)
 api_endpoints.extend(_exposure_management_endpoints)
+api_endpoints.extend(_faas_execution_endpoints)
 api_endpoints.extend(_falcon_complete_dashboard_endpoints)
 api_endpoints.extend(_falcon_container_endpoints)
 api_endpoints.extend(_falconx_sandbox_endpoints)

{crowdstrike_falconpy_dev-1.4.8.dev1 → crowdstrike_falconpy_dev-1.5.0}/src/falconpydev/_endpoint/_aspm.py

@@ -665,6 +665,69 @@ _aspm_endpoints = [
       }
     ]
   ],
+  [
+    "GetIntegrationTasksAdmin",
+    "GET",
+    "/aspm-api-gateway/api/v1/integration_tasks/admin",
+    "Get all the integration tasks, requires admin scope",
+    "aspm",
+    [
+      {
+        "type": "integer",
+        "name": "integration_task_type",
+        "in": "query"
+      },
+      {
+        "type": "string",
+        "name": "category",
+        "in": "query"
+      },
+      {
+        "type": "integer",
+        "name": "offset",
+        "in": "query"
+      },
+      {
+        "type": "integer",
+        "name": "limit",
+        "in": "query"
+      },
+      {
+        "enum": [
+          "name",
+          "id",
+          "integrationTask"
+        ],
+        "type": "string",
+        "name": "orderBy",
+        "in": "query"
+      },
+      {
+        "enum": [
+          "asc",
+          "desc"
+        ],
+        "type": "string",
+        "name": "direction",
+        "in": "query"
+      },
+      {
+        "type": "integer",
+        "name": "integration_task_types",
+        "in": "query"
+      },
+      {
+        "type": "integer",
+        "name": "ids",
+        "in": "query"
+      },
+      {
+        "type": "string",
+        "name": "names",
+        "in": "query"
+      }
+    ]
+  ],
   [
     "GetIntegrationTasksMetadata",
     "GET",
@@ -824,6 +887,58 @@ _aspm_endpoints = [
       }
     ]
   ],
+  [
+    "RunIntegrationTaskAdmin",
+    "POST",
+    "/aspm-api-gateway/api/v1/integration_tasks/{}/run/admin",
+    "Run an integration task by its ID - for admin scope",
+    "aspm",
+    [
+      {
+        "pattern": "[0-9]+",
+        "type": "integer",
+        "name": "ID",
+        "in": "path",
+        "required": True
+      },
+      {
+        "type": "string",
+        "name": "category",
+        "in": "query"
+      },
+      {
+        "name": "body",
+        "in": "body",
+        "required": True
+      }
+    ]
+  ],
+  [
+    "RunIntegrationTaskV2",
+    "POST",
+    "/aspm-api-gateway/api/v1/integration_tasks/{}/run/v2",
+    "Run an integration task by its ID",
+    "aspm",
+    [
+      {
+        "pattern": "[0-9]+",
+        "type": "integer",
+        "name": "ID",
+        "in": "path",
+        "required": True
+      },
+      {
+        "type": "string",
+        "name": "category",
+        "in": "query"
+      },
+      {
+        "name": "body",
+        "in": "body",
+        "required": True
+      }
+    ]
+  ],
   [
     "GetIntegrationTypes",
     "GET",