crowdstrike-falconpy-dev 1.5.2__tar.gz → 1.5.4__tar.gz

{crowdstrike_falconpy_dev-1.5.2 → crowdstrike_falconpy_dev-1.5.4}/AUTHORS.md

@@ -106,6 +106,7 @@ This has been a critical element in the development of the FalconPy project.
 + Jesko, `@jhhcs`
 + Evan Stoner, `@evanstoner`
 + Gage Schaffer, `@Gage-BCCA`
++ `@JamesLochheadCRWD`
 
 
 ## Sponsors

{crowdstrike_falconpy_dev-1.5.2 → crowdstrike_falconpy_dev-1.5.4}/CHANGELOG.md

@@ -1,3 +1,285 @@
+# Version 1.5.4
+## Added features and functionality
++ Added: Added _tag_key_ and _tag_value_ as allowed values for the `filter` parameter in the _cloud_security_assets_combined_compliance_by_account_ operation within the __Cloud Security Assets__ service collection.
+    - `_endpoint/_cloud_security_assets.py`
+    - `_endpoint/deprecated/_cloud_security_assets.py`
+
++ Added: Added 5 new operations to the __Cloud Azure Registration__ service collection.
+    - _cloud_registration_azure_get_registration_
+    - _cloud_registration_azure_create_registration_
+    - _cloud_registration_azure_update_registration_
+    - _cloud_registration_azure_delete_registration_
+    - _download_azure_script_
+    - `_endpoint/_cloud_azure_registration.py`
+    - `_endpoint/deprecated/_cloud_azure_registration.py`
+    - `_payload/__init__.py`
+    - `_payload/_cloud_azure_registration.py`
+    - `cloud_azure_registration.py`
+    > Unit testing expanded to complete code coverage.
+    - `tests/test_cloud_azure_registration.py`
+
++ Added: Added _insights.date_value_, _insights.integer_value_, _insights.string_list_value_, and _insights.string_value_ as allowed values for the `filter` parameter in the _cloud_security_assets_queries_ operation within the __Cloud Security Assets__ service collection.
+    - `_endpoint/_cloud_security_assets.py`
+    - `_endpoint/deprecated/_cloud_security_assets.py`
+
++ Added: Added new _getCloudEventIDs_ operation to the __CSPM Registration__ service collection.
+    - `_endpoint/_cspm_registration.py`
+    - `cspm_registration.py`
+    > Unit testing expanded to complete code coverage.
+    - `tests/test_cspm_registration.py`
+
++ Added: Added new _GetEntityIDsByQueryPOSTV2_ operation to the __Deployments__ service collection. This operation is now the default operation used when calling the PEP 8 compliant `get_release_notes` method within the service class. The legacy operation is still available using the `get_release_notes_v1` method.
+    - `_endpoint/_deployments.py`
+    - `deployments.py`
+    > Unit testing expanded to complete code coverage.
+    - `tests/test_deployments.py`
+
++ Added: Added new _query_external_assets_v2_ operation to the __Exposure Management__ service collection. This operation is now the default operation used when calling the PEP 8 compliant `query_assets` method within the service class. The legacy operation is still available using the `query_assets_v1` method.
+    - `_endpoint/_exposure_management.py`
+    - `_endpoint/deprecated/_exposure_management.py`
+    - `exposure_management.py`
+    > Unit testing expanded to complete code coverage.
+    - `tests/test_exposure_management.py`
+
++ Added: Added 2 new operations to the __Falcon Container__ service collection.
+    - _PostImageScanInventory_
+    - _HeadImageScanInventory_
+    - `_endpoint/_falcon_container.py`
+    - `_payload/__init__.py`
+    - `_payload/_container.py`
+    - `falcon_container.py`
+    > Unit testing expanded to complete code coverage.
+    - `tests/test_falcon_container.py`
+
++ Added: Added new _QueryAlertIdsByFilterV2_ operation to the __Falcon Complete Dashboard__ service collection. This operation is now the default operation used when calling the PEP 8 compliant `query_alert_ids_by_filter` method within the service class. The legacy operation is still available using the `query_alert_ids_by_filter_v1` method.
+    - `_endpoint/_falcon_complete_dashboard.py`
+    - `falcon_complete_dashboard.py`
+    > Unit testing expanded to complete code coverage.
+    - `tests/test_falcon_complete_dashboard.py`
+
++ Added: Added new _QueryMalwareEntities_ operation to the __Intel__ service collection.
+    - `_endpoint/_intel.py`
+    - `intel.py`
+    > Unit testing expanded to complete code coverage.
+    - `tests/test_intel.py`
+
++ Added: Added new _LookupIndicators_ operation to the __Intelligence Indicator Graph__ service collection.
+    - `_endpoint/_intelligence_indicator_graph.py`
+    - `intelligence_indicator_graph.py`
+    > Unit testing expanded to complete code coverage.
+    - `tests/test_intelligence_indicator_graph.py`
+
++ Added: Added _node_uid_ as an allowed `filter` value to the _ReadNodesByCloudCount_, _ReadNodesByContainerEngineVersionCount_, _ReadNodesByDateRangeCount_, _ReadNodeCount_ and _ReadNodeCombined_ operations within the __Kubernetes Protection__ service collection. Added a new PEP 8 alias for the _ReadNodeCount_ operation.
+    - `_endpoint/_kubernetes_protection.py`
+    - `kubernetes_protection.py`
+
++ Added: Added the new __IT Automation__ service collection with 37 operations.
+    - _ITAutomationGetAssociatedTasks_
+    - _ITAutomationCombinedScheduledTasks_
+    - _ITAutomationGetTaskExecutionsByQuery_
+    - _ITAutomationGetTaskGroupsByQuery_
+    - _ITAutomationGetTasksByQuery_
+    - _ITAutomationRunLiveQuery_
+    - _ITAutomationUpdatePolicyHostGroups_
+    - _ITAutomationUpdatePoliciesPrecedence_
+    - _ITAutomationGetPolicies_
+    - _ITAutomationCreatePolicy_
+    - _ITAutomationUpdatePolicies_
+    - _ITAutomationDeletePolicy_
+    - _ITAutomationGetScheduledTasks_
+    - _ITAutomationCreateScheduledTask_
+    - _ITAutomationUpdateScheduledTask_
+    - _ITAutomationDeleteScheduledTasks_
+    - _ITAutomationCancelTaskExecution_
+    - _ITAutomationGetTaskExecutionHostStatus_
+    - _ITAutomationRerunTaskExecution_
+    - _ITAutomationGetExecutionResultsSearchStatus_
+    - _ITAutomationStartExecutionResultsSearch_
+    - _ITAutomationGetExecutionResults_
+    - _ITAutomationGetTaskExecution_
+    - _ITAutomationStartTaskExecution_
+    - _ITAutomationGetTaskGroups_
+    - _ITAutomationCreateTaskGroup_
+    - _ITAutomationUpdateTaskGroup_
+    - _ITAutomationDeleteTaskGroups_
+    - _ITAutomationGetTasks_
+    - _ITAutomationCreateTask_
+    - _ITAutomationUpdateTask_
+    - _ITAutomationDeleteTask_
+    - _ITAutomationQueryPolicies_
+    - _ITAutomationSearchScheduledTasks_
+    - _ITAutomationSearchTaskExecutions_
+    - _ITAutomationSearchTaskGroups_
+    - _ITAutomationSearchTasks_
+    - `_endpoint/__init__.py`
+    - `_endpoint/_it_automation.py`
+    - `_payload/__init__.py`
+    - `_payload/_it_automation.py`
+    - `__init__.py`
+    - `it_automation.py`
+    > Unit testing expanded to complete code coverage.
+    - `test_it_automation.py`
+
++ Added: Added new _RTR-GetPutFileContents_ operation to the __Real Time Response Admin__ service collection.
+    - `_endpoint/_real_time_response_admin.py`
+    - `_endpoint/deprecated/_real_time_response_admin.py`
+    - `real_time_response_admin.py`
+    > Unit testing expanded to complete code coverage.
+    - `tests/test_real_time_response_admin.py`
+
++ Added: Added _user_uuid_ as an allowed value for the `sort` parameter in the _combinedUserRolesV1_ and _CombinedUserRolesV2_ operations within the __User Management__ service collection.
+    - `_endpoint/_user_management.py`
+    - `user_management.py`
+
++ Added: Added _HEAD_ as an allowed HTTP request method.
+    - `_constant/__init__.py`
+    - `_error/_warnings.py`
+    - `_result/_result.py`
+    - `_util/_functions.py`
+
++ Added: Added named debug logger targeting functionality. Developers may specify a _Logger_ object for the `debug` parameter instead of a boolean to force the SDK to generate log messages to that specific log. This functionality can be configured to target different loggers per class instantiated, regardless if the developer is using Service Classes or the Uber Class.
+    - `_auth_object/_falcon_interface.py`
+    - `_service_class/_base_service_class.py`
+    - `oauth2.py`
+    > Unit testing expanded to complete code coverage.
+    - `tests/test_authentications.py`
+    - Thanks go out to @JamesLochheadCRWD for suggesting this addition! 🙇
+
+## Issues resolved
++ Fixed: Added missing endpoint definition _GetCSPMGCPAccount_ to resolve the typo with the _GetCSPMCGPAccount_ operation within the __CSPM Registration__ service collection when called from the Uber Class.
+    - `_endpoint/_cspm_registration.py`
+
++ Fixed: Added `filename` to Uber Class path variable handler for the _GetLookupV1_ operation within the __NGSIEM__ service collection. Closes #1359.
+    - `_util/_uber.py`
+    - Thanks go out to @59e5aaf4 for identifying and reporting this issue! 🙇
+
+## Other
++ Updated: Cosmetic updates to `filter` and `sort` parameter descriptions in the _cloud_security_registration_oci_get_account_ operation within the __Cloud OCI Registration__ service collection.
+    - `_endpoint/_cloud_oci_registration.py`
+    - `_endpoint/deprecated/_cloud_oci_registration.py`
+
++ Removed: Decommissioned the deprecated __Data Scanner__ service collection.
+    - `_endpoint/__init__.py`
+    - `_endpoint/_data_scanner.py`
+    - `__init__.py`
+    - `datascanner.py`
+    > Unit testing updated to reflect new code coverage requirements.
+    - `tests/test_datascanner.py`
+
++ Updated: Cosmetic update to the operation description for the _AggregateAlerts_ operation within the __Falcon Complete Dashboard__ service collection.
+    - `_endpoint/_falcon_complete_dashboard.py`
+
++ Changed: Changed collection format from _csv_ to _multi_ for the `ids` parameter in the _get_policy_rules_ and _delete_policy_rules operations within the __Identity Protection__ service collection.
+    - `_endpoint/_identity_protection.py`
+    - `_endpoint/deprecated/_identity_protection.py`
+
++ Removed: Removed the decommissioned operation _GetIndicatorAggregates_ from the __Intelligence Indicator Graph__ service collection.
+    - `_endpoint/_intelligence_indicator_graph.py`
+    - `intelligence_indicator_graph.py`
+    > Unit testing updated to reflect new code coverage requirements.
+    - `tests/test_intelligence_indicator_graph.py`
+
++ Removed: Removed deprecated `body` payload functionality and added the `filter` and `sort` query string parameters in the _SearchIndicators_ operation within the __Intelligence Indicator Graph__ service collection.
+    - `_payload/__init__.py`
+    - `_payload/_intelligence_indicator_graph.py`
+    - `intelligence_indicator_graph.py`
+
++ Removed: Removed the decommissioned operations _CreateCase_ and _UpdateCase_ from the __Message Center__ service collection.
+    - `_endpoint/_message_center.py`
+    - `message_center.py`
+    > Unit testing updated to reflect new code coverage requirements.
+    - `tests/test_message_center.py`
+
++ Updated: Updated `sort` enum to list all available parameter values in the _QueryActivityByCaseID_ and _QueryCasesIdsByFilter_ operations and added _case.status_ as an allowed `filter` value to the _QueryCasesIdsByFilter_ operation within the __Message Center__ service collection.
+    - `_endpoint/_message_center.py`
+
++ Updated: Cosmetic updates to enums and changed the collection format from _csv_ to _multi_ for the `stage` parameter in the _queryCombinedSensorUpdateBuilds_ operation within the __Sensor Update Policy__ service collection.
+    - `_endpoint/_sensor_update_policies.py`
+
++ Updated: Cosmetic update to the body payload description in the _userRolesActionV1_ operation within the __User Management__ service collection.
+    - `_endpoint/_user_management.py`
+
+---
+
+# Version 1.5.3
+## Added features and functionality
++ Added: Added new __Kubernetes Container Compliance__ service collection containing 11 new operations.
+    - _AggregateAssessmentsGroupedByClustersV2_
+    - _AggregateComplianceByAssetType_
+    - _AggregateComplianceByClusterType_
+    - _AggregateComplianceByFramework_
+    - _AggregateFailedRulesByClustersV3_
+    - _AggregateFailedRulesByClustersV3_
+    - _AggregateAssessmentsGroupedByRulesV2_
+    - _AggregateTopFailedImages_
+    - _CombinedImagesFindings_
+    - _CombinedNodesFindings_
+    - _getRulesMetadataByID_
+    - `_endpoint/__init__.py`
+    - `_endpoint/_kubernetes_container_compliance.py`
+    - `__init__.py`
+    - `kubernetes_container_compliance.py`
+    > Unit testing expanded to complete code coverage.
+    - `tests/test_kubernetes_container_compliance.py`
+
++ Added: New `filter` and `sort` parameter options added to the _cloud_security_assets_queries_ operation within the __Cloud Security Assets__ service collection.
+    - filter: `application_security.business_applications`
+    - filter: `application_security.business_criticality`
+    - filter: `application_security.service_names`
+    - filter: `tags`
+    - sort: `compartment_name`
+    - sort: `compartment_ocid`
+    - sort: `compartment_path`
+    - sort: `tenancy_name`
+    - sort: `tenancy_ocid`
+    - sort: `tenancy_type`
+    - `_endpoint/_cloud_security_assets.py`
+    - `_endpoint/deprecated/_cloud_security_assets.py`
+    - `cloud_security_assets.py`
+
++ Added: Added new `find_operation` helper.
+    - `_helper/__init__.py`
+    - `_helper/_find_operation.py`
+    - `__init__.py`
+    > Unit testing expanded to complete code coverage.
+    - `tests/test_helper.py`
+
++ Added: Added `filter` parameter to the _ReadContainerCountByRegistry_ operation within the __Kubernetes Protection__ service collection.
+    - `_endpoint/_kubernetes_protection.py`
+    - `kubernetes_protection.py`
+
+## Issues resolved
++ Fixed: Resolved issue with `file` parameter name in file tuples used for the _CreateFileV1_ and _UpdateFileV1_ operations within the __FoundryLogScale__ Service Class.
+    - `foundry_logscale.py`
+
++ Adjusted: Removed default values from HEC ingestion payload class that should be defined within the NGSIEM parser and not the event.
+    - `_ngsiem/_ingest_payload.py`
+
++ Fixed: Added `excluded_from` to the payload handler for exclusion payloads. Updated _createMLExclusionsV1_ docstring to reflect new functionality.
+    - `_payload/_generic.py`
+    - `ml_exclusions.py`
+
++ Fixed: Added `is_descendant_process` to the _updateMLExclusionsV1_ operation within the __ML Exclusions__ Service Class.
+    - `_payload/_generic.py`
+    - `ml_exclusions.py`
+
+## Other
++ Updated: Cosmetic updates to `filter` parameter descriptions in 11 operations within the __Container Image Compliance__ service collection.
+    - `_endpoint/_container_image_compliance.py`
+
++ Revised: Updated HTTP Event Collector (HEC) default ingestion payload handling to remove fields that should be handled by parsing.
+    - `_ngsiem/_ingest_payload.py`
+
++ Updated: Updated `filter` parameter description and docstring for the _QueryVulnerabilities_ operation within the __Intel__ service collection.
+    - `_endpoint/_intel.py`
+    - `intel.py`
+
++ Updated: Cosmetic updates to `filter` parameter description in the _cloud_security_registration_oci_get_account_ operation within the __Cloud OCI Registration__ service collection.
+    - `_endpoint/_cloud_oci_registration.py`
+    - `_endpoint/deprecated/_cloud_oci_registration.py`
+
+---
+
 # Version 1.5.2
 ## Added features and functionality
 + Updated: Updated `import_definition` (_WorkflowDefinitionsImport_ operation) method to allow for raw YAML file data to be passed to the `data_file` keyword within the __Workflows__ Service Class. Closes #1341.

{crowdstrike_falconpy_dev-1.5.2 → crowdstrike_falconpy_dev-1.5.4}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: crowdstrike-falconpy-dev
-Version: 1.5.2
+Version: 1.5.4
 Summary: The CrowdStrike Falcon SDK for Python
 Project-URL: Documentation, https://www.falconpy.io
 Project-URL: Homepage, https://github.com/CrowdStrike/falconpy

{crowdstrike_falconpy_dev-1.5.2 → crowdstrike_falconpy_dev-1.5.4}/src/falconpydev/__init__.py

@@ -71,7 +71,10 @@ from ._error import (
     UnnecessaryEncodingUsed,
     DeprecatedClass,
     DeprecatedOperation,
-    SDKDeprecationWarning
+    SDKDeprecationWarning,
+    InvalidRoute,
+    InvalidServiceCollection,
+    InvalidOperationSearch
     )
 from ._result import (
     Result,
@@ -101,7 +104,7 @@ from ._ngsiem import (
     IngestConfig,
     SessionManager
 )
-from ._helper import random_string, Indicator, Color
+from ._helper import random_string, Indicator, Color, find_operation
 from .alerts import Alerts
 from .api_integrations import APIIntegrations
 from .api_complete import APIHarness, APIHarnessV2
@@ -128,7 +131,6 @@ from .cspm_registration import CSPMRegistration
 from .custom_ioa import CustomIOA
 from .custom_storage import CustomStorage
 from .d4c_registration import D4CRegistration
-from .datascanner import DataScanner
 from .delivery_settings import DeliverySettings
 from .deployments import Deployments
 from .detects import Detects
@@ -161,6 +163,8 @@ from .intelligence_feeds import IntelligenceFeeds
 from .ioa_exclusions import IOAExclusions
 from .ioc import IOC
 from .iocs import Iocs
+from .it_automation import ITAutomation, F4IT
+from .kubernetes_container_compliance import KubernetesContainerCompliance
 from .kubernetes_protection import KubernetesProtection
 from .malquery import MalQuery
 from .message_center import MessageCenter
@@ -238,13 +242,14 @@ __all__ = [
     "ContainerVulnerabilities", "DriftIndicators", "UnidentifiedContainers",
     "ImageAssessmentPolicies", "APIIntegrations", "ThreatGraph", "ExposureManagement",
     "CertificateBasedExclusions", "ComplianceAssessments", "HostMigration", "QuickScanPro",
-    "DataScanner", "SensorUsage", "Downloads", "DeliverySettings", "ASPM", "IntelligenceFeeds",
+    "SensorUsage", "Downloads", "DeliverySettings", "ASPM", "IntelligenceFeeds",
     "NGSIEM", "CorrelationRules", "CloudAWSRegistration", "CloudAzureRegistration",
     "CloudOCIRegistration", "CloudSecurityAssets", "Deployments", "ServerlessVulnerabilities",
     "DeviceContent", "IntelligenceIndicatorGraph", "ContentUpdatePolicies", "CAOHunting",
     "ContainerImageCompliance", "FaaSExecution", "HEC", "IngestBaseURL", "IngestFormat",
     "IngestPayload", "HTTPEventCollector", "IngestConfig", "SessionManager", "TimeUnit",
-    "Color", "Indicator", "random_string"
+    "Color", "Indicator", "random_string", "KubernetesContainerCompliance", "find_operation",
+    "InvalidRoute", "InvalidServiceCollection", "InvalidOperationSearch", "ITAutomation", "F4IT"
     ]
 """
 This is free and unencumbered software released into the public domain.

{crowdstrike_falconpy_dev-1.5.2 → crowdstrike_falconpy_dev-1.5.4}/src/falconpydev/_auth_object/_falcon_interface.py

@@ -85,7 +85,7 @@ class FalconInterface(BaseFalconAuth):
                  timeout: Optional[Union[float, tuple]] = None,
                  user_agent: Optional[str] = None,
                  renew_window: Optional[int] = 120,
-                 debug: Optional[bool] = False,
+                 debug: Optional[Union[bool, Logger]] = False,
                  debug_record_count: Optional[int] = None,
                  sanitize_log: Optional[bool] = None,
                  pythonic: Optional[bool] = False,
@@ -219,7 +219,7 @@ class FalconInterface(BaseFalconAuth):
             # Allow log sanitization to be overridden.
             _sanitize = sanitize_log if isinstance(sanitize_log, bool) else None
             # Logging facility for all classes using this interface, defaults to disabled.
-            self._log: LogFacility = LogFacility(getLogger(__name__),
+            self._log: LogFacility = LogFacility(debug if isinstance(debug, Logger) else getLogger(__name__),
                                                  _debug_record_count,
                                                  _sanitize
                                                  )

{crowdstrike_falconpy_dev-1.5.2 → crowdstrike_falconpy_dev-1.5.4}/src/falconpydev/_constant/__init__.py

@@ -63,7 +63,7 @@ MOCK_OPERATIONS: List[str] = [
     "GetImageAssessmentReport", "DeleteImageDetails", "ImageMatchesPolicy"
 ]
 # Restrict requests to only allowed HTTP methods
-ALLOWED_METHODS: List[str] = ['GET', 'POST', 'PUT', 'PATCH', 'DELETE', 'UPDATE']
+ALLOWED_METHODS: List[str] = ["GET", "POST", "PUT", "PATCH", "DELETE", "UPDATE", "HEAD"]
 # Default user-agent string
 USER_AGENT: str = version(agent_string=True)
 # Default maximum number of records to write to debug logs (when active)

{crowdstrike_falconpy_dev-1.5.2 → crowdstrike_falconpy_dev-1.5.4}/src/falconpydev/_endpoint/__init__.py

@@ -72,7 +72,6 @@ from ._cspm_registration import _cspm_registration_endpoints
 from ._custom_ioa import _custom_ioa_endpoints
 from ._custom_storage import _custom_storage_endpoints
 from ._d4c_registration import _d4c_registration_endpoints
-from ._datascanner import _datascanner_endpoints
 from ._delivery_settings import _delivery_settings_endpoints
 from ._deployments import _deployments_endpoints
 from ._detects import _detects_endpoints
@@ -104,6 +103,8 @@ from ._intel import _intel_endpoints
 from ._ioa_exclusions import _ioa_exclusions_endpoints
 from ._ioc import _ioc_endpoints
 from ._iocs import _iocs_endpoints
+from ._it_automation import _it_automation_endpoints
+from ._kubernetes_container_compliance import _kubernetes_container_compliance_endpoints
 from ._kubernetes_protection import _kubernetes_protection_endpoints
 from ._malquery import _malquery_endpoints
 from ._message_center import _message_center_endpoints
@@ -166,7 +167,6 @@ api_endpoints.extend(_cspm_registration_endpoints)
 api_endpoints.extend(_custom_ioa_endpoints)
 api_endpoints.extend(_custom_storage_endpoints)
 api_endpoints.extend(_d4c_registration_endpoints)
-api_endpoints.extend(_datascanner_endpoints)
 api_endpoints.extend(_delivery_settings_endpoints)
 api_endpoints.extend(_detects_endpoints)
 api_endpoints.extend(_device_content_endpoints)
@@ -198,6 +198,8 @@ api_endpoints.extend(_intel_endpoints)
 api_endpoints.extend(_ioa_exclusions_endpoints)
 api_endpoints.extend(_ioc_endpoints)
 api_endpoints.extend(_iocs_endpoints)
+api_endpoints.extend(_it_automation_endpoints)
+api_endpoints.extend(_kubernetes_container_compliance_endpoints)
 api_endpoints.extend(_kubernetes_protection_endpoints)
 api_endpoints.extend(_malquery_endpoints)
 api_endpoints.extend(_message_center_endpoints)

crowdstrike_falconpy_dev-1.5.4/src/falconpydev/_endpoint/_cloud_azure_registration.py

@@ -0,0 +1,134 @@
+"""Internal API endpoint constant library.
+
+ _______                        __ _______ __        __ __
+|   _   .----.-----.--.--.--.--|  |   _   |  |_.----|__|  |--.-----.
+|.  1___|   _|  _  |  |  |  |  _  |   1___|   _|   _|  |    <|  -__|
+|.  |___|__| |_____|________|_____|____   |____|__| |__|__|__|_____|
+|:  1   |                         |:  1   |
+|::.. . |   CROWDSTRIKE FALCON    |::.. . |    FalconPy
+`-------'                         `-------'
+
+OAuth2 API - Customer SDK
+
+This is free and unencumbered software released into the public domain.
+
+Anyone is free to copy, modify, publish, use, compile, sell, or
+distribute this software, either in source code form or as a compiled
+binary, for any purpose, commercial or non-commercial, and by any
+means.
+
+In jurisdictions that recognize copyright laws, the author or authors
+of this software dedicate any and all copyright interest in the
+software to the public domain. We make this dedication for the benefit
+of the public at large and to the detriment of our heirs and
+successors. We intend this dedication to be an overt act of
+relinquishment in perpetuity of all present and future rights to this
+software under copyright law.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
+EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
+MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.
+IN NO EVENT SHALL THE AUTHORS BE LIABLE FOR ANY CLAIM, DAMAGES OR
+OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE,
+ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR
+OTHER DEALINGS IN THE SOFTWARE.
+
+For more information, please refer to <https://unlicense.org>
+"""
+
+_cloud_azure_registration_endpoints = [
+  [
+    "cloud_registration_azure_get_registration",
+    "GET",
+    "/cloud-security-registration-azure/entities/registrations/v1",
+    "Retrieve existing Azure registration for a tenant.",
+    "cloud_azure_registration",
+    [
+      {
+        "type": "string",
+        "description": "Tenant ID",
+        "name": "tenant_id",
+        "in": "query",
+        "required": True
+      }
+    ]
+  ],
+  [
+    "cloud_registration_azure_create_registration",
+    "POST",
+    "/cloud-security-registration-azure/entities/registrations/v1",
+    "Create an Azure registration for a tenant.",
+    "cloud_azure_registration",
+    [
+      {
+        "name": "body",
+        "in": "body",
+        "required": True
+      }
+    ]
+  ],
+  [
+    "cloud_registration_azure_update_registration",
+    "PATCH",
+    "/cloud-security-registration-azure/entities/registrations/v1",
+    "Update an existing Azure registration for a tenant.",
+    "cloud_azure_registration",
+    [
+      {
+        "name": "body",
+        "in": "body",
+        "required": True
+      }
+    ]
+  ],
+  [
+    "cloud_registration_azure_delete_registration",
+    "DELETE",
+    "/cloud-security-registration-azure/entities/registrations/v1",
+    "Deletes existing Azure registrations.",
+    "cloud_azure_registration",
+    [
+      {
+        "type": "array",
+        "items": {
+          "type": "string"
+        },
+        "collectionFormat": "multi",
+        "description": "Azure tenant IDs",
+        "name": "tenant_ids",
+        "in": "query",
+        "required": True
+      }
+    ]
+  ],
+  [
+    "download_azure_script",
+    "GET",
+    "/cloud-security-registration-azure/entities/scripts/v1",
+    "Download Azure deployment script (Terraform or Bicep)",
+    "cloud_azure_registration",
+    [
+      {
+        "type": "string",
+        "description": "Azure tenant ID",
+        "name": "tenant_id",
+        "in": "query",
+        "required": True
+      }
+    ]
+  ],
+  [
+    "cloud_registration_azure_download_script",
+    "POST",
+    "/cloud-security-registration-azure/entities/scripts/v1",
+    "Retrieve script to create resources",
+    "cloud_azure_registration",
+    [
+      {
+        "name": "body",
+        "in": "body",
+        "required": True
+      }
+    ]
+  ]
+]

{crowdstrike_falconpy_dev-1.5.2 → crowdstrike_falconpy_dev-1.5.4}/src/falconpydev/_endpoint/_cloud_oci_registration.py

@@ -47,14 +47,14 @@ _cloud_oci_registration_endpoints = [
       {
         "type": "string",
         "description": "FQL (Falcon Query Language) string for filtering results. Allowed filters are "
-        "Set{overall_status, created_at, updated_at, tenancy_ocid, tenancy_name, home_region, key_age}",
+        "Set{home_region, key_age, overall_status, created_at, updated_at, tenancy_ocid, tenancy_name}",
         "name": "filter",
         "in": "query"
       },
       {
         "type": "string",
-        "description": "Field and direction for sorting results - allowed sort fields are Set{updated_at, "
-        "tenancy_ocid, tenancy_name, home_region, key_age, overall_status, created_at}",
+        "description": "Field and direction for sorting results - allowed sort fields are Set{overall_status, "
+        "created_at, updated_at, tenancy_ocid, tenancy_name, home_region, key_age}",
         "name": "sort",
         "in": "query"
       },

{crowdstrike_falconpy_dev-1.5.2 → crowdstrike_falconpy_dev-1.5.4}/src/falconpydev/_endpoint/_cloud_security_assets.py

@@ -50,7 +50,7 @@ _cloud_security_assets_endpoints = [
         "account_name  assessment_id  business_impact  cloud_group  cloud_label  cloud_label_id  cloud_provider  "
         "cloud_scope  compliant  control.benchmark.name  control.benchmark.version  control.framework  control.name  "
         "control.type  control.version  environment  last_evaluated  region  resource_provider  resource_type  "
-        "resource_type_name  service  service_category  severities",
+        "resource_type_name  service  service_category  severities  tag_key  tag_value",
         "name": "filter",
         "in": "query"
       },
@@ -138,18 +138,20 @@ _cloud_security_assets_endpoints = [
       {
         "type": "string",
         "description": "FQL string to filter on asset contents. Filterable fields include:  account_id  "
-        "account_name  active  azure.vm_id  business_impact  cloud_group  cloud_label  cloud_label_id  cloud_provider  "
-        "cloud_scope  cluster_id  cluster_name  compartment_ocid  compliant.benchmark_name  compliant.benchmark_version "
-        "  compliant.framework  compliant.policy_id  compliant.requirement  compliant.rule  compliant.section  "
-        "configuration.id  creation_time  cve_ids  data_classifications.found  data_classifications.label  "
-        "data_classifications.label_id  data_classifications.scanned  data_classifications.tag  "
-        "data_classifications.tag_id  environment  exprt_ratings  first_seen  highest_severity  id  "
-        "insights.boolean_value  insights.id  instance_id  instance_state  ioa_count  iom_count  legacy_resource_id  "
-        "legacy_uuid  managed_by  non_compliant.benchmark_name  non_compliant.benchmark_version  "
+        "account_name  active  application_security.business_applications  application_security.business_criticality  "
+        "application_security.service_names  azure.vm_id  business_impact  cloud_group  cloud_label  cloud_label_id  "
+        "cloud_provider  cloud_scope  cluster_id  cluster_name  compartment_ocid  compliant.benchmark_name  "
+        "compliant.benchmark_version  compliant.framework  compliant.policy_id  compliant.requirement  compliant.rule  "
+        "compliant.section  configuration.id  creation_time  cve_ids  data_classifications.found  "
+        "data_classifications.label  data_classifications.label_id  data_classifications.scanned  "
+        "data_classifications.tag  data_classifications.tag_id  environment  exprt_ratings  first_seen  "
+        "highest_severity  id  insights.boolean_value  insights.date_value  insights.id  insights.integer_value  "
+        "insights.string_list_value  insights.string_value  instance_id  instance_state  ioa_count  iom_count  "
+        "legacy_resource_id  legacy_uuid  managed_by  non_compliant.benchmark_name  non_compliant.benchmark_version  "
         "non_compliant.framework  non_compliant.policy_id  non_compliant.requirement  non_compliant.rule  "
         "non_compliant.section  non_compliant.severity  organization_Id  os_version  platform_name  publicly_exposed  "
         "region  resource_id  resource_name  resource_type  resource_type_name  sensor_priority  service  "
-        "service_category  severity  snapshot_detections  ssm_managed  status  tag_key  tag_value  tenant_id  "
+        "service_category  severity  snapshot_detections  ssm_managed  status  tag_key  tag_value  tags  tenant_id  "
         "updated_at  vmware.guest_os_id  vmware.guest_os_version  vmware.host_system_name  vmware.host_type  "
         "vmware.instance_uuid  vmware.vm_host_name  vmware.vm_tools_status  zone",
         "name": "filter",
@@ -158,12 +160,13 @@ _cloud_security_assets_endpoints = [
       {
         "type": "string",
         "description": "The field to sort on.  Sortable fields include:  account_id  account_name  active  "
-        "cloud_provider  cluster_id  cluster_name  creation_time  data_classifications.found  "
-        "data_classifications.scanned  first_seen  id  instance_id  instance_state  ioa_count  iom_count  managed_by  "
-        "organization_Id  os_version  platform_name  publicly_exposed  region  resource_id  resource_name  "
-        "resource_type  resource_type_name  service  service_category  ssm_managed  status  tenant_id  updated_at  "
-        "vmware.guest_os_id  vmware.guest_os_version  vmware.host_system_name  vmware.host_type  vmware.instance_uuid  "
-        "vmware.vm_host_name  vmware.vm_tools_status  zone\n\nUse |asc or |desc suffix to specify sort direction.",
+        "cloud_provider  cluster_id  cluster_name  compartment_name  compartment_ocid  compartment_path  creation_time "
+        "  data_classifications.found  data_classifications.scanned  first_seen  id  instance_id  instance_state  "
+        "ioa_count  iom_count  managed_by  organization_Id  os_version  platform_name  publicly_exposed  region  "
+        "resource_id  resource_name  resource_type  resource_type_name  service  service_category  ssm_managed  status "
+        "  tenancy_name  tenancy_ocid  tenancy_type  tenant_id  updated_at  vmware.guest_os_id  vmware.guest_os_version "
+        "  vmware.host_system_name  vmware.host_type  vmware.instance_uuid  vmware.vm_host_name  vmware.vm_tools_status "
+        "zone\n\nUse |asc or |desc suffix to specify sort direction.",
         "name": "sort",
         "in": "query"
       },