crowdstrike-falconpy-dev 1.5.3__tar.gz → 1.5.4__tar.gz

{crowdstrike_falconpy_dev-1.5.3 → crowdstrike_falconpy_dev-1.5.4}/AUTHORS.md

@@ -106,6 +106,7 @@ This has been a critical element in the development of the FalconPy project.
 + Jesko, `@jhhcs`
 + Evan Stoner, `@evanstoner`
 + Gage Schaffer, `@Gage-BCCA`
++ `@JamesLochheadCRWD`
 
 
 ## Sponsors

{crowdstrike_falconpy_dev-1.5.3 → crowdstrike_falconpy_dev-1.5.4}/CHANGELOG.md

@@ -1,3 +1,206 @@
+# Version 1.5.4
+## Added features and functionality
++ Added: Added _tag_key_ and _tag_value_ as allowed values for the `filter` parameter in the _cloud_security_assets_combined_compliance_by_account_ operation within the __Cloud Security Assets__ service collection.
+    - `_endpoint/_cloud_security_assets.py`
+    - `_endpoint/deprecated/_cloud_security_assets.py`
+
++ Added: Added 5 new operations to the __Cloud Azure Registration__ service collection.
+    - _cloud_registration_azure_get_registration_
+    - _cloud_registration_azure_create_registration_
+    - _cloud_registration_azure_update_registration_
+    - _cloud_registration_azure_delete_registration_
+    - _download_azure_script_
+    - `_endpoint/_cloud_azure_registration.py`
+    - `_endpoint/deprecated/_cloud_azure_registration.py`
+    - `_payload/__init__.py`
+    - `_payload/_cloud_azure_registration.py`
+    - `cloud_azure_registration.py`
+    > Unit testing expanded to complete code coverage.
+    - `tests/test_cloud_azure_registration.py`
+
++ Added: Added _insights.date_value_, _insights.integer_value_, _insights.string_list_value_, and _insights.string_value_ as allowed values for the `filter` parameter in the _cloud_security_assets_queries_ operation within the __Cloud Security Assets__ service collection.
+    - `_endpoint/_cloud_security_assets.py`
+    - `_endpoint/deprecated/_cloud_security_assets.py`
+
++ Added: Added new _getCloudEventIDs_ operation to the __CSPM Registration__ service collection.
+    - `_endpoint/_cspm_registration.py`
+    - `cspm_registration.py`
+    > Unit testing expanded to complete code coverage.
+    - `tests/test_cspm_registration.py`
+
++ Added: Added new _GetEntityIDsByQueryPOSTV2_ operation to the __Deployments__ service collection. This operation is now the default operation used when calling the PEP 8 compliant `get_release_notes` method within the service class. The legacy operation is still available using the `get_release_notes_v1` method.
+    - `_endpoint/_deployments.py`
+    - `deployments.py`
+    > Unit testing expanded to complete code coverage.
+    - `tests/test_deployments.py`
+
++ Added: Added new _query_external_assets_v2_ operation to the __Exposure Management__ service collection. This operation is now the default operation used when calling the PEP 8 compliant `query_assets` method within the service class. The legacy operation is still available using the `query_assets_v1` method.
+    - `_endpoint/_exposure_management.py`
+    - `_endpoint/deprecated/_exposure_management.py`
+    - `exposure_management.py`
+    > Unit testing expanded to complete code coverage.
+    - `tests/test_exposure_management.py`
+
++ Added: Added 2 new operations to the __Falcon Container__ service collection.
+    - _PostImageScanInventory_
+    - _HeadImageScanInventory_
+    - `_endpoint/_falcon_container.py`
+    - `_payload/__init__.py`
+    - `_payload/_container.py`
+    - `falcon_container.py`
+    > Unit testing expanded to complete code coverage.
+    - `tests/test_falcon_container.py`
+
++ Added: Added new _QueryAlertIdsByFilterV2_ operation to the __Falcon Complete Dashboard__ service collection. This operation is now the default operation used when calling the PEP 8 compliant `query_alert_ids_by_filter` method within the service class. The legacy operation is still available using the `query_alert_ids_by_filter_v1` method.
+    - `_endpoint/_falcon_complete_dashboard.py`
+    - `falcon_complete_dashboard.py`
+    > Unit testing expanded to complete code coverage.
+    - `tests/test_falcon_complete_dashboard.py`
+
++ Added: Added new _QueryMalwareEntities_ operation to the __Intel__ service collection.
+    - `_endpoint/_intel.py`
+    - `intel.py`
+    > Unit testing expanded to complete code coverage.
+    - `tests/test_intel.py`
+
++ Added: Added new _LookupIndicators_ operation to the __Intelligence Indicator Graph__ service collection.
+    - `_endpoint/_intelligence_indicator_graph.py`
+    - `intelligence_indicator_graph.py`
+    > Unit testing expanded to complete code coverage.
+    - `tests/test_intelligence_indicator_graph.py`
+
++ Added: Added _node_uid_ as an allowed `filter` value to the _ReadNodesByCloudCount_, _ReadNodesByContainerEngineVersionCount_, _ReadNodesByDateRangeCount_, _ReadNodeCount_ and _ReadNodeCombined_ operations within the __Kubernetes Protection__ service collection. Added a new PEP 8 alias for the _ReadNodeCount_ operation.
+    - `_endpoint/_kubernetes_protection.py`
+    - `kubernetes_protection.py`
+
++ Added: Added the new __IT Automation__ service collection with 37 operations.
+    - _ITAutomationGetAssociatedTasks_
+    - _ITAutomationCombinedScheduledTasks_
+    - _ITAutomationGetTaskExecutionsByQuery_
+    - _ITAutomationGetTaskGroupsByQuery_
+    - _ITAutomationGetTasksByQuery_
+    - _ITAutomationRunLiveQuery_
+    - _ITAutomationUpdatePolicyHostGroups_
+    - _ITAutomationUpdatePoliciesPrecedence_
+    - _ITAutomationGetPolicies_
+    - _ITAutomationCreatePolicy_
+    - _ITAutomationUpdatePolicies_
+    - _ITAutomationDeletePolicy_
+    - _ITAutomationGetScheduledTasks_
+    - _ITAutomationCreateScheduledTask_
+    - _ITAutomationUpdateScheduledTask_
+    - _ITAutomationDeleteScheduledTasks_
+    - _ITAutomationCancelTaskExecution_
+    - _ITAutomationGetTaskExecutionHostStatus_
+    - _ITAutomationRerunTaskExecution_
+    - _ITAutomationGetExecutionResultsSearchStatus_
+    - _ITAutomationStartExecutionResultsSearch_
+    - _ITAutomationGetExecutionResults_
+    - _ITAutomationGetTaskExecution_
+    - _ITAutomationStartTaskExecution_
+    - _ITAutomationGetTaskGroups_
+    - _ITAutomationCreateTaskGroup_
+    - _ITAutomationUpdateTaskGroup_
+    - _ITAutomationDeleteTaskGroups_
+    - _ITAutomationGetTasks_
+    - _ITAutomationCreateTask_
+    - _ITAutomationUpdateTask_
+    - _ITAutomationDeleteTask_
+    - _ITAutomationQueryPolicies_
+    - _ITAutomationSearchScheduledTasks_
+    - _ITAutomationSearchTaskExecutions_
+    - _ITAutomationSearchTaskGroups_
+    - _ITAutomationSearchTasks_
+    - `_endpoint/__init__.py`
+    - `_endpoint/_it_automation.py`
+    - `_payload/__init__.py`
+    - `_payload/_it_automation.py`
+    - `__init__.py`
+    - `it_automation.py`
+    > Unit testing expanded to complete code coverage.
+    - `test_it_automation.py`
+
++ Added: Added new _RTR-GetPutFileContents_ operation to the __Real Time Response Admin__ service collection.
+    - `_endpoint/_real_time_response_admin.py`
+    - `_endpoint/deprecated/_real_time_response_admin.py`
+    - `real_time_response_admin.py`
+    > Unit testing expanded to complete code coverage.
+    - `tests/test_real_time_response_admin.py`
+
++ Added: Added _user_uuid_ as an allowed value for the `sort` parameter in the _combinedUserRolesV1_ and _CombinedUserRolesV2_ operations within the __User Management__ service collection.
+    - `_endpoint/_user_management.py`
+    - `user_management.py`
+
++ Added: Added _HEAD_ as an allowed HTTP request method.
+    - `_constant/__init__.py`
+    - `_error/_warnings.py`
+    - `_result/_result.py`
+    - `_util/_functions.py`
+
++ Added: Added named debug logger targeting functionality. Developers may specify a _Logger_ object for the `debug` parameter instead of a boolean to force the SDK to generate log messages to that specific log. This functionality can be configured to target different loggers per class instantiated, regardless if the developer is using Service Classes or the Uber Class.
+    - `_auth_object/_falcon_interface.py`
+    - `_service_class/_base_service_class.py`
+    - `oauth2.py`
+    > Unit testing expanded to complete code coverage.
+    - `tests/test_authentications.py`
+    - Thanks go out to @JamesLochheadCRWD for suggesting this addition! 🙇
+
+## Issues resolved
++ Fixed: Added missing endpoint definition _GetCSPMGCPAccount_ to resolve the typo with the _GetCSPMCGPAccount_ operation within the __CSPM Registration__ service collection when called from the Uber Class.
+    - `_endpoint/_cspm_registration.py`
+
++ Fixed: Added `filename` to Uber Class path variable handler for the _GetLookupV1_ operation within the __NGSIEM__ service collection. Closes #1359.
+    - `_util/_uber.py`
+    - Thanks go out to @59e5aaf4 for identifying and reporting this issue! 🙇
+
+## Other
++ Updated: Cosmetic updates to `filter` and `sort` parameter descriptions in the _cloud_security_registration_oci_get_account_ operation within the __Cloud OCI Registration__ service collection.
+    - `_endpoint/_cloud_oci_registration.py`
+    - `_endpoint/deprecated/_cloud_oci_registration.py`
+
++ Removed: Decommissioned the deprecated __Data Scanner__ service collection.
+    - `_endpoint/__init__.py`
+    - `_endpoint/_data_scanner.py`
+    - `__init__.py`
+    - `datascanner.py`
+    > Unit testing updated to reflect new code coverage requirements.
+    - `tests/test_datascanner.py`
+
++ Updated: Cosmetic update to the operation description for the _AggregateAlerts_ operation within the __Falcon Complete Dashboard__ service collection.
+    - `_endpoint/_falcon_complete_dashboard.py`
+
++ Changed: Changed collection format from _csv_ to _multi_ for the `ids` parameter in the _get_policy_rules_ and _delete_policy_rules operations within the __Identity Protection__ service collection.
+    - `_endpoint/_identity_protection.py`
+    - `_endpoint/deprecated/_identity_protection.py`
+
++ Removed: Removed the decommissioned operation _GetIndicatorAggregates_ from the __Intelligence Indicator Graph__ service collection.
+    - `_endpoint/_intelligence_indicator_graph.py`
+    - `intelligence_indicator_graph.py`
+    > Unit testing updated to reflect new code coverage requirements.
+    - `tests/test_intelligence_indicator_graph.py`
+
++ Removed: Removed deprecated `body` payload functionality and added the `filter` and `sort` query string parameters in the _SearchIndicators_ operation within the __Intelligence Indicator Graph__ service collection.
+    - `_payload/__init__.py`
+    - `_payload/_intelligence_indicator_graph.py`
+    - `intelligence_indicator_graph.py`
+
++ Removed: Removed the decommissioned operations _CreateCase_ and _UpdateCase_ from the __Message Center__ service collection.
+    - `_endpoint/_message_center.py`
+    - `message_center.py`
+    > Unit testing updated to reflect new code coverage requirements.
+    - `tests/test_message_center.py`
+
++ Updated: Updated `sort` enum to list all available parameter values in the _QueryActivityByCaseID_ and _QueryCasesIdsByFilter_ operations and added _case.status_ as an allowed `filter` value to the _QueryCasesIdsByFilter_ operation within the __Message Center__ service collection.
+    - `_endpoint/_message_center.py`
+
++ Updated: Cosmetic updates to enums and changed the collection format from _csv_ to _multi_ for the `stage` parameter in the _queryCombinedSensorUpdateBuilds_ operation within the __Sensor Update Policy__ service collection.
+    - `_endpoint/_sensor_update_policies.py`
+
++ Updated: Cosmetic update to the body payload description in the _userRolesActionV1_ operation within the __User Management__ service collection.
+    - `_endpoint/_user_management.py`
+
+---
+
 # Version 1.5.3
 ## Added features and functionality
 + Added: Added new __Kubernetes Container Compliance__ service collection containing 11 new operations.

{crowdstrike_falconpy_dev-1.5.3 → crowdstrike_falconpy_dev-1.5.4}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: crowdstrike-falconpy-dev
-Version: 1.5.3
+Version: 1.5.4
 Summary: The CrowdStrike Falcon SDK for Python
 Project-URL: Documentation, https://www.falconpy.io
 Project-URL: Homepage, https://github.com/CrowdStrike/falconpy

{crowdstrike_falconpy_dev-1.5.3 → crowdstrike_falconpy_dev-1.5.4}/src/falconpydev/__init__.py

@@ -131,7 +131,6 @@ from .cspm_registration import CSPMRegistration
 from .custom_ioa import CustomIOA
 from .custom_storage import CustomStorage
 from .d4c_registration import D4CRegistration
-from .datascanner import DataScanner
 from .delivery_settings import DeliverySettings
 from .deployments import Deployments
 from .detects import Detects
@@ -164,6 +163,7 @@ from .intelligence_feeds import IntelligenceFeeds
 from .ioa_exclusions import IOAExclusions
 from .ioc import IOC
 from .iocs import Iocs
+from .it_automation import ITAutomation, F4IT
 from .kubernetes_container_compliance import KubernetesContainerCompliance
 from .kubernetes_protection import KubernetesProtection
 from .malquery import MalQuery
@@ -242,14 +242,14 @@ __all__ = [
     "ContainerVulnerabilities", "DriftIndicators", "UnidentifiedContainers",
     "ImageAssessmentPolicies", "APIIntegrations", "ThreatGraph", "ExposureManagement",
     "CertificateBasedExclusions", "ComplianceAssessments", "HostMigration", "QuickScanPro",
-    "DataScanner", "SensorUsage", "Downloads", "DeliverySettings", "ASPM", "IntelligenceFeeds",
+    "SensorUsage", "Downloads", "DeliverySettings", "ASPM", "IntelligenceFeeds",
     "NGSIEM", "CorrelationRules", "CloudAWSRegistration", "CloudAzureRegistration",
     "CloudOCIRegistration", "CloudSecurityAssets", "Deployments", "ServerlessVulnerabilities",
     "DeviceContent", "IntelligenceIndicatorGraph", "ContentUpdatePolicies", "CAOHunting",
     "ContainerImageCompliance", "FaaSExecution", "HEC", "IngestBaseURL", "IngestFormat",
     "IngestPayload", "HTTPEventCollector", "IngestConfig", "SessionManager", "TimeUnit",
     "Color", "Indicator", "random_string", "KubernetesContainerCompliance", "find_operation",
-    "InvalidRoute", "InvalidServiceCollection", "InvalidOperationSearch"
+    "InvalidRoute", "InvalidServiceCollection", "InvalidOperationSearch", "ITAutomation", "F4IT"
     ]
 """
 This is free and unencumbered software released into the public domain.

{crowdstrike_falconpy_dev-1.5.3 → crowdstrike_falconpy_dev-1.5.4}/src/falconpydev/_auth_object/_falcon_interface.py

@@ -85,7 +85,7 @@ class FalconInterface(BaseFalconAuth):
                  timeout: Optional[Union[float, tuple]] = None,
                  user_agent: Optional[str] = None,
                  renew_window: Optional[int] = 120,
-                 debug: Optional[bool] = False,
+                 debug: Optional[Union[bool, Logger]] = False,
                  debug_record_count: Optional[int] = None,
                  sanitize_log: Optional[bool] = None,
                  pythonic: Optional[bool] = False,
@@ -219,7 +219,7 @@ class FalconInterface(BaseFalconAuth):
             # Allow log sanitization to be overridden.
             _sanitize = sanitize_log if isinstance(sanitize_log, bool) else None
             # Logging facility for all classes using this interface, defaults to disabled.
-            self._log: LogFacility = LogFacility(getLogger(__name__),
+            self._log: LogFacility = LogFacility(debug if isinstance(debug, Logger) else getLogger(__name__),
                                                  _debug_record_count,
                                                  _sanitize
                                                  )

{crowdstrike_falconpy_dev-1.5.3 → crowdstrike_falconpy_dev-1.5.4}/src/falconpydev/_constant/__init__.py

@@ -63,7 +63,7 @@ MOCK_OPERATIONS: List[str] = [
     "GetImageAssessmentReport", "DeleteImageDetails", "ImageMatchesPolicy"
 ]
 # Restrict requests to only allowed HTTP methods
-ALLOWED_METHODS: List[str] = ['GET', 'POST', 'PUT', 'PATCH', 'DELETE', 'UPDATE']
+ALLOWED_METHODS: List[str] = ["GET", "POST", "PUT", "PATCH", "DELETE", "UPDATE", "HEAD"]
 # Default user-agent string
 USER_AGENT: str = version(agent_string=True)
 # Default maximum number of records to write to debug logs (when active)

{crowdstrike_falconpy_dev-1.5.3 → crowdstrike_falconpy_dev-1.5.4}/src/falconpydev/_endpoint/__init__.py

@@ -72,7 +72,6 @@ from ._cspm_registration import _cspm_registration_endpoints
 from ._custom_ioa import _custom_ioa_endpoints
 from ._custom_storage import _custom_storage_endpoints
 from ._d4c_registration import _d4c_registration_endpoints
-from ._datascanner import _datascanner_endpoints
 from ._delivery_settings import _delivery_settings_endpoints
 from ._deployments import _deployments_endpoints
 from ._detects import _detects_endpoints
@@ -104,6 +103,7 @@ from ._intel import _intel_endpoints
 from ._ioa_exclusions import _ioa_exclusions_endpoints
 from ._ioc import _ioc_endpoints
 from ._iocs import _iocs_endpoints
+from ._it_automation import _it_automation_endpoints
 from ._kubernetes_container_compliance import _kubernetes_container_compliance_endpoints
 from ._kubernetes_protection import _kubernetes_protection_endpoints
 from ._malquery import _malquery_endpoints
@@ -167,7 +167,6 @@ api_endpoints.extend(_cspm_registration_endpoints)
 api_endpoints.extend(_custom_ioa_endpoints)
 api_endpoints.extend(_custom_storage_endpoints)
 api_endpoints.extend(_d4c_registration_endpoints)
-api_endpoints.extend(_datascanner_endpoints)
 api_endpoints.extend(_delivery_settings_endpoints)
 api_endpoints.extend(_detects_endpoints)
 api_endpoints.extend(_device_content_endpoints)
@@ -199,6 +198,7 @@ api_endpoints.extend(_intel_endpoints)
 api_endpoints.extend(_ioa_exclusions_endpoints)
 api_endpoints.extend(_ioc_endpoints)
 api_endpoints.extend(_iocs_endpoints)
+api_endpoints.extend(_it_automation_endpoints)
 api_endpoints.extend(_kubernetes_container_compliance_endpoints)
 api_endpoints.extend(_kubernetes_protection_endpoints)
 api_endpoints.extend(_malquery_endpoints)

crowdstrike_falconpy_dev-1.5.4/src/falconpydev/_endpoint/_cloud_azure_registration.py

@@ -0,0 +1,134 @@
+"""Internal API endpoint constant library.
+
+ _______                        __ _______ __        __ __
+|   _   .----.-----.--.--.--.--|  |   _   |  |_.----|__|  |--.-----.
+|.  1___|   _|  _  |  |  |  |  _  |   1___|   _|   _|  |    <|  -__|
+|.  |___|__| |_____|________|_____|____   |____|__| |__|__|__|_____|
+|:  1   |                         |:  1   |
+|::.. . |   CROWDSTRIKE FALCON    |::.. . |    FalconPy
+`-------'                         `-------'
+
+OAuth2 API - Customer SDK
+
+This is free and unencumbered software released into the public domain.
+
+Anyone is free to copy, modify, publish, use, compile, sell, or
+distribute this software, either in source code form or as a compiled
+binary, for any purpose, commercial or non-commercial, and by any
+means.
+
+In jurisdictions that recognize copyright laws, the author or authors
+of this software dedicate any and all copyright interest in the
+software to the public domain. We make this dedication for the benefit
+of the public at large and to the detriment of our heirs and
+successors. We intend this dedication to be an overt act of
+relinquishment in perpetuity of all present and future rights to this
+software under copyright law.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
+EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
+MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.
+IN NO EVENT SHALL THE AUTHORS BE LIABLE FOR ANY CLAIM, DAMAGES OR
+OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE,
+ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR
+OTHER DEALINGS IN THE SOFTWARE.
+
+For more information, please refer to <https://unlicense.org>
+"""
+
+_cloud_azure_registration_endpoints = [
+  [
+    "cloud_registration_azure_get_registration",
+    "GET",
+    "/cloud-security-registration-azure/entities/registrations/v1",
+    "Retrieve existing Azure registration for a tenant.",
+    "cloud_azure_registration",
+    [
+      {
+        "type": "string",
+        "description": "Tenant ID",
+        "name": "tenant_id",
+        "in": "query",
+        "required": True
+      }
+    ]
+  ],
+  [
+    "cloud_registration_azure_create_registration",
+    "POST",
+    "/cloud-security-registration-azure/entities/registrations/v1",
+    "Create an Azure registration for a tenant.",
+    "cloud_azure_registration",
+    [
+      {
+        "name": "body",
+        "in": "body",
+        "required": True
+      }
+    ]
+  ],
+  [
+    "cloud_registration_azure_update_registration",
+    "PATCH",
+    "/cloud-security-registration-azure/entities/registrations/v1",
+    "Update an existing Azure registration for a tenant.",
+    "cloud_azure_registration",
+    [
+      {
+        "name": "body",
+        "in": "body",
+        "required": True
+      }
+    ]
+  ],
+  [
+    "cloud_registration_azure_delete_registration",
+    "DELETE",
+    "/cloud-security-registration-azure/entities/registrations/v1",
+    "Deletes existing Azure registrations.",
+    "cloud_azure_registration",
+    [
+      {
+        "type": "array",
+        "items": {
+          "type": "string"
+        },
+        "collectionFormat": "multi",
+        "description": "Azure tenant IDs",
+        "name": "tenant_ids",
+        "in": "query",
+        "required": True
+      }
+    ]
+  ],
+  [
+    "download_azure_script",
+    "GET",
+    "/cloud-security-registration-azure/entities/scripts/v1",
+    "Download Azure deployment script (Terraform or Bicep)",
+    "cloud_azure_registration",
+    [
+      {
+        "type": "string",
+        "description": "Azure tenant ID",
+        "name": "tenant_id",
+        "in": "query",
+        "required": True
+      }
+    ]
+  ],
+  [
+    "cloud_registration_azure_download_script",
+    "POST",
+    "/cloud-security-registration-azure/entities/scripts/v1",
+    "Retrieve script to create resources",
+    "cloud_azure_registration",
+    [
+      {
+        "name": "body",
+        "in": "body",
+        "required": True
+      }
+    ]
+  ]
+]

{crowdstrike_falconpy_dev-1.5.3 → crowdstrike_falconpy_dev-1.5.4}/src/falconpydev/_endpoint/_cloud_oci_registration.py

@@ -53,8 +53,8 @@ _cloud_oci_registration_endpoints = [
       },
       {
         "type": "string",
-        "description": "Field and direction for sorting results - allowed sort fields are Set{updated_at, "
-        "tenancy_ocid, tenancy_name, home_region, key_age, overall_status, created_at}",
+        "description": "Field and direction for sorting results - allowed sort fields are Set{overall_status, "
+        "created_at, updated_at, tenancy_ocid, tenancy_name, home_region, key_age}",
         "name": "sort",
         "in": "query"
       },

{crowdstrike_falconpy_dev-1.5.3 → crowdstrike_falconpy_dev-1.5.4}/src/falconpydev/_endpoint/_cloud_security_assets.py

@@ -50,7 +50,7 @@ _cloud_security_assets_endpoints = [
         "account_name  assessment_id  business_impact  cloud_group  cloud_label  cloud_label_id  cloud_provider  "
         "cloud_scope  compliant  control.benchmark.name  control.benchmark.version  control.framework  control.name  "
         "control.type  control.version  environment  last_evaluated  region  resource_provider  resource_type  "
-        "resource_type_name  service  service_category  severities",
+        "resource_type_name  service  service_category  severities  tag_key  tag_value",
         "name": "filter",
         "in": "query"
       },
@@ -145,7 +145,8 @@ _cloud_security_assets_endpoints = [
         "compliant.section  configuration.id  creation_time  cve_ids  data_classifications.found  "
         "data_classifications.label  data_classifications.label_id  data_classifications.scanned  "
         "data_classifications.tag  data_classifications.tag_id  environment  exprt_ratings  first_seen  "
-        "highest_severity  id  insights.boolean_value  insights.id  instance_id  instance_state  ioa_count  iom_count  "
+        "highest_severity  id  insights.boolean_value  insights.date_value  insights.id  insights.integer_value  "
+        "insights.string_list_value  insights.string_value  instance_id  instance_state  ioa_count  iom_count  "
         "legacy_resource_id  legacy_uuid  managed_by  non_compliant.benchmark_name  non_compliant.benchmark_version  "
         "non_compliant.framework  non_compliant.policy_id  non_compliant.requirement  non_compliant.rule  "
         "non_compliant.section  non_compliant.severity  organization_Id  os_version  platform_name  publicly_exposed  "

{crowdstrike_falconpy_dev-1.5.3 → crowdstrike_falconpy_dev-1.5.4}/src/falconpydev/_endpoint/_cspm_registration.py

@@ -812,6 +812,77 @@ _cspm_registration_endpoints = [
       }
     ]
   ],
+  [
+    "GetCSPMGCPAccount",
+    "GET",
+    "/cloud-connect-cspm-gcp/entities/account/v1",
+    "Returns information about the current status of an GCP account.",
+    "cspm_registration",
+    [
+      {
+        "enum": [
+          "Folder",
+          "Organization",
+          "Project"
+        ],
+        "type": "string",
+        "description": "GCP Hierarchy Parent Type, organization/folder/project",
+        "name": "parent_type",
+        "in": "query"
+      },
+      {
+        "type": "array",
+        "items": {
+          "type": "string"
+        },
+        "collectionFormat": "multi",
+        "description": "Hierarchical Resource IDs of accounts",
+        "name": "ids",
+        "in": "query"
+      },
+      {
+        "enum": [
+          "dry",
+          "full"
+        ],
+        "type": "string",
+        "description": "Type of scan, dry or full, to perform on selected accounts",
+        "name": "scan-type",
+        "in": "query"
+      },
+      {
+        "enum": [
+          "operational",
+          "provisioned"
+        ],
+        "type": "string",
+        "description": "Account status to filter results by.",
+        "name": "status",
+        "in": "query"
+      },
+      {
+        "maxLength": 3,
+        "minLength": 1,
+        "type": "integer",
+        "default": 100,
+        "description": "The maximum records to return. Defaults to 100.",
+        "name": "limit",
+        "in": "query"
+      },
+      {
+        "type": "integer",
+        "description": "The offset to start retrieving records from",
+        "name": "offset",
+        "in": "query"
+      },
+      {
+        "type": "string",
+        "description": "Order fields in ascending or descending order. Ex: parent_type|asc.",
+        "name": "sort",
+        "in": "query"
+      }
+    ]
+  ],
   [
     "CreateCSPMGCPAccount",
     "POST",
@@ -1304,6 +1375,22 @@ _cspm_registration_endpoints = [
       }
     ]
   ],
+  [
+    "getCloudEventIDs",
+    "GET",
+    "/detects/queries/cloud-events/v1",
+    "Get list of related cloud event LogScale IDs for a given IOA",
+    "cspm_registration",
+    [
+      {
+        "type": "string",
+        "description": "IOA Aggregate Event ID",
+        "name": "id",
+        "in": "query",
+        "required": True
+      }
+    ]
+  ],
   [
     "GetConfigurationDetectionIDsV2",
     "GET",

{crowdstrike_falconpy_dev-1.5.3 → crowdstrike_falconpy_dev-1.5.4}/src/falconpydev/_endpoint/_deployments.py

@@ -176,6 +176,27 @@ _deployments_endpoints = [
       }
     ]
   ],
+  [
+    "GetEntityIDsByQueryPOSTV2",
+    "POST",
+    "/deployment-coordinator/entities/release-notes/GET/v2",
+    "returns the release notes for the IDs in the request with EA and GA dates in ISO 8601 format",
+    "deployments",
+    [
+      {
+        "type": "string",
+        "description": "authorization header",
+        "name": "Authorization",
+        "in": "header",
+        "required": True
+      },
+      {
+        "name": "body",
+        "in": "body",
+        "required": True
+      }
+    ]
+  ],
   [
     "QueryReleaseNotesV1",
     "GET",