crowdstrike-falconpy-dev 1.6.2__tar.gz → 1.6.3__tar.gz

{crowdstrike_falconpy_dev-1.6.2 → crowdstrike_falconpy_dev-1.6.3}/CHANGELOG.md

@@ -1,3 +1,305 @@
+# Version 1.6.3
+## Added features and functionality
++ Added: New __Access Scopes__ service collection with two operations.
+    - _list_access_scopes_external_
+    - _query_access_scopes_external_
+    - `_endpoint/__init__.py`
+    - `_endpoint/_access_scopes.py`
+    - `_payload/__init__.py`
+    - `_payload/_access_scopes.py`
+    - `__init__.py`
+    - `access_scopes.py`
+    > Unit testing expanded to complete code coverage.
+    - `tests/test_access_scopes.py`
+
++ Added: New __Api Clients__ service collection with seven operations.
+    - _get_accessible_scopes_
+    - _reset_api_client_secret_
+    - _get_api_clients_
+    - _create_api_client_
+    - _delete_api_clients_
+    - _update_api_client_
+    - _get_all_api_client_ids_for_customer_
+    - `_endpoint/__init__.py`
+    - `_endpoint/_api_clients.py`
+    - `_payload/__init__.py`
+    - `_payload/_api_clients.py`
+    - `__init__.py`
+    - `api_clients.py`
+    > Unit testing expanded to complete code coverage.
+    - `tests/test_api_clients.py`
+
++ Added: Added nine new operations to the __Cloud Azure Registration__ service collection.
+    - _cloud_registration_azure_get_issue_suppression_values_by_field_
+    - _cloud_registration_azure_get_issue_values_by_field_
+    - _cloud_registration_azure_get_suppressions_
+    - _cloud_registration_azure_create_suppressions_
+    - _cloud_registration_azure_delete_suppressions_
+    - _cloud_registration_azure_update_suppressions_
+    - _cloud_registration_azure_get_issues_
+    - _cloud_registration_azure_get_script_versions_
+    - _cloud_registration_azure_get_script_
+    - `_endpoint/_cloud_azure_registration.py`
+    - `cloud_azure_registration.py`
+    > Unit testing expanded to complete code coverage.
+    - `tests/test_cloud_azure_registration.py`
+
++ Removed: Removed `download_azure_script` operation from the __Cloud Azure Registration__ service collection.
+    - `_endpoint/_cloud_azure_registration.py`
+    - `_endpoint/deprecated/_cloud_azure_registration.py`
+    - `_endpoint/deprecated/_mapping.py`
+    - `cloud_azure_registration.py`
+
++ Added: Added `CloneComplianceFramework` operation to the __Cloud Policies__ service collection.
+    - _clone_compliance_framework_
+    - `_endpoint/_cloud_policies.py`
+    - `cloud_policies.py`
+    > Unit testing expanded to complete code coverage.
+    - `tests/test_cloud_policies.py`
+
++ Updated: Added `adversary`, `groups`, `groups.business_impact`, `groups.business_unit`, `groups.environment`, and `threat_actors` as allowed filter fields in the __Cloud Security__ service collection.
+    - `_endpoint/_cloud_security.py`
+    - `cloud_security.py`
+
++ Added: Added `cloud_security_assets_entities_post` operation to the __Cloud Security Assets__ service collection.
+    - _cloud_security_assets_entities_post_
+    - `_endpoint/_cloud_security_assets.py`
+    - `cloud_security_assets.py`
+    > Unit testing expanded to complete code coverage.
+    - `tests/test_cloud_security_assets.py`
+
++ Updated: Added `resource_gcrn`, `resource_parent`, `tags_string`, `azure.resource_group`, and `insights.*` as allowed filter fields in the __Cloud Security Assets__ service collection.
+    - `_endpoint/_cloud_security_assets.py`
+    - `cloud_security_assets.py`
+
++ Updated: Added `tenant_id` as an allowed sort and filter field in the __Cloud Security Detections__ service collection.
+    - `_endpoint/_cloud_security_detections.py`
+    - `cloud_security_detections.py`
+
++ Added: New __Cloud Security Registration Combined__ service collection with one operation.
+    - _cloud_registration_cross_provider_get_account_aggregates_
+    - `_endpoint/__init__.py`
+    - `_endpoint/_cloud_security_registration_combined.py`
+    - `_payload/__init__.py`
+    - `_payload/_cloud_security_registration_combined.py`
+    - `__init__.py`
+    - `cloud_security_registration_combined.py`
+    > Unit testing expanded to complete code coverage.
+    - `tests/test_cloud_security_registration_combined.py`
+
++ Added: New __Cloud Security Risks__ service collection with one operation.
+    - _cloud_security_timeline_risks_enriched_
+    - `_endpoint/__init__.py`
+    - `_endpoint/_cloud_security_risks.py`
+    - `_payload/__init__.py`
+    - `_payload/_cloud_security_risks.py`
+    - `__init__.py`
+    - `cloud_security_risks.py`
+    > Unit testing expanded to complete code coverage.
+    - `tests/test_cloud_security_risks.py`
+
++ Updated: Added `architecture` as an allowed filter field in multiple operations within the __Container Images__ service collection.
+    - `_endpoint/_container_images.py`
+    - `container_images.py`
+
++ Removed: Removed `AggregateFCIncidents` operation from the __Falcon Complete Dashboard__ service collection.
+    - `_endpoint/_falcon_complete_dashboard.py`
+    - `_endpoint/deprecated/_falcon_complete_dashboard.py`
+    - `_endpoint/deprecated/_mapping.py`
+    - `falcon_complete_dashboard.py`
+
++ Removed: Removed `QueryIncidentIdsByFilter` operation from the __Falcon Complete Dashboard__ service collection.
+    - `_endpoint/_falcon_complete_dashboard.py`
+    - `_endpoint/deprecated/_falcon_complete_dashboard.py`
+    - `_endpoint/deprecated/_mapping.py`
+    - `falcon_complete_dashboard.py`
+
++ Updated: Added `architecture` parameter to _GetImageAssessmentImages_ and _GetImageAssessmentImagesByDigest_ operations in the __Falcon Container__ service collection.
+    - `_endpoint/_falcon_container.py`
+    - `falcon_container.py`
+
++ Added: New __Federated Connections__ service collection with three operations.
+    - _post_federated_connections_config_
+    - _delete_federated_connections_config_
+    - _patch_federated_connections_config_
+    - `_endpoint/__init__.py`
+    - `_endpoint/_federated_connections.py`
+    - `_payload/__init__.py`
+    - `_payload/_federated_connections.py`
+    - `__init__.py`
+    - `federated_connections.py`
+    > Unit testing expanded to complete code coverage.
+    - `tests/test_federated_connections.py`
+
++ Removed: Removed `CreateFileV1` operation from the __Foundry Logscale__ service collection.
+    - `_endpoint/_foundry_logscale.py`
+    - `_endpoint/deprecated/_foundry_logscale.py`
+    - `_endpoint/deprecated/_mapping.py`
+    - `foundry_logscale.py`
+
++ Removed: Removed `UpdateFileV1` operation from the __Foundry Logscale__ service collection.
+    - `_endpoint/_foundry_logscale.py`
+    - `_endpoint/deprecated/_foundry_logscale.py`
+    - `_endpoint/deprecated/_mapping.py`
+    - `foundry_logscale.py`
+
++ Added: New __Foundry Lookup Files__ service collection with two operations.
+    - _create_file_v1_
+    - _update_file_v1_
+    - `_endpoint/__init__.py`
+    - `_endpoint/_foundry_lookup_files.py`
+    - `_payload/__init__.py`
+    - `_payload/_foundry_lookup_files.py`
+    - `__init__.py`
+    - `foundry_lookup_files.py`
+    > Unit testing expanded to complete code coverage.
+    - `tests/test_foundry_lookup_files.py`
+
++ Updated: Updated __Host Migration__ endpoint definitions and docstrings.
+    - `_endpoint/_host_migration.py`
+    - `host_migration.py`
+
++ Updated: Expanded available sort and filter fields in the __Hosts__ service collection to include `device_policies.*` fields, `agent_load_flags`, `agent_version`, `criticality`, `deployment_type`, `detection_suppression_status`, and many more.
+    - `_endpoint/_hosts.py`
+    - `hosts.py`
+
++ Added: Added three new operations to the __Intel__ service collection.
+    - _cao_incidents_aggregates_v1_
+    - _cao_incidents_entities_v1_
+    - _cao_incidents_queries_v1_
+    - `_endpoint/_intel.py`
+    - `intel.py`
+    > Unit testing expanded to complete code coverage.
+    - `tests/test_intel.py`
+
++ Added: New __Knowledge Base Audit Events__ service collection with four operations.
+    - _aggregates_knowledge_base_audit_events_v1_
+    - _combined_knowledge_base_audit_events_v1_
+    - _entities_knowledge_base_audit_events_v1_
+    - _queries_knowledge_base_audit_events_v1_
+    - `_endpoint/__init__.py`
+    - `_endpoint/_knowledge_base_audit_events.py`
+    - `_payload/__init__.py`
+    - `_payload/_knowledge_base_audit_events.py`
+    - `__init__.py`
+    - `knowledge_base_audit_events.py`
+    > Unit testing expanded to complete code coverage.
+    - `tests/test_knowledge_base_audit_events.py`
+
++ Added: New __Knowledge Base Files__ service collection with six operations.
+    - _entities_knowledge_base_files_download_v1_
+    - _entities_knowledge_base_files_v1_
+    - _entities_knowledge_base_files_update_v1_
+    - _entities_knowledge_base_files_create_v1_
+    - _entities_knowledge_base_files_delete_v1_
+    - _queries_knowledge_base_files_v1_
+    - `_endpoint/__init__.py`
+    - `_endpoint/_knowledge_base_files.py`
+    - `_payload/__init__.py`
+    - `_payload/_knowledge_base_files.py`
+    - `__init__.py`
+    - `knowledge_base_files.py`
+    > Unit testing expanded to complete code coverage.
+    - `tests/test_knowledge_base_files.py`
+
++ Added: New __Knowledge Bases__ service collection with five operations.
+    - _aggregates_knowledge_bases_v1_
+    - _entities_knowledge_bases_v1_
+    - _entities_knowledge_bases_create_v1_
+    - _entities_knowledge_bases_update_v1_
+    - _queries_knowledge_bases_v1_
+    - `_endpoint/__init__.py`
+    - `_endpoint/_knowledge_bases.py`
+    - `_payload/__init__.py`
+    - `_payload/_knowledge_bases.py`
+    - `__init__.py`
+    - `knowledge_bases.py`
+    > Unit testing expanded to complete code coverage.
+    - `tests/test_knowledge_bases.py`
+
++ Added: Added eight new operations to the __Ngsiem__ service collection.
+    - _bulk_create_dashboards_from_template_
+    - _bulk_update_dashboards_from_template_
+    - _bulk_get_lookup_files_
+    - _bulk_create_lookup_files_
+    - _bulk_update_lookup_files_
+    - _bulk_create_saved_queries_from_template_
+    - _bulk_update_saved_queries_from_template_
+    - _create_parser_extension_
+    - `_endpoint/_ngsiem.py`
+    - `ngsiem.py`
+    > Unit testing expanded to complete code coverage.
+    - `tests/test_ngsiem.py`
+
++ Updated: Added `schema_validation_enabled` parameter to the _CreateConnectorConfig_ operation in the __Ngsiem__ service collection.
+    - `_endpoint/_ngsiem.py`
+    - `ngsiem.py`
+
++ Updated: Added `targeted_platforms` and `channel_file_status` as allowed filter fields in the _query_scheduled_scans_ operation within the __Ods__ service collection.
+    - `_endpoint/_ods.py`
+    - `ods.py`
+
++ Added: New __Profile Groups__ service collection with nine operations.
+    - _group_actions_v1_mixin0_
+    - _group_users_actions_v1_mixin0_
+    - _get_group_users_v1_
+    - _get_groups_v1_mixin0_
+    - _create_group_v1_mixin0_
+    - _delete_groups_v1_
+    - _update_group_v1_mixin0_
+    - _get_user_groups_v1_
+    - _query_groups_v1_mixin0_
+    - `_endpoint/__init__.py`
+    - `_endpoint/_profile_groups.py`
+    - `_payload/__init__.py`
+    - `_payload/_profile_groups.py`
+    - `__init__.py`
+    - `profile_groups.py`
+    > Unit testing expanded to complete code coverage.
+    - `tests/test_profile_groups.py`
+
++ Removed: Removed `combinedQueryInstalledPatches` operation from the __Spotlight Vulnerabilities__ service collection.
+    - `_endpoint/_spotlight_vulnerabilities.py`
+    - `_endpoint/deprecated/_spotlight_vulnerabilities.py`
+    - `_endpoint/deprecated/_mapping.py`
+    - `spotlight_vulnerabilities.py`
+
++ Updated: Added new AI-related edge types (`ai_agent_used_by`, `connected_mcp`, `invokes_model`, `loaded_skill`, `mcp_tool_call`, `runs_session`, `session_process`, `session_run_by`, `spawns_agent`, `tool_spawned_process`, `used_tool`, `uses_ai_agent`) and vertex types (`ai_agent`, `ai_model`, `ai_session`, `ai_skill`, `ai_tool`, `mcp_server`) to the __Threatgraph__ service collection.
+    - `_endpoint/_threatgraph.py`
+    - `threatgraph.py`
+
++ Added: Added `WorkflowDefinitionsDelete` operation to the __Workflows__ service collection.
+    - _workflow_definitions_delete_
+    - `_endpoint/_workflows.py`
+    - `workflows.py`
+    > Unit testing expanded to complete code coverage.
+    - `tests/test_workflows.py`
+    - Thanks to @gkazimiarovich for their contribution!
+
+## Issues resolved
++ Fixed: Fixed bug in __ITAutomation__ causing `cancel_execution` to wrap `task_execution_id` in a list when the API expects a string. Passing `task_execution_id` as a keyword argument now correctly produces a flat body payload. Closes #1465.
+    - `it_automation.py`
+
++ Fixed: Fixed missing comma in `_payload/_generic.py` causing implicit string concatenation between `extended_bounds` and `filters_spec`, breaking both kwargs for all aggregate operations. Closes #1460.
+    - `_payload/_generic.py`
+
++ Fixed: Fixed missing comma in `_payload/_aspm.py` causing implicit string concatenation between `type` and `username`, breaking both kwargs for ASPM relay node retrieval operations. Closes #1461.
+    - `_payload/_aspm.py`
+
++ Fixed: Fixed missing comma in `_payload/_foundry.py` causing implicit string concatenation between `version` and `with_in`, breaking both kwargs for Foundry LogScale saved search execute operations. Closes #1462.
+    - `_payload/_foundry.py`
+
++ Fixed: Fixed missing comma in `_payload/_cspm_registration.py` causing implicit string concatenation between `project_id` and `service_account_conditions`, breaking both kwargs for GCP CSPM service account validation. Closes #1463.
+    - `_payload/_cspm_registration.py`
+
++ Fixed: Fixed typo `dashbaord_url` in `_payload/_aspm.py` causing `dashboard_url` kwargs to be silently ignored for ASPM node creation operations.
+    - `_payload/_aspm.py`
+
++ Fixed: Fixed missing `custom` keyword argument in the `create_data_connection` method of the __NGSIEM__ service collection. The `custom` field (a free-form string map used for connector-specific configuration such as `PluginConfigID`) was omitted from the payload builder, causing it to be silently dropped and the API to return HTTP 400 with "required custom property missing". Passing `custom={"PluginConfigID": "<value>"}` as a keyword argument now works correctly. Closes #1468.
+    - `_payload/_ngsiem.py`
+    - `ngsiem.py`
+
+
 # Version 1.6.2
 ## Added features and functionality
 + Added: New __Network Scan Global Configs__ service collection with two operations.

{crowdstrike_falconpy_dev-1.6.2 → crowdstrike_falconpy_dev-1.6.3}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: crowdstrike-falconpy-dev
-Version: 1.6.2
+Version: 1.6.3
 Summary: The CrowdStrike Falcon SDK for Python
 Project-URL: Documentation, https://www.falconpy.io
 Project-URL: Homepage, https://github.com/CrowdStrike/falconpy

{crowdstrike_falconpy_dev-1.6.2 → crowdstrike_falconpy_dev-1.6.3}/src/falconpydev/__init__.py

@@ -105,8 +105,10 @@ from ._ngsiem import (
     SessionManager
 )
 from ._helper import random_string, Indicator, Color, find_operation
+from .access_scopes import AccessScopes
 from .admission_control_policies import AdmissionControlPolicies
 from .alerts import Alerts
+from .api_clients import APIClients
 from .api_integrations import APIIntegrations
 from .api_complete import APIHarness, APIHarnessV2
 from .aspm import ASPM
@@ -122,6 +124,8 @@ from .cloud_security import CloudSecurity
 from .cloud_security_assets import CloudSecurityAssets
 from .cloud_security_compliance import CloudSecurityCompliance
 from .cloud_security_detections import CloudSecurityDetections
+from .cloud_security_registration_combined import CloudSecurityRegistrationCombined
+from .cloud_security_risks import CloudSecurityRisks
 from .cloud_snapshots import CloudSnapshots
 from .container_image_compliance import ContainerImageCompliance, ComplianceAssessments
 from .configuration_assessment_evaluation_logic import ConfigurationAssessmentEvaluationLogic
@@ -155,10 +159,12 @@ from .falcon_complete_dashboard import CompleteDashboard
 from .falcon_container import FalconContainer
 from .falconx_sandbox import FalconXSandbox
 from .fdr import FDR
+from .federated_connections import FederatedConnections
 from .filevantage import FileVantage
 from .firewall_management import FirewallManagement
 from .firewall_policies import FirewallPolicies
 from .foundry_logscale import FoundryLogScale
+from .foundry_lookup_files import FoundryLookupFiles
 from .host_group import HostGroup
 from .hosts import Hosts
 from .host_migration import HostMigration
@@ -173,6 +179,9 @@ from .ioa_exclusions import IOAExclusions
 from .ioc import IOC
 from .iocs import Iocs
 from .it_automation import ITAutomation, F4IT
+from .knowledge_base_audit_events import KnowledgeBaseAuditEvents
+from .knowledge_base_files import KnowledgeBaseFiles
+from .knowledge_bases import KnowledgeBases
 from .kubernetes_container_compliance import KubernetesContainerCompliance
 from .kubernetes_protection import KubernetesProtection
 from .malquery import MalQuery
@@ -193,6 +202,7 @@ from .ngsiem import NGSIEM
 from .oauth2 import OAuth2
 from .ods import ODS
 from .prevention_policy import PreventionPolicy, PreventionPolicies
+from .profile_groups import ProfileGroups
 from .quarantine import Quarantine
 from .quick_scan import QuickScan
 from .quick_scan_pro import QuickScanPro
@@ -276,7 +286,12 @@ __all__ = [
     "SpotlightVulnerabilityMetadata", "ServerlessExports", "ServerlessVulnerabilities",
     "NetworkScanGlobalConfigs", "NetworkScanNetworks", "NetworkScanScanRunReports",
     "NetworkScanScanRuns", "NetworkScanScanners", "NetworkScanScans",
-    "NetworkScanTemplates", "NetworkScanZones", "NetworkScan"
+    "NetworkScanTemplates", "NetworkScanZones", "NetworkScan",
+    "AccessScopes", "APIClients",
+    "CloudSecurityRegistrationCombined", "CloudSecurityRisks",
+    "FederatedConnections", "FoundryLookupFiles",
+    "KnowledgeBaseAuditEvents", "KnowledgeBaseFiles",
+    "KnowledgeBases", "ProfileGroups"
     ]
 """
 This is free and unencumbered software released into the public domain.

{crowdstrike_falconpy_dev-1.6.2 → crowdstrike_falconpy_dev-1.6.3}/src/falconpydev/_endpoint/__init__.py

@@ -66,9 +66,14 @@ from .deprecated import _user_management_deprecated
 from .deprecated import _deprecated_operation_mapping
 from .deprecated import _deprecated_class_mapping
 from .deprecated import _zero_trust_assessment_deprecated
+from .deprecated import _falcon_complete_dashboard_deprecated
+from .deprecated import _foundry_logscale_deprecated
+from .deprecated import _spotlight_vulnerabilities_deprecated
 
+from ._access_scopes import _access_scopes_endpoints
 from ._admission_control_policies import _admission_control_policies_endpoints
 from ._alerts import _alerts_endpoints
+from ._api_clients import _api_clients_endpoints
 from ._api_integrations import _api_integrations_endpoints
 from ._aspm import _aspm_endpoints
 from ._cao_hunting import _cao_hunting_endpoints
@@ -84,6 +89,8 @@ from ._cloud_security import _cloud_security_endpoints
 from ._cloud_security_assets import _cloud_security_assets_endpoints
 from ._cloud_security_compliance import _cloud_security_compliance_endpoints
 from ._cloud_security_detections import _cloud_security_detections_endpoints
+from ._cloud_security_registration_combined import _cloud_security_registration_combined_endpoints
+from ._cloud_security_risks import _cloud_security_risks_endpoints
 from ._cloud_snapshots import _cloud_snapshots_endpoints
 from ._container_image_compliance import _container_image_compliance_endpoints
 from ._configuration_assessment_evaluation_logic import _configuration_assessment_evaluation_logic_endpoints
@@ -116,10 +123,12 @@ from ._falcon_complete_dashboard import _falcon_complete_dashboard_endpoints
 from ._falcon_container import _falcon_container_endpoints
 from ._falconx_sandbox import _falconx_sandbox_endpoints
 from ._fdr import _fdr_endpoints
+from ._federated_connections import _federated_connections_endpoints
 from ._filevantage import _filevantage_endpoints
 from ._firewall_management import _firewall_management_endpoints
 from ._firewall_policies import _firewall_policies_endpoints
 from ._foundry_logscale import _foundry_logscale_endpoints
+from ._foundry_lookup_files import _foundry_lookup_files_endpoints
 from ._host_group import _host_group_endpoints
 from ._hosts import _hosts_endpoints
 from ._host_migration import _host_migration_endpoints
@@ -134,6 +143,9 @@ from ._ioa_exclusions import _ioa_exclusions_endpoints
 from ._ioc import _ioc_endpoints
 from ._iocs import _iocs_endpoints
 from ._it_automation import _it_automation_endpoints
+from ._knowledge_base_audit_events import _knowledge_base_audit_events_endpoints
+from ._knowledge_base_files import _knowledge_base_files_endpoints
+from ._knowledge_bases import _knowledge_bases_endpoints
 from ._kubernetes_container_compliance import _kubernetes_container_compliance_endpoints
 from ._kubernetes_protection import _kubernetes_protection_endpoints
 from ._malquery import _malquery_endpoints
@@ -153,6 +165,7 @@ from ._ngsiem import _ngsiem_endpoints
 from ._oauth2 import _oauth2_endpoints
 from ._ods import _ods_endpoints
 from ._prevention_policies import _prevention_policies_endpoints
+from ._profile_groups import _profile_groups_endpoints
 from ._quarantine import _quarantine_endpoints
 from ._quick_scan import _quick_scan_endpoints
 from ._quick_scan_pro import _quick_scan_pro_endpoints
@@ -182,8 +195,10 @@ from ._workflows import _workflows_endpoints
 from ._zero_trust_assessment import _zero_trust_assessment_endpoints
 
 api_endpoints: List[Any] = []
+api_endpoints.extend(_access_scopes_endpoints)
 api_endpoints.extend(_admission_control_policies_endpoints)
 api_endpoints.extend(_alerts_endpoints)
+api_endpoints.extend(_api_clients_endpoints)
 api_endpoints.extend(_api_integrations_endpoints)
 api_endpoints.extend(_aspm_endpoints)
 api_endpoints.extend(_cao_hunting_endpoints)
@@ -199,6 +214,8 @@ api_endpoints.extend(_cloud_security_endpoints)
 api_endpoints.extend(_cloud_security_assets_endpoints)
 api_endpoints.extend(_cloud_security_compliance_endpoints)
 api_endpoints.extend(_cloud_security_detections_endpoints)
+api_endpoints.extend(_cloud_security_registration_combined_endpoints)
+api_endpoints.extend(_cloud_security_risks_endpoints)
 api_endpoints.extend(_cloud_snapshots_endpoints)
 api_endpoints.extend(_container_image_compliance_endpoints)
 api_endpoints.extend(_configuration_assessment_evaluation_logic_endpoints)
@@ -231,10 +248,12 @@ api_endpoints.extend(_falcon_complete_dashboard_endpoints)
 api_endpoints.extend(_falcon_container_endpoints)
 api_endpoints.extend(_falconx_sandbox_endpoints)
 api_endpoints.extend(_fdr_endpoints)
+api_endpoints.extend(_federated_connections_endpoints)
 api_endpoints.extend(_filevantage_endpoints)
 api_endpoints.extend(_firewall_management_endpoints)
 api_endpoints.extend(_firewall_policies_endpoints)
 api_endpoints.extend(_foundry_logscale_endpoints)
+api_endpoints.extend(_foundry_lookup_files_endpoints)
 api_endpoints.extend(_host_group_endpoints)
 api_endpoints.extend(_hosts_endpoints)
 api_endpoints.extend(_host_migration_endpoints)
@@ -249,6 +268,9 @@ api_endpoints.extend(_ioa_exclusions_endpoints)
 api_endpoints.extend(_ioc_endpoints)
 api_endpoints.extend(_iocs_endpoints)
 api_endpoints.extend(_it_automation_endpoints)
+api_endpoints.extend(_knowledge_base_audit_events_endpoints)
+api_endpoints.extend(_knowledge_base_files_endpoints)
+api_endpoints.extend(_knowledge_bases_endpoints)
 api_endpoints.extend(_kubernetes_container_compliance_endpoints)
 api_endpoints.extend(_kubernetes_protection_endpoints)
 api_endpoints.extend(_malquery_endpoints)
@@ -268,6 +290,7 @@ api_endpoints.extend(_ngsiem_endpoints)
 api_endpoints.extend(_oauth2_endpoints)
 api_endpoints.extend(_ods_endpoints)
 api_endpoints.extend(_prevention_policies_endpoints)
+api_endpoints.extend(_profile_groups_endpoints)
 api_endpoints.extend(_quarantine_endpoints)
 api_endpoints.extend(_quick_scan_endpoints)
 api_endpoints.extend(_quick_scan_pro_endpoints)
@@ -342,6 +365,9 @@ deprecated_endpoints.extend(_scheduled_reports_deprecated)
 deprecated_endpoints.extend(_user_management_deprecated)
 deprecated_endpoints.extend(_workflows_deprecated)
 deprecated_endpoints.extend(_zero_trust_assessment_deprecated)
+deprecated_endpoints.extend(_falcon_complete_dashboard_deprecated)
+deprecated_endpoints.extend(_foundry_logscale_deprecated)
+deprecated_endpoints.extend(_spotlight_vulnerabilities_deprecated)
 
 # Mapping of manually deprecated endpoints
 operation_deprecation_mapping = _deprecated_operation_mapping

crowdstrike_falconpy_dev-1.6.3/src/falconpydev/_endpoint/_access_scopes.py

@@ -0,0 +1,90 @@
+"""Internal API endpoint constant library.
+
+ _______                        __ _______ __        __ __
+|   _   .----.-----.--.--.--.--|  |   _   |  |_.----|__|  |--.-----.
+|.  1___|   _|  _  |  |  |  |  _  |   1___|   _|   _|  |    <|  -__|
+|.  |___|__| |_____|________|_____|____   |____|__| |__|__|__|_____|
+|:  1   |                         |:  1   |
+|::.. . |   CROWDSTRIKE FALCON    |::.. . |    FalconPy
+`-------'                         `-------'
+
+OAuth2 API - Customer SDK
+
+This is free and unencumbered software released into the public domain.
+
+Anyone is free to copy, modify, publish, use, compile, sell, or
+distribute this software, either in source code form or as a compiled
+binary, for any purpose, commercial or non-commercial, and by any
+means.
+
+In jurisdictions that recognize copyright laws, the author or authors
+of this software dedicate any and all copyright interest in the
+software to the public domain. We make this dedication for the benefit
+of the public at large and to the detriment of our heirs and
+successors. We intend this dedication to be an overt act of
+relinquishment in perpetuity of all present and future rights to this
+software under copyright law.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
+EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
+MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.
+IN NO EVENT SHALL THE AUTHORS BE LIABLE FOR ANY CLAIM, DAMAGES OR
+OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE,
+ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR
+OTHER DEALINGS IN THE SOFTWARE.
+
+For more information, please refer to <https://unlicense.org>
+"""
+
+_access_scopes_endpoints = [
+  [
+    "ListAccessScopesExternal",
+    "GET",
+    "/access-scope-management/entities/access-scopes/v1",
+    "List Access Scopes By ID",
+    "access_scopes",
+    [
+      {
+        "type": "array",
+        "items": {
+          "type": "string"
+        },
+        "collectionFormat": "multi",
+        "name": "ids",
+        "in": "query"
+      }
+    ]
+  ],
+  [
+    "QueryAccessScopesExternal",
+    "GET",
+    "/access-scope-management/queries/access-scopes/v1",
+    "Query Access Scopes and returns IDs",
+    "access_scopes",
+    [
+      {
+        "type": "string",
+        "description": "A valid FQL filter.\nAccess Scope fields: name, created_by, created_at.",
+        "name": "filter",
+        "in": "query"
+      },
+      {
+        "type": "string",
+        "name": "sort",
+        "in": "query"
+      },
+      {
+        "type": "integer",
+        "format": "int64",
+        "name": "offset",
+        "in": "query"
+      },
+      {
+        "type": "integer",
+        "format": "int64",
+        "name": "limit",
+        "in": "query"
+      }
+    ]
+  ]
+]