prelude-sdk 2.6.36__tar.gz → 2.6.38__tar.gz

{prelude_sdk-2.6.36 → prelude_sdk-2.6.38}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: prelude-sdk
-Version: 2.6.36
+Version: 2.6.38
 Summary: For interacting with the Prelude API
 Home-page: https://github.com/preludeorg
 Author: Prelude Research

{prelude_sdk-2.6.36 → prelude_sdk-2.6.38}/prelude_sdk/controllers/iam_controller.py

@@ -30,13 +30,21 @@ class IAMAccountController(HttpController):
         return res.json()
 
     @verify_credentials
-    def update_account(self, mode: Mode = None, company: str = None, slug: str = None):
+    def update_account(
+        self,
+        company: str = None,
+        inactivity_timeout: int = None,
+        mode: Mode = None,
+        slug: str = None,
+    ):
         """Update properties on an account"""
         body = dict()
         if mode is not None:
             body["mode"] = mode.name
         if company is not None:
             body["company"] = company
+        if inactivity_timeout is not None:
+            body["inactivity_timeout"] = inactivity_timeout
         if slug is not None:
             body["slug"] = slug
 

{prelude_sdk-2.6.36 → prelude_sdk-2.6.38}/prelude_sdk/models/codes.py

@@ -187,6 +187,8 @@ class Control(Enum, metaclass=MissingItem):
     INTEL_INTUNE = 28
     CISCO_MERAKI = 29
     CISCO_MERAKI_IDENTITY = 30
+    CROWDSTRIKE_VULN = 31
+    DEFENDER_VULN = 32
 
     @classmethod
     def _missing_(cls, value):
@@ -295,6 +297,10 @@ class Control(Enum, metaclass=MissingItem):
                 return "Cisco Meraki"
             case Control.CISCO_MERAKI_IDENTITY:
                 return "Cisco Meraki Identity"
+            case Control.CROWDSTRIKE_VULN:
+                return "CrowdStrike Vulnerability Management"
+            case Control.DEFENDER_VULN:
+                return "Microsoft Defender Vulnerability Management"
             case _:
                 return "Unknown Control"
 
@@ -359,6 +365,8 @@ class ControlCategory(Enum, metaclass=MissingItem):
                 Control.VECTR,
             ],
             ControlCategory.VULN_MANAGER: [
+                Control.CROWDSTRIKE_VULN,
+                Control.DEFENDER_VULN,
                 Control.QUALYS,
                 Control.RAPID7,
                 Control.TENABLE,
@@ -418,8 +426,10 @@ class SCMCategory(Enum, metaclass=MissingItem):
                 Control.AWS_SSM,
                 Control.AZURE_VM,
                 Control.CROWDSTRIKE,
+                Control.CROWDSTRIKE_VULN,
                 Control.DEFENDER,
                 Control.DEFENDER_DISCOVERY,
+                Control.DEFENDER_VULN,
                 Control.EC2,
                 Control.INTEL_INTUNE,
                 Control.INTUNE,
@@ -533,13 +543,22 @@ class PartnerEvents(Enum, metaclass=MissingItem):
             PartnerEvents.MISSING_SERVER_MANAGER: [ControlCategory.ASSET_MANAGER],
             PartnerEvents.MISSING_VULN_MANAGER: [ControlCategory.VULN_MANAGER],
             PartnerEvents.MISSING_VULN_SCAN: [ControlCategory.VULN_MANAGER],
-            PartnerEvents.NO_ASR_POLICY: [ControlCategory.ASSET_MANAGER],
-            PartnerEvents.NO_AV_POLICY: [ControlCategory.XDR],
+            PartnerEvents.NO_ASR_POLICY: [
+                ControlCategory.ASSET_MANAGER,
+                ControlCategory.XDR,
+            ],
+            PartnerEvents.NO_AV_POLICY: [
+                ControlCategory.ASSET_MANAGER,
+                ControlCategory.XDR,
+            ],
             PartnerEvents.NO_DEVICE_COMPLIANCE_POLICY: [ControlCategory.ASSET_MANAGER],
             PartnerEvents.NO_DISK_ENCRYPTION: [ControlCategory.ASSET_MANAGER],
             PartnerEvents.NO_DISK_ENCRYPTION_POLICY: [ControlCategory.ASSET_MANAGER],
             PartnerEvents.NO_EDR_POLICY: [ControlCategory.XDR],
-            PartnerEvents.NO_HOST_FIREWALL_POLICY: [ControlCategory.ASSET_MANAGER],
+            PartnerEvents.NO_HOST_FIREWALL_POLICY: [
+                ControlCategory.ASSET_MANAGER,
+                ControlCategory.XDR,
+            ],
             PartnerEvents.NO_REGISTERED_DEVICES: [ControlCategory.IDENTITY],
             PartnerEvents.NONCOMPLIANT: [ControlCategory.ASSET_MANAGER],
             PartnerEvents.OUT_OF_DATE_FIRMWARE: [ControlCategory.NETWORK],

{prelude_sdk-2.6.36 → prelude_sdk-2.6.38}/prelude_sdk.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: prelude-sdk
-Version: 2.6.36
+Version: 2.6.38
 Summary: For interacting with the Prelude API
 Home-page: https://github.com/preludeorg
 Author: Prelude Research

{prelude_sdk-2.6.36 → prelude_sdk-2.6.38}/setup.cfg

@@ -1,6 +1,6 @@
 [metadata]
 name = prelude-sdk
-version = 2.6.36
+version = 2.6.38
 author = Prelude Research
 author_email = support@preludesecurity.com
 description = For interacting with the Prelude API

{prelude_sdk-2.6.36 → prelude_sdk-2.6.38}/tests/test_partner.py

@@ -498,3 +498,21 @@ class TestPartner:
         assert res["pagination"]["offset"] == 0
         assert res["pagination"]["total"] > 0
         pytest.crowdstrike_advisory_id = res["advisories"][0]["id"]
+
+    def test_delete_endpoint(
+        self,
+        unwrap,
+        host,
+        edr_id,
+        control,
+        os,
+        platform,
+        policy,
+        policy_name,
+        webhook_keys,
+        group_id,
+    ):
+        unwrap(self.detect.delete_endpoint)(self.detect, pytest.endpoint["endpoint_id"])
+        res = unwrap(self.detect.list_endpoints)(self.detect)
+        sorted_res = {r["serial_num"]: r for r in res}
+        assert pytest.endpoint["serial_num"] not in sorted_res

{prelude_sdk-2.6.36 → prelude_sdk-2.6.38}/tests/test_scm.py

@@ -200,6 +200,17 @@ class TestScmPerControl:
                     "endpoint_count",
                     "success_count",
                 } == evaluation["policies"][0].keys()
+            elif control == Control.INTEL_INTUNE:
+                evaluation = _wait_for_policies(control, instance_id, "endpoint")
+                assert {
+                    "active_count",
+                    "excepted",
+                    "id",
+                    "name",
+                    "not_supported_count",
+                    "supported_count",
+                    "techniques",
+                } == evaluation["policies"][0].keys()
             else:
                 assert len(evaluation["policies"]) == 0
         elif "user_evaluation" in evaluation: