PyPI · #3090 most downloaded on PyPI

crowdstrike-falconpy

1.6.61.7M downloads/moCrowdStrike/falconpy ↗New releases in your daily digest, changelog included.

The CrowdStrike Falcon SDK for Python

Last release 6 days ago
28 Sep 2026
Release timing varies
gaps range from 9 days to 5 months
Nearly every release is documented
notes for 60 of the last 60 stable releases
Nothing withdrawn
no release was ever pulled
6 years old
113 releases · first in 2020

Release timeline

113 releases since 2020

2020202120222023202420252026

20202026

One column per quarter.

Releases

1.3.015 Aug 2023Security2 sources agree

…1 0 100% src/falconpy/_endpoint/_spotlight_vulnerabilities.py 1 0 100% src/falconpy/_endpoint/_tailored_intelligence.py 1 0 100% src/falconpy/_endpoin…

FalconPy v1.3.0

Developer Enhancements Edition 🎉

[x] Enhancement
[x] Major Feature update
[x] Bug fixes
[x] Updated unit tests
[x] Documentation
[x] Code sample

Unit test coverage

Name                                                             Stmts   Miss  Cover
------------------------------------------------------------------------------------
src/falconpy/__init__.py                                            77      0   100%
src/falconpy/_api_request/__init__.py                                7      0   100%
src/falconpy/_api_request/_request.py                              109      0   100%
src/falconpy/_api_request/_request_behavior.py                      55      0   100%
src/falconpy/_api_request/_request_connection.py                    33      0   100%
src/falconpy/_api_request/_request_meta.py                          26      0   100%
src/falconpy/_api_request/_request_payloads.py                      31      0   100%
src/falconpy/_api_request/_request_validator.py                     17      0   100%
src/falconpy/_auth_object/__init__.py                                6      0   100%
src/falconpy/_auth_object/_base_falcon_auth.py                      19      0   100%
src/falconpy/_auth_object/_bearer_token.py                          63      0   100%
src/falconpy/_auth_object/_falcon_interface.py                     245      0   100%
src/falconpy/_auth_object/_interface_config.py                      40      0   100%
src/falconpy/_auth_object/_uber_interface.py                        33      0   100%
src/falconpy/_constant/__init__.py                                  11      0   100%
src/falconpy/_endpoint/__init__.py                                 138      0   100%
src/falconpy/_endpoint/_alerts.py                                    1      0   100%
src/falconpy/_endpoint/_cloud_connect_aws.py                         1      0   100%
src/falconpy/_endpoint/_cspm_registration.py                         1      0   100%
src/falconpy/_endpoint/_custom_ioa.py                                1      0   100%
src/falconpy/_endpoint/_d4c_registration.py                          1      0   100%
src/falconpy/_endpoint/_detects.py                                   1      0   100%
src/falconpy/_endpoint/_device_control_policies.py                   1      0   100%
src/falconpy/_endpoint/_discover.py                                  1      0   100%
src/falconpy/_endpoint/_event_streams.py                             1      0   100%
src/falconpy/_endpoint/_falcon_complete_dashboard.py                 1      0   100%
src/falconpy/_endpoint/_falcon_container.py                          1      0   100%
src/falconpy/_endpoint/_falconx_sandbox.py                           1      0   100%
src/falconpy/_endpoint/_fdr.py                                       1      0   100%
src/falconpy/_endpoint/_filevantage.py                               1      0   100%
src/falconpy/_endpoint/_firewall_management.py                       1      0   100%
src/falconpy/_endpoint/_firewall_policies.py                         1      0   100%
src/falconpy/_endpoint/_host_group.py                                1      0   100%
src/falconpy/_endpoint/_hosts.py                                     1      0   100%
src/falconpy/_endpoint/_identity_protection.py                       1      0   100%
src/falconpy/_endpoint/_incidents.py                                 1      0   100%
src/falconpy/_endpoint/_installation_tokens.py                       1      0   100%
src/falconpy/_endpoint/_intel.py                                     1      0   100%
src/falconpy/_endpoint/_ioa_exclusions.py                            1      0   100%
src/falconpy/_endpoint/_ioc.py                                       1      0   100%
src/falconpy/_endpoint/_iocs.py                                      1      0   100%
src/falconpy/_endpoint/_kubernetes_protection.py                     1      0   100%
src/falconpy/_endpoint/_malquery.py                                  1      0   100%
src/falconpy/_endpoint/_message_center.py                            1      0   100%
src/falconpy/_endpoint/_ml_exclusions.py                             1      0   100%
src/falconpy/_endpoint/_mobile_enrollment.py                         1      0   100%
src/falconpy/_endpoint/_mssp.py                                      1      0   100%
src/falconpy/_endpoint/_oauth2.py                                    1      0   100%
src/falconpy/_endpoint/_ods.py                                       1      0   100%
src/falconpy/_endpoint/_overwatch_dashboard.py                       1      0   100%
src/falconpy/_endpoint/_prevention_policies.py                       1      0   100%
src/falconpy/_endpoint/_quarantine.py                                1      0   100%
src/falconpy/_endpoint/_quick_scan.py                                1      0   100%
src/falconpy/_endpoint/_real_time_response.py                        1      0   100%
src/falconpy/_endpoint/_real_time_response_admin.py                  1      0   100%
src/falconpy/_endpoint/_recon.py                                     1      0   100%
src/falconpy/_endpoint/_report_executions.py                         1      0   100%
src/falconpy/_endpoint/_response_policies.py                         1      0   100%
src/falconpy/_endpoint/_sample_uploads.py                            1      0   100%
src/falconpy/_endpoint/_scheduled_reports.py                         1      0   100%
src/falconpy/_endpoint/_sensor_download.py                           1      0   100%
src/falconpy/_endpoint/_sensor_update_policies.py                    1      0   100%
src/falconpy/_endpoint/_sensor_visibility_exclusions.py              1      0   100%
src/falconpy/_endpoint/_spotlight_evaluation_logic.py                1      0   100%
src/falconpy/_endpoint/_spotlight_vulnerabilities.py                 1      0   100%
src/falconpy/_endpoint/_tailored_intelligence.py                     1      0   100%
src/falconpy/_endpoint/_user_management.py                           1      0   100%
src/falconpy/_endpoint/_zero_trust_assessment.py                     1      0   100%
src/falconpy/_endpoint/deprecated/__init__.py                       32      0   100%
src/falconpy/_endpoint/deprecated/_custom_ioa.py                     1      0   100%
src/falconpy/_endpoint/deprecated/_d4c_registration.py               1      0   100%
src/falconpy/_endpoint/deprecated/_discover.py                       1      0   100%
src/falconpy/_endpoint/deprecated/_fdr.py                            1      0   100%
src/falconpy/_endpoint/deprecated/_firewall_management.py            1      0   100%
src/falconpy/_endpoint/deprecated/_hosts.py                          1      0   100%
src/falconpy/_endpoint/deprecated/_identity_protection.py            1      0   100%
src/falconpy/_endpoint/deprecated/_installation_tokens.py            1      0   100%
src/falconpy/_endpoint/deprecated/_ioc.py                            1      0   100%
src/falconpy/_endpoint/deprecated/_iocs.py                           1      0   100%
src/falconpy/_endpoint/deprecated/_ods.py                            1      0   100%
src/falconpy/_endpoint/deprecated/_real_time_response.py             1      0   100%
src/falconpy/_endpoint/deprecated/_real_time_response_admin.py       1      0   100%
src/falconpy/_endpoint/deprecated/_report_executions.py              1      0   100%
src/falconpy/_endpoint/deprecated/_scheduled_reports.py              1      0   100%
src/falconpy/_endpoint/deprecated/_zero_trust_assessment.py          1      0   100%
src/falconpy/_enum/__init__.py                                       4      0   100%
src/falconpy/_enum/_base_url.py                                      7      0   100%
src/falconpy/_enum/_container_base_url.py                            6      0   100%
src/falconpy/_enum/_token_fail_reason.py                             4      0   100%
src/falconpy/_error/__init__.py                                      3      0   100%
src/falconpy/_error/_exceptions.py                                  68      0   100%
src/falconpy/_error/_warnings.py                                    34      0   100%
src/falconpy/_log/__init__.py                                        2      0   100%
src/falconpy/_log/_facility.py                                      34      0   100%
src/falconpy/_payload/__init__.py                                   26      0   100%
src/falconpy/_payload/_alerts.py                                    11      0   100%
src/falconpy/_payload/_cloud_connect_aws.py                         23      0   100%
src/falconpy/_payload/_container.py                                 27      0   100%
src/falconpy/_payload/_cspm_registration.py                         53      0   100%
src/falconpy/_payload/_d4c_registration.py                          38      0   100%
src/falconpy/_payload/_detects.py                                   15      0   100%
src/falconpy/_payload/_device_control_policy.py                     33      0   100%
src/falconpy/_payload/_falconx.py                                   25      0   100%
src/falconpy/_payload/_firewall.py                                 130      0   100%
src/falconpy/_payload/_generic.py                                   64      0   100%
src/falconpy/_payload/_host_group.py                                31      0   100%
src/falconpy/_payload/_incidents.py                                 15      0   100%
src/falconpy/_payload/_ioa.py                                       35      0   100%
src/falconpy/_payload/_ioc.py                                       52      0   100%
src/falconpy/_payload/_malquery.py                                  56      0   100%
src/falconpy/_payload/_message_center.py                            22      0   100%
src/falconpy/_payload/_mssp.py                                      15      0   100%
src/falconpy/_payload/_ods.py                                       13      0   100%
src/falconpy/_payload/_prevention_policy.py                         19      0   100%
src/falconpy/_payload/_real_time_response.py                        27      0   100%
src/falconpy/_payload/_recon.py                                     84      0   100%
src/falconpy/_payload/_reports.py                                   19      0   100%
src/falconpy/_payload/_response_policy.py                           19      0   100%
src/falconpy/_payload/_sample_uploads.py                             9      0   100%
src/falconpy/_payload/_sensor_update_policy.py                      30      0   100%
src/falconpy/_result/__base_resource.py                             28      0   100%
src/falconpy/_result/__init__.py                                     9      0   100%
src/falconpy/_result/_base_dictionary.py                            31      0   100%
src/falconpy/_result/_errors.py                                      2      0   100%
src/falconpy/_result/_expanded_result.py                             7      0   100%
src/falconpy/_result/_headers.py                                    24      0   100%
src/falconpy/_result/_meta.py                                       27      0   100%
src/falconpy/_result/_resources.py                                  14      0   100%
src/falconpy/_result/_response_component.py                         24      0   100%
src/falconpy/_result/_result.py                                    203      0   100%
src/falconpy/_service_class/__init__.py                              3      0   100%
src/falconpy/_service_class/_base_service_class.py                 118      0   100%
src/falconpy/_service_class/_service_class.py                       73      0   100%
src/falconpy/_util/__init__.py                                       4      0   100%
src/falconpy/_util/_auth.py                                         18      0   100%
src/falconpy/_util/_functions.py                                   359      0   100%
src/falconpy/_util/_uber.py                                         44      0   100%
src/falconpy/_version.py                                            33      0   100%
src/falconpy/alerts.py                                              33      0   100%
src/falconpy/api_complete.py                                        55      0   100%
src/falconpy/cloud_connect_aws.py                                   48      0   100%
src/falconpy/cspm_registration.py                                  135      0   100%
src/falconpy/custom_ioa.py                                          86      0   100%
src/falconpy/d4c_registration.py                                    96      0   100%
src/falconpy/detects.py                                             32      0   100%
src/falconpy/device_control_policies.py                             78      0   100%
src/falconpy/discover.py                                            35      0   100%
src/falconpy/event_streams.py                                       20      0   100%
src/falconpy/falcon_complete_dashboard.py                           77      0   100%
src/falconpy/falcon_container.py                                    53      0   100%
src/falconpy/falconx_sandbox.py                                     86      0   100%
src/falconpy/fdr.py                                                 23      0   100%
src/falconpy/filevantage.py                                         14      0   100%
src/falconpy/firewall_management.py                                139      0   100%
src/falconpy/firewall_policies.py                                   71      0   100%
src/falconpy/host_group.py                                          61      0   100%
src/falconpy/hosts.py                                              106      0   100%
src/falconpy/identity_protection.py                                 16      0   100%
src/falconpy/incidents.py                                           41      0   100%
src/falconpy/installation_tokens.py                                 43      0   100%
src/falconpy/intel.py                                               88      0   100%
src/falconpy/ioa_exclusions.py                                      33      0   100%
src/falconpy/ioc.py                                                 82      0   100%
src/falconpy/iocs.py                                                40      0   100%
src/falconpy/kubernetes_protection.py                               94      0   100%
src/falconpy/malquery.py                                            50      0   100%
src/falconpy/message_center.py                                      81      0   100%
src/falconpy/ml_exclusions.py                                       35      0   100%
src/falconpy/mobile_enrollment.py                                   18      0   100%
src/falconpy/mssp.py                                               164      0   100%
src/falconpy/oauth2.py                                              26      0   100%
src/falconpy/ods.py                                                 68      0   100%
src/falconpy/overwatch_dashboard.py                                 31      0   100%
src/falconpy/prevention_policy.py                                   62      0   100%
src/falconpy/quarantine.py                                          46      0   100%
src/falconpy/quick_scan.py                                          27      0   100%
src/falconpy/real_time_response.py                                 127      0   100%
src/falconpy/real_time_response_admin.py                            75      0   100%
src/falconpy/recon.py                                              128      0   100%
src/falconpy/report_executions.py                                   24      0   100%
src/falconpy/response_policies.py                                   61      0   100%
src/falconpy/sample_uploads.py                                      75      0   100%
src/falconpy/scheduled_reports.py                                   20      0   100%
src/falconpy/sensor_download.py                                     33      0   100%
src/falconpy/sensor_update_policy.py                               110      0   100%
src/falconpy/sensor_visibility_exclusions.py                        33      0   100%
src/falconpy/spotlight_evaluation_logic.py                          23      0   100%
src/falconpy/spotlight_vulnerabilities.py                           31      0   100%
src/falconpy/tailored_intelligence.py                               41      0   100%
src/falconpy/user_management.py                                    138      0   100%
src/falconpy/zero_trust_assessment.py                               23      0   100%
------------------------------------------------------------------------------------
TOTAL                                                             6319      0   100%

Bandit analysis

[main]	INFO	running on Python 3.9.17

Run started:2023-08-09 05:00:42.323720

Test results:
	No issues identified.

Code scanned:
	Total lines of code: 50777
	Total lines skipped (#nosec): 0

Run metrics:
	Total issues (by severity):
		Undefined: 0
		Low: 0
		Medium: 0
		High: 0
	Total issues (by confidence):
		Undefined: 0
		Low: 0
		Medium: 0
		High: 0
Files skipped (0):

Added features and functionality

Added: Developer Extensibility features - Enhanced existing programmatic architecture with new objects and submodules to address technical debt and provide developers with the necessary structures to easily extend core library functionality.
- APIHarness - Derivative and an interface class commonly referred to as the Uber Class, APIHarness has been refactored to inherit common functionality provided by the FalconInterface class, remove technical debt, add typing, and expand available operations and extensibility features.
  - api_complete.py
- APIRequest - Simple interface class comprised of multiple data classes that is leveraged for managing the components of a request sent to the CrowdStrike API. This is a new object.
  - _api_request/__init__.py
  - _api_request/_request.py
  - _api_request/_request_behavior.py
  - _api_request/_request_connection.py
  - _api_request/_request_meta.py
  - _api_request/_request_payloads.py
  - _api_request/_request_validator.py
- Constant submodule - Stores global constants used throughout the library. This is a new module implemented to store new and pre-existing constants.
  - _constant/__init__.py
- Enum submodule - Stores enumerators available within the library. This is a new module implemented to store pre-existing enumerators.
  - _enum/__init__.py
  - _enum/_base_url.py
  - _enum/_container_base_url.py
  - _enum/_token_fail_reason.py
- Error submodule - Provides python native errors and warnings. This is a new module.
  - _error/__init__.py
  - _error/_exceptions.py
  - _error/_warnings.py
- FalconInterface - Interface class that handles authentication and state management, also referred to as the authentication object or the auth_object. Refactored to address technical debt and add new functionality.
  - _auth_object/__init__.py
  - _auth_object/_base_falcon_auth.py
  - _auth_object/_bearer_token.py
  - _auth_object/_falcon_interface.py
  - _auth_object/_interface_config.py
  - _auth_object/_uber_interface.py
- Log submodule - Provides debug logging functionality. This is a new module.
  - _log/__init__.py
  - _log/_facility.py
- Result - Complex interface class that is leveraged to parse and return results received from the CrowdStrike API. This class has been refactored to address technical debt and provide new developer functionality and extensibility. Default behavior for requests received from the CrowdStrike API remains unchanged (results are returned as a Python dictionary). Expanded functionality provides developers the ability to handle received responses as python structures, allowing for easy iteration and processing without having to handle a dictionary.
  - _result/__init__.py
  - _result/_base_resource.py
  - _result/_base_dictionary.py
  - _result/_errors.py
  - _result/_expanded_result.py
  - _result/_headers.py
  - _result/_meta.py
  - _result/_resources.py
  - _result/_response_component.py
  - _result/_result.py
- ServiceClass - Interface class leveraged by Service Classes to provide common functionality. This class has also been refactored to expand on functionality provided by the FalconInterface class, remove technical debt, add typing and expand extensibility features.
  - _service_class/_init__.py
  - _service_class/_base_service_class.py
  - _service_class/_service_class.py
- Util submodule - Functions and utilities library containing both private and public methods. This is a new module implemented to store new and pre-existing functions.
  - _util/__init__.py
  - _util/_auth.py
  - _util/_functions.py
  - _util/_uber.py
Added: Debug logging - Native debug logging can now be activated per class upon construction. Logs are sanitized by default.
```
import logging
from falconpy import Hosts

logging.basicConfig(level=logging.DEBUG)
hosts = Hosts(client_id=CLIENT_ID, client_secret=CLIENT_SECRET, debug=True)
result = hosts.query_devices_by_filter_scroll()
```
Log sanitization can also be disabled when instantiating the class.
```
hosts = Hosts(client_id=CLIENT_ID, client_secret=CLIENT_SECRET, debug=True, sanitize_log=False)
```
Local unit testing has been expanded to take advantage of this functionality. To activate, set the environment variable FALCONPY_UNIT_TEST_DEBUG to DEBUG.
- _log/__init__.py
- _log/_facility.py
Added: Environment Authentication - New authentication mechanism that retrieves CrowdStrike API credentials that are pre-defined as variables within the runtime environment. These environment variables must be named FALCON_CLIENT_ID and FALCON_CLIENT_SECRET and both must be present in order for this mechanism to be used. Environment Authentication is the last mechanism attempted, meaning all other authentication mechanisms will take precedence.
```
from falconpy import Hosts

hosts = Hosts()
result = hosts.query_devices_by_filter_scroll()
```
- _auth_object/_falcon_interface.py
Added: Pythonic response handling - Allows for the handling of responses received from the CrowdStrike API as pythonic structures as opposed to dictionaries.
```
from falconpy import Hosts

hosts = Hosts(client_id=CLIENT_ID, client_secret=CLIENT_SECRET, pythonic=True)
host_list = hosts.query_devices_by_filter_scroll()
for device in host_list:
    print(device)
```
- _result/__init__.py
- _result/_base_resource.py
- _result/_base_dictionary.py
- _result/_errors.py
- _result/_expanded_result.py
- _result/_headers.py
- _result/_meta.py
- _result/_resources.py
- _result/_response_component.py
- _result/_result.py

Added: Pythonic errors and warnings - Leverages native Python exceptions to implement error and warning handling.

from falconpy import Hosts, APIError

hosts = Hosts(client_id=CLIENT_ID, client_secret=CLIENT_SECRET, pythonic=True)
try:
    device_detail = hosts.get_device_details("not-a-real-id")
except APIError as not_found:
    print(not_found)

_error/__init__.py
_error/_exceptions.py
_error/_warnings.py

Added: Typing - Type hints have been added throughout the library. This is an ongoing initiative.

Issues resolved

Fixed: Unusual responses from operations within the Falcon Container service collection.
- _result/_result.py
- _util/_functions.py
Fixed: Uber Class functionality using operations within the OAuth2 service collection. Closes #835.
- api_complete.py
- _auth_object/_falcon_interface.py
- _auth_object/_uber_interface.py
Fixed: Inbound strings provided to the creds and proxy keywords are not automatically converted to dictionaries. Closes #909.
- _auth_object/_falcon_interface.py
Fixed: Fixed missing facet keyword in follow request for vulnerabilities - Grab CVEs for CID sample. Closes #1004.
- samples/spotlight/spotlight_grab_cves_for_cid.py
Fixed: IDs are not being migrated to the body payload when calling the PostEntitiesAlertsV1 operation. Closes #1016.
- _constant/__init__.py

Other

Expanded: Unit testing expanded to complete code coverage.
Updated: Added column prune keyword to Grab CVEs by CID sample. Closes #1005.
- samples/spotlight/spotlight_grab_cves_for_cid.py
PLEASE NOTE: Python 3.6 support will be discontinued in January 2024.

1.2.1613 Jun 2023Security2 sources agree

…1 0 100% src/falconpy/_endpoint/_spotlight_vulnerabilities.py 1 0 100% src/falconpy/_endpoint/_tailored_intelligence.py 1 0 100% src/falconpy/_endpoin…

FalconPy v1.2.16

This update implements the following:

Adds 14 new API operations across 6 service collections.
New keywords are added to 67 API operations across 19 service collections.
New actions are added to two operations within 2 service collections.
One new Service Class (FDR) is added.
9 API operations across 2 service collections are renamed to align with the public swagger.

Legacy IDs are retained as deprecated operations and aliased within Service Classes.

[x] Enhancement
[x] Updated unit tests
[x] Documentation

Unit test coverage

Name                                                             Stmts   Miss  Cover
------------------------------------------------------------------------------------
src/falconpy/__init__.py                                            72      0   100%
src/falconpy/_base_url.py                                            7      0   100%
src/falconpy/_container_base_url.py                                  6      0   100%
src/falconpy/_endpoint/__init__.py                                 137      0   100%
src/falconpy/_endpoint/_alerts.py                                    1      0   100%
src/falconpy/_endpoint/_cloud_connect_aws.py                         1      0   100%
src/falconpy/_endpoint/_cspm_registration.py                         1      0   100%
src/falconpy/_endpoint/_custom_ioa.py                                1      0   100%
src/falconpy/_endpoint/_d4c_registration.py                          1      0   100%
src/falconpy/_endpoint/_detects.py                                   1      0   100%
src/falconpy/_endpoint/_device_control_policies.py                   1      0   100%
src/falconpy/_endpoint/_discover.py                                  1      0   100%
src/falconpy/_endpoint/_event_streams.py                             1      0   100%
src/falconpy/_endpoint/_falcon_complete_dashboard.py                 1      0   100%
src/falconpy/_endpoint/_falcon_container.py                          1      0   100%
src/falconpy/_endpoint/_falconx_sandbox.py                           1      0   100%
src/falconpy/_endpoint/_fdr.py                                       1      0   100%
src/falconpy/_endpoint/_filevantage.py                               1      0   100%
src/falconpy/_endpoint/_firewall_management.py                       1      0   100%
src/falconpy/_endpoint/_firewall_policies.py                         1      0   100%
src/falconpy/_endpoint/_host_group.py                                1      0   100%
src/falconpy/_endpoint/_hosts.py                                     1      0   100%
src/falconpy/_endpoint/_identity_protection.py                       1      0   100%
src/falconpy/_endpoint/_incidents.py                                 1      0   100%
src/falconpy/_endpoint/_installation_tokens.py                       1      0   100%
src/falconpy/_endpoint/_intel.py                                     1      0   100%
src/falconpy/_endpoint/_ioa_exclusions.py                            1      0   100%
src/falconpy/_endpoint/_ioc.py                                       1      0   100%
src/falconpy/_endpoint/_iocs.py                                      1      0   100%
src/falconpy/_endpoint/_kubernetes_protection.py                     1      0   100%
src/falconpy/_endpoint/_malquery.py                                  1      0   100%
src/falconpy/_endpoint/_message_center.py                            1      0   100%
src/falconpy/_endpoint/_ml_exclusions.py                             1      0   100%
src/falconpy/_endpoint/_mobile_enrollment.py                         1      0   100%
src/falconpy/_endpoint/_mssp.py                                      1      0   100%
src/falconpy/_endpoint/_oauth2.py                                    1      0   100%
src/falconpy/_endpoint/_ods.py                                       1      0   100%
src/falconpy/_endpoint/_overwatch_dashboard.py                       1      0   100%
src/falconpy/_endpoint/_prevention_policies.py                       1      0   100%
src/falconpy/_endpoint/_quarantine.py                                1      0   100%
src/falconpy/_endpoint/_quick_scan.py                                1      0   100%
src/falconpy/_endpoint/_real_time_response.py                        1      0   100%
src/falconpy/_endpoint/_real_time_response_admin.py                  1      0   100%
src/falconpy/_endpoint/_recon.py                                     1      0   100%
src/falconpy/_endpoint/_report_executions.py                         1      0   100%
src/falconpy/_endpoint/_response_policies.py                         1      0   100%
src/falconpy/_endpoint/_sample_uploads.py                            1      0   100%
src/falconpy/_endpoint/_scheduled_reports.py                         1      0   100%
src/falconpy/_endpoint/_sensor_download.py                           1      0   100%
src/falconpy/_endpoint/_sensor_update_policies.py                    1      0   100%
src/falconpy/_endpoint/_sensor_visibility_exclusions.py              1      0   100%
src/falconpy/_endpoint/_spotlight_evaluation_logic.py                1      0   100%
src/falconpy/_endpoint/_spotlight_vulnerabilities.py                 1      0   100%
src/falconpy/_endpoint/_tailored_intelligence.py                     1      0   100%
src/falconpy/_endpoint/_user_management.py                           1      0   100%
src/falconpy/_endpoint/_zero_trust_assessment.py                     1      0   100%
src/falconpy/_endpoint/deprecated/__init__.py                       32      0   100%
src/falconpy/_endpoint/deprecated/_custom_ioa.py                     1      0   100%
src/falconpy/_endpoint/deprecated/_d4c_registration.py               1      0   100%
src/falconpy/_endpoint/deprecated/_discover.py                       1      0   100%
src/falconpy/_endpoint/deprecated/_fdr.py                            1      0   100%
src/falconpy/_endpoint/deprecated/_firewall_management.py            1      0   100%
src/falconpy/_endpoint/deprecated/_hosts.py                          1      0   100%
src/falconpy/_endpoint/deprecated/_identity_protection.py            1      0   100%
src/falconpy/_endpoint/deprecated/_installation_tokens.py            1      0   100%
src/falconpy/_endpoint/deprecated/_ioc.py                            1      0   100%
src/falconpy/_endpoint/deprecated/_iocs.py                           1      0   100%
src/falconpy/_endpoint/deprecated/_ods.py                            1      0   100%
src/falconpy/_endpoint/deprecated/_real_time_response.py             1      0   100%
src/falconpy/_endpoint/deprecated/_real_time_response_admin.py       1      0   100%
src/falconpy/_endpoint/deprecated/_report_executions.py              1      0   100%
src/falconpy/_endpoint/deprecated/_scheduled_reports.py              1      0   100%
src/falconpy/_endpoint/deprecated/_zero_trust_assessment.py          1      0   100%
src/falconpy/_payload/__init__.py                                   26      0   100%
src/falconpy/_payload/_alerts.py                                    11      0   100%
src/falconpy/_payload/_cloud_connect_aws.py                         22      0   100%
src/falconpy/_payload/_container.py                                 26      0   100%
src/falconpy/_payload/_cspm_registration.py                         40      0   100%
src/falconpy/_payload/_d4c_registration.py                          22      0   100%
src/falconpy/_payload/_detects.py                                   13      0   100%
src/falconpy/_payload/_device_control_policy.py                     33      0   100%
src/falconpy/_payload/_falconx.py                                   25      0   100%
src/falconpy/_payload/_firewall.py                                 128      0   100%
src/falconpy/_payload/_generic.py                                   84      0   100%
src/falconpy/_payload/_host_group.py                                30      0   100%
src/falconpy/_payload/_incidents.py                                 15      0   100%
src/falconpy/_payload/_ioa.py                                       35      0   100%
src/falconpy/_payload/_ioc.py                                       50      0   100%
src/falconpy/_payload/_malquery.py                                  56      0   100%
src/falconpy/_payload/_message_center.py                            22      0   100%
src/falconpy/_payload/_mssp.py                                      15      0   100%
src/falconpy/_payload/_ods.py                                       13      0   100%
src/falconpy/_payload/_prevention_policy.py                         19      0   100%
src/falconpy/_payload/_real_time_response.py                        27      0   100%
src/falconpy/_payload/_recon.py                                     82      0   100%
src/falconpy/_payload/_reports.py                                   18      0   100%
src/falconpy/_payload/_response_policy.py                           19      0   100%
src/falconpy/_payload/_sample_uploads.py                             9      0   100%
src/falconpy/_payload/_sensor_update_policy.py                      24      0   100%
src/falconpy/_result.py                                             17      0   100%
src/falconpy/_service_class.py                                      72      0   100%
src/falconpy/_token_fail_reason.py                                   4      0   100%
src/falconpy/_uber_default_preference.py                             3      0   100%
src/falconpy/_util.py                                              230      0   100%
src/falconpy/_version.py                                            10      0   100%
src/falconpy/alerts.py                                              31      0   100%
src/falconpy/api_complete.py                                       154      0   100%
src/falconpy/cloud_connect_aws.py                                   47      0   100%
src/falconpy/cspm_registration.py                                  134      0   100%
src/falconpy/custom_ioa.py                                          85      0   100%
src/falconpy/d4c_registration.py                                    97      0   100%
src/falconpy/detects.py                                             31      0   100%
src/falconpy/device_control_policies.py                             77      0   100%
src/falconpy/discover.py                                            50      0   100%
src/falconpy/event_streams.py                                       19      0   100%
src/falconpy/falcon_complete_dashboard.py                           76      0   100%
src/falconpy/falcon_container.py                                    64      0   100%
src/falconpy/falconx_sandbox.py                                     85      0   100%
src/falconpy/fdr.py                                                 23      0   100%
src/falconpy/filevantage.py                                         13      0   100%
src/falconpy/firewall_management.py                                138      0   100%
src/falconpy/firewall_policies.py                                   70      0   100%
src/falconpy/host_group.py                                          60      0   100%
src/falconpy/hosts.py                                              105      0   100%
src/falconpy/identity_protection.py                                 15      0   100%
src/falconpy/incidents.py                                           40      0   100%
src/falconpy/installation_tokens.py                                 42      0   100%
src/falconpy/intel.py                                               87      0   100%
src/falconpy/ioa_exclusions.py                                      32      0   100%
src/falconpy/ioc.py                                                 81      0   100%
src/falconpy/iocs.py                                                39      0   100%
src/falconpy/kubernetes_protection.py                               93      0   100%
src/falconpy/malquery.py                                            49      0   100%
src/falconpy/message_center.py                                      80      0   100%
src/falconpy/ml_exclusions.py                                       34      0   100%
src/falconpy/mobile_enrollment.py                                   17      0   100%
src/falconpy/mssp.py                                               163      0   100%
src/falconpy/oauth2.py                                              71      0   100%
src/falconpy/ods.py                                                 68      0   100%
src/falconpy/overwatch_dashboard.py                                 30      0   100%
src/falconpy/prevention_policy.py                                   61      0   100%
src/falconpy/quarantine.py                                          45      0   100%
src/falconpy/quick_scan.py                                          26      0   100%
src/falconpy/real_time_response.py                                 126      0   100%
src/falconpy/real_time_response_admin.py                            74      0   100%
src/falconpy/recon.py                                              127      0   100%
src/falconpy/report_executions.py                                   23      0   100%
src/falconpy/response_policies.py                                   60      0   100%
src/falconpy/sample_uploads.py                                      74      0   100%
src/falconpy/scheduled_reports.py                                   19      0   100%
src/falconpy/sensor_download.py                                     32      0   100%
src/falconpy/sensor_update_policy.py                               109      0   100%
src/falconpy/sensor_visibility_exclusions.py                        32      0   100%
src/falconpy/spotlight_evaluation_logic.py                          22      0   100%
src/falconpy/spotlight_vulnerabilities.py                           30      0   100%
src/falconpy/tailored_intelligence.py                               40      0   100%
src/falconpy/user_management.py                                    137      0   100%
src/falconpy/zero_trust_assessment.py                               22      0   100%
------------------------------------------------------------------------------------
TOTAL                                                             4881      0   100%

Bandit analysis

[main]	INFO	running on Python 3.9.16

Run started:2023-06-05 05:40:11.922774

Test results:
	No issues identified.

Code scanned:
	Total lines of code: 47395
	Total lines skipped (#nosec): 0

Run metrics:
	Total issues (by severity):
		Undefined: 0
		Low: 0
		Medium: 0
		High: 0
	Total issues (by confidence):
		Undefined: 0
		Low: 0
		Medium: 0
		High: 0
Files skipped (0):

Added features and functionality

Added: New keywords were added to 1 operations within the Alerts Service Class.
- exclude, from, include and max_doc_count were added to the PostAggregatesAlertsV1 operation.
- _payload/_generic.py
- alerts.py
Added: New keywords were added to 6 operations within the CompleteDashboard Service Class.
- exclude, from, include and max_doc_count were added to the AggregateBlockList operation.
- exclude, from, include and max_doc_count were added to the AggregateDetections operation.
- exclude, from, include and max_doc_count were added to the AggregateDeviceCountCollection operation.
- exclude, from, include and max_doc_count were added to the AggregateEscalations operation.
- exclude, from, include and max_doc_count were added to the AggregateFCIncidents operation.
- exclude, from, include and max_doc_count were added to the AggregateRemediations operation.
- falcon_complete_dashboard.py
Added: 3 new operations added to the CSPMRegistration Service Class, GetConfigurationDetectionEntities, GetConfigurationDetectionIDsV2, and GetCSPMPoliciesDetails.
- _endpoint/_cspm_registration.py
- _payload/_cspm_registration.py
- cspm_registration.py
Unit testing expanded to complete code coverage.
- tests/test_cspm_registration.py
Added: New keywords were added to 11 operations within the CSPMRegistration Service Class.
- iam_role_arns and migrated were added to the GetCSPMAwsAccount operation.
- account_type, behavior_assessment_enabled, iam_role_arn, is_master, sensor_management_enabled and use_existing_cloudtrail were added to the CreateCSPMAwsAccount operation.
- behavior_assessment_enabled, iam_role_arn, remediation_region, remediation_tou_accepted and sensor_management_enabled were added to the PatchCSPMAwsAccount operation.
- ids, use_existing_cloudtrail, and region were added to the GetCSPMAwsConsoleSetupURLs operation.
- ids was added to the GetCSPMAwsAccountScriptsAttachment operation.
- tenant_ids was added to the GetCSPMAzureAccount operation.
- account_type, client_id, default_subscription, tenant_id and years_valid were added to the CreateCSPMAzureAccount operation.
- retain_tenant and tenant_ids were added to the DeleteCSPMAzureAccount operation.
- years_valid was added to the AzureDownloadCertificate operation.
- account_type, subscription_ids, and template were added to the GetCSPMAzureUserScriptsAttachment operation.
- resource_id and resource_uuid were added to the GetBehaviorDetections operation.
- _endpoint/_cspm_registration.py
- cspm_registration.py
Added: 1 new operation added to the D4CRegistration Service Class, GetDiscoverCloudAzureTenantIDs.
- _endpoint/_d4c_registration.py
- d4c_registration.py
Unit testing expanded to complete code coverage.
- tests/test_d4c_registration.py
Added: New keywords were added to 11 operations within the D4CRegistration Service Class.
- iam_role_arn was added to the CreateD4CAwsAccount operation.
- limit, offset, status and tenant_ids were added to the GetCSPMAzureAccount operation.
- account_type, client_id, default_subscription and years_valid were added to the CreateCSPMAzureAccount operation.
- object_id and tenant_id were added to the UpdateCSPMAzureAccountClientID operation.
- subscription_ids, tenant_id and template were added to the GetCSPMAzureUserScriptsAttachment operation.
- limit, offset, parent_type, sort and status were added to the GetCSPMCGPAccount operation.
- years_valid was added to the DiscoverCloudAzureDownloadCertificate operation.
- parent_type was added to the GetCSPMGCPUserScripts operation.
- parent_type was added to the CreateD4CGCPAccount operation.
- _endpoint/_d4c_registration.py
- _payload/_d4c_registration.py
- d4c_registration.py
Added: New keywords were added to 2 operations within the Detects Service Class.
- exclude, from, include and max_doc_count were added to the GetAggregateDetects operation.
- new_behaviors_processed was added to the UpdateDetectsByIdsV2 operation.
- _payload/_detects.py
- detects.py
Added: add-rule-group and remove-rule-group added as possible values for the action_name keyword within the performDeviceControlPoliciesAction operation in the DeviceControlPolicies Service Class.
- _endpoint/_device_control_policy.py
- device_control_policy.py
Added: 3 new operations added to the FalconXSandbox Service Class, GetMemoryDumpExtractedStrings, GetMemoryDumpHexDump, and GetMemoryDump.
- _endpoint/_falconx_sandbox.py
- falconx_sandbox.py
Unit testing expanded to complete code coverage.
- tests/test_falconx_sandbox.py
Added: New FDR Service Class with 5 new operations, fdrschema_combined_event_get, fdrschema_entities_event_get, fdrschema_entities_field_get, fdrschema_queries_event_get, and fdrschema_queries_field_get.
- _endpoint/_fdr.py
- _endpoint/__init__.py
- _endpoint/deprecated/_fdr.py
- _endpoint/deprecated/__init__.py
- fdr.py
Unit testing expanded to complete code coverage.
- tests/test_fdr.py
Added: New keyword was added to 1 operation within the FalconContainer Service Class.
- applicationPackages was added to the ReadImageVulnerabilities operation.
- _payload/_container.py
- falcon_container.py
Added: New keywords were added to 9 operations within the FirewallManagement Service Class.
- exclude, from, include and max_doc_count were added to the aggregate_events operation.
- exclude, from, include and max_doc_count were added to the aggregate_policy_rules operation.
- exclude, from, include and max_doc_count were added to the aggregate_rule_groups operation.
- exclude, from, include and max_doc_count were added to the aggregate_rules operation.
- created_by and created_on were added to the upsert_network_locations operation.
- created_by and created_on were added to the update_network_locations operation.
- local_logging was added to the update_policy_container_v1 operation.
- platform was added to the create_rule_group operation.
  
  platform_ids was removed from the create_rule_group operation
- fqdn and fqdn_enabled were added to the create_rule_group_validation operation.
- _payload/_firewall.py
- firewall_management.py
Added: New keyword was added to 1 operation within the FlightControl Service Class.
- filter was added to the queryChildren operation.
- _endpoint/_mssp.py
- mssp.py
Added: New keyword was added to 1 operation within the Hosts Service Class.
- disable_hostname_check was added to the entities_perform_action operation.
- _endpoint/_hosts.py
- hosts.py
Added: New keywords were added to 1 operation within the Incidents Service Class.
- overwrite_detects and update_detects were added to the PerformIncidentAction operation.
- _endpoint/_incidents.py
- incidents.py
Added: New keywords were added to 3 operations within the IOC Service Class.
- exclude, from, include and max_doc_count were added to the indicator_aggregate_v1 operation.
- from_parent was added to the GetIndicatorsReport operation.
- from_parent was added to the indicator_search_v1 operation.
- from_parent was added to the indicator_update_v1 operation.
- _endpoint/_ioc.py
- _payload/_ioc.py
- ioc.py
Added: New keywords were added to 3 operations within the KubernetesProtection Service Class.
- is_horizon_acct was added to the GetAWSAccountsMixin0 operation.
- is_self_managed_cluster was added to the GetHelmValuesYaml operation.
- status was added to the GetClusters operation.
- _endpoint/_kubernetes_protection.py
- kubernetes_protection.py
Added: 1 new operation added to the ODS Service Class, aggregate_query_scan_host_metadata.
- _endpoint/_ods.py
- _endpoint/deprecated/_ods.py
- ods.py
Unit testing expanded to complete code coverage.
- tests/test_ods.py
Added: New keywords were added to 3 operations within the ODS Service Class.
- exclude, from, include and max_doc_count were added to the aggregate_scans operation.
- exclude, from, include and max_doc_count were added to the aggregate_scheduled_scans operation.
- scan_inclusions was added to the schedule_scan operation.
- _payload/_ods.py
- ods.py
Added: New keyword was added to 1 operation within the OAuth2 Service Class.
- client_id was added to the revoke operation.
- _endpoint/_oauth2.py
- oauth2.py
Added: New keywords were added to 2 operations within the OverwatchDashboard Service Class.
- exclude, from, include and max_doc_count were added to the AggregatesEventsCollections operation.
- exclude, from, include and max_doc_count were added to the AggregatesEvents operation.
- overwatch_dashboard.py
Added: New keyword was added to 1 operation within the Quarantine Service Class.
- exclude, from, include and max_doc_count were added to the GetAggregateFiles operation.
- quarantine.py
Added: New keyword was added to 1 operation within the RealTimeResponse Service Class.
- exclude, from, include and max_doc_count were added to the RTR_AggregateSessions operation.
- real_time_response.py
Added: New keywords were added to 7 operations within the Recon Service Class.
- exclude, from, include and max_doc_count were added to the AggregateNotificationsExposedDataRecordsV1 operation.
- exclude, from, include and max_doc_count were added to the AggregateNotificationsV1 operation.
- content_format and trigger_matchless were added to the CreateActionsV1 operation.
- content_format and trigger_matchless were added to the UpdateActionsV1 operation.
- breach_monitoring_enabled and substring_matching_enabled were added to the CreateRulesV1 operation.
- breach_monitoring_enabled and substring_matching_enabled were added to the UpdateRulesV1 operation.
- notificationsDeletionRequested was added to the DeleteRulesV1 operation.
- _endpoint/_recon.py
- _payload/_recon.py
- recon.py
Added: New keywords were added to 3 operations within the SensorUpdatePolicy Service Class.
- scheduler, show_early_adopter_builds and variants were added to the createSensorUpdatePoliciesV2 operation.
- scheduler, show_early_adopter_builds and variants were added to the updateSensorUpdatePoliciesV2 operation.
- stage was added to the queryCombinedSensorUpdateBuilds operation.
- _endpoint/_sensor_update_policy.py
- sensor_update_policy.py
Added: add-rule-group and remove-rule-group added as possible values for the action_name keyword within the performSensorUpdatePoliciesAction operation in the SensorUpdatePolicy Service Class.
- _endpoint/_sensor_update_policies.py
- sensor_update_policies.py
Added: New keyword was added to 1 operation within the UserManagement Service Class.
- action was added to the queryiesRolesV1 operation.
- _endpoint/_user_management.py
- user_management.py
Added: 1 new operation added to the ZeroTrustAssessment Service Class, getCombinedAssessmentsQuery.
- _endpoint/_zero_trust_assessment.py
- zero_trust_assessment.py
Unit testing expanded to complete code coverage.
- tests/test_zero_trust_assessment.py

Other

Expanded: Additional parameters were added to the settings dictionary/keyword within the createDeviceControlPolicies and updateDeviceControlPolicies operations.
- _payload/_device_control_policies.py
- device_control_policies.py
Renamed: 1 keyword was renamed within the FalconContainer Service Class.
- credentials was renamed to credential within the CreateRegistryEntities operation.
- _payload/_container.py
- falcon_container.py
Reduced: Limit maximum for queryCombinedSensorUpdateKernels operation within the SensorUpdatePolicy Service Class was changed from 5000 to 500.
- _endpoint/_sensor_update_policies.py
Reduced: Limit maximum for querySensorUpdateKernelsDistinct operation within the SensorUpdatePolicy Service Class was changed from 5000 to 500.
- _endpoint/_sensor_update_policies.py
Increased: Limit maximum for QueryAWSAccounts operation within the CloudConnectAWS Service Class was changed from 500 to 1000.
- _endpoint/_cloud_connect_aws.py
Increased: Limit maximum for QueryAWSAccountsForIDs operation within the CloudConnectAWS Service Class was changed from 500 to 1000.
- _endpoint/_cloud_connect_aws.py
Renamed: 8 operations renamed within the D4CRegistration Service Class. Legacy operation IDs were deprecated, with aliases created to avoid introducing breaking changes.
- GetCSPMAzureAccount is now GetDiscoverCloudAzureAccount.
- CreateCSPMAzureAccount is now CreateDiscoverCloudAzureAccount.
- UpdateCSPMAzureAccountClientID is now UpdateDiscoverCloudAzureAccountClientID.
- GetCSPMAzureUserScriptsAttachment is now GetDiscoverCloudAzureUserScriptsAttachment.
- GetCSPMAzureUserScripts is now GetDiscoverCloudAzureUserScripts.
- GetCSPMCGPAccount is now GetD4CCGPAccount.
- CreateCSPMGCPAccount is now CreateD4CGCPAccount.
- GetCSPMGCPUserScripts is now GetD4CGCPUserScripts.
- _endpoint/_d4c_registration.py
- _endpoint/__init__.py
- _endpoint/deprecated/_d4c_registration.py
- _endpoint/deprecated/__init__.py
- d4c_registration.py
Renamed: 1 operation renamed within the ZeroTrustAssessment Service Class. Legacy operation ID was deprecated, with an alias created to avoid introducing a breaking change.
- getComplianceV1 is now getAuditV1.
- _endpoint/_zero_trust_assessment.py
- _endpoint/__init__.py
- _endpoint/deprecated/_zero_trust_assessment.py
- _endpoint/deprecated/__init__.py
- zero_trust_assessment.py

crowdstrike-falconpy

Release timeline

Releases

FalconPy v1.3.0

Unit test coverage

Bandit analysis

Added features and functionality

Issues resolved

Other

FalconPy v1.2.16

Unit test coverage

Bandit analysis

Added features and functionality

Other

FalconPy v1.2.15

Unit test coverage

Bandit analysis

Added features and functionality

Issues resolved

FalconPy v1.2.14

Unit test coverage

Bandit analysis

Added features and functionality

FalconPy v1.2.13

Unit test coverage

Bandit analysis

Added features and functionality

Issues resolved

FalconPy v1.2.12

Unit test coverage

Bandit analysis

Added features and functionality

Issues resolved

Other

FalconPy v1.2.11

Unit test coverage

Bandit analysis

Added features and functionality

Issues resolved

FalconPy v1.2.10

Unit test coverage

Bandit analysis

Added features and functionality

Issues resolved

Other

FalconPy v1.2.9

Unit test coverage

Bandit analysis

Issues resolved

Issues resolved

FalconPy v1.2.8

Unit test coverage

Bandit analysis

Version 1.2.8

Issues resolved

FalconPy v1.2.7

Unit test coverage

Bandit analysis

Added features and functionality

Issues resolved

FalconPy v1.2.6

Unit test coverage

Bandit analysis

Added features and functionality

Other

FalconPy v1.2.5

Unit test coverage

Bandit analysis

Issues resolved

FalconPy v1.2.4

Unit test coverage

Bandit analysis

Added features and functionality

Other

FalconPy v1.2.3

Unit test coverage

Bandit analysis

Added features and functionality

Issues resolved

FalconPy v1.2.2