Version 1.4.7 - Correlation Rules, Intelligence Feeds and NG-SIEM #1282
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
# for free
to join this conversation on GitHub.
Already have an account?
# to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
FalconPy 1.4.7
This update adds 3 new service collections and addresses multiple bugs.
Unit test coverage
Bandit analysis
[main] INFO running on Python 3.13.1 Run started:2025-02-12 05:51:42.787866 Test results: No issues identified. Code scanned: Total lines of code: 80462 Total lines skipped (#nosec): 0 Run metrics: Total issues (by severity): Undefined: 0 Low: 0 Medium: 0 High: 0 Total issues (by confidence): Undefined: 0 Low: 0 Medium: 0 High: 0 Files skipped (0):Version 1.4.7
Added features and functionality
Added: Added new Intelligence Feeds service collection with 3 operations.
_endpoint/__init__.py_endpoint/_intelligence_feeds.py__init__.pyintelligence_feeds.pytests/test_intelligence_feeds.pyAdded: Added new NGSIEM service collection with 9 operations.
_endpoint/__init__.py_endpoint/_ngsiem.py_util/_functions.py__init__.pyngsiem.pytests/test_ngsiem.pyAdded: Added new Correlation Rules service collection with 6 operations. Closes Missing correlation endpoints #1275.
_endpoint/__init__.py_endpoint/_correlation_rules.py_endpoint/deprecated/__init__.py_endpoint/deprecated/_correlation_rules.py_payload/__init__.py_payload/_correlation_rules.py__init__.pycorrelation_rules.pytests/test_correlation_rules.pyIssues resolved
Resolved:
timezoneargument is not available for the createScheduledExclusions operation within the FileVantage Service Class. Closes FileVantage's createScheduledExclusions missing Keyword Argumment for timezone #1231._payload/_filevantage.pyfilevantage.pyResolved: Fixed payload handler issue when providing certificate keys via keywords as opposed to providing the
certificatekeyword when using the cb_exclusions_create_v1 operation within the CertificateBasedExclusions service class._payload/_certificate_based_exclusions.pyResolved: Added error handling for when invalid API responses are received from the GraphQL operation within the Identity Protection service collection.
_util/_functions.pyResolved: Fixed invalid default body payload for createMLExclusionsV1 operation in MLExclusions Service Class.
ml_exclusions.pyResolved: Fix operation name for the FileUploadQuickScanPro operation within the Quick Scan Pro service collection. Closes Allow file name override in QS Pro upload_file operation #1276. Closes [ DOC ] QuickScan Pro upload file operation name is incorrect #1277.
_endpoint\_quick_scan_pro.pyquick-scan-pro.py