Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Sample Updates #1202

Merged
merged 30 commits into from
Jul 19, 2024
Merged

Sample Updates #1202

merged 30 commits into from
Jul 19, 2024

Conversation

jshcodes
Copy link
Member

@jshcodes jshcodes commented Jul 18, 2024

Sample Updates

This pull request updates multiple samples to add debugging and CrowdStrike region selection functionality.

Requirements are also listed in sample specific requirements.txt files.

The Find Hosts by CVE sample is updated to implement column selection and deduplication functionality.

  • Enhancement
  • Code sample

Unit test coverage

NOT REQUIRED FOR SAMPLE SUBMISSIONS

Bandit analysis

[main]	INFO	running on Python 3.11.8

Run started:2024-07-18 04:18:27.926742

Test results:
	No issues identified.

Code scanned:
	Total lines of code: 17217
	Total lines skipped (#nosec): 2

Run metrics:
	Total issues (by severity):
		Undefined: 0
		Low: 0
		Medium: 0
		High: 0
	Total issues (by confidence):
		Undefined: 0
		Low: 0
		Medium: 0
		High: 0
Files skipped (0):

Added features and functionality

  • Updated: Added debugging functionality to the AWS Parameter Store authentication sample.
    • samples/authentication/aws_parameter_store.py
    • samples/authentication/requirements_aws_parameter_store.txt
  • Updated: Added debugging and CrowdStrike region selection functionality to the Token Authentication sample. Related to [ BUG ] Missing "--base_url" argument for many scripts #1181.
    • samples/authentication/token_authentication_example.py
    • samples/authentication/requirements_token_authentication_example.txt
  • Added: New Kubernetes Map sample.
    • samples/containers/kube_map.py
  • Updated: Added debugging functionality to the Get CSPM Policies sample.
    • samples/cspm_registration/get_cspm_policies.py
    • samples/cspm_registration/requirements_get_cspm_policies.txt
  • Updated: Added debugging functionality and performed minor linting to the List Discovered Hosts sample.
    • samples/discover/list_discovered_hosts.py
  • Updated: Added debugging functionality to the Spyglass sample.
    • samples/discover/spyglass.py
  • Updated: Added debugging functionality to the Intel Search sample.
    • samples/intel/intel_search.py
  • Updated: Added debugging functionality to the Create IOC sample.
    • samples/ioc/create_ioc.py
  • Updated: Added debugging functionality to the Prevention Policy Hawk sample.
    • samples/prevention_policy/prevention_policy_hawk.py
    • samples/prevention_policy/requirements_prevention_policy_hawk.py
  • Updated: Added debugging functionality to the Recon Email Monitoring sample.
    • samples/recon/email_monitoring_recon.py
  • Updated: Added debugging and CrowdStrike region selection functionality to the Download Sensor sample. Related to [ BUG ] Missing "--base_url" argument for many scripts #1181.
    • samples/sensor_download/download_sensor.py
    • samples/sensor_download/requirements_download_sensor.txt
  • Updated: Added debugging functionality to the Policy Wonk sample.
    • samples/sensor_update_policies/policy_wonk.py
    • samples/sensor_update_policies/requirements_policy_wonk.py
  • Updated: Added column selection and deduplicate functionality to the Find Hosts by CVE sample.
    • samples/spotlight/find_hosts_by_cve.py
    • Thanks go out to @David-M-Berry for this contribution! 🙇
  • Updated: Added debugging functionality to the Spotlight Quick Report sample.
    • samples/spotlight/spotlight_quick_report.py

Other

jshcodes and others added 30 commits June 25, 2024 15:10
…pecify crowdstrike-falconpy versioning, linting for whitespace and disabled linting on batch_get for "using variable before assignment"
Added -i --include option to only include output from specific columns.

Added `seen` set in the `get_match_details` function to track unique entries based on "hostname" and "local_ip".
Modified the loop to skip duplicate entries by checking the seen set.

Added a `—deduplicate` (-d) option. When this argument is provided, the script will remove duplicates based on hostname and local_ip.
@jshcodes jshcodes requested a review from jlangdev July 18, 2024 04:22
@jshcodes jshcodes self-assigned this Jul 18, 2024
@jshcodes jshcodes added code samples Functioning sample code to get you started sensor update Sensor Update Policy issues and questions iocs IOCs (both) issues and questions Falcon Intelligence Falcon Intelligence issues and questions spotlight Spotlight issues and questions intel Threat Intel issues and questions sensor download Sensor download issues and questions Discover Discover or Discover for Cloud issues and questions Horizon Horizon issues and questions kubernetes Kubernetes Protection issues and questions authentication Issues or questions regarding authentication prevention policies Prevention Policies issues and questions recon Recon issues and questions labels Jul 18, 2024
@jshcodes
Copy link
Member Author

Unit test failures are unrelated to sample updates and will be investigated within the dev branch.

@jshcodes jshcodes merged commit e2ab1c2 into main Jul 19, 2024
12 of 20 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
authentication Issues or questions regarding authentication code samples Functioning sample code to get you started Discover Discover or Discover for Cloud issues and questions Falcon Intelligence Falcon Intelligence issues and questions Horizon Horizon issues and questions intel Threat Intel issues and questions iocs IOCs (both) issues and questions kubernetes Kubernetes Protection issues and questions prevention policies Prevention Policies issues and questions recon Recon issues and questions sensor download Sensor download issues and questions sensor update Sensor Update Policy issues and questions spotlight Spotlight issues and questions
Projects
None yet
Development

Successfully merging this pull request may close these issues.

6 participants