1.6.2 updates#1452
Merged
Merged
Conversation
alhumaw
added
incidents
jshcodes
approved these changes
Apr 25, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
FalconPy v1.6.2
This update implements new operations and service collections. Multiple bug fixes are also included.
Unit test coverage
Bandit analysis
[main] INFO profile include tests: None [main] INFO profile exclude tests: None [main] INFO cli include tests: None [main] INFO cli exclude tests: None [main] INFO running on Python 3.14.0 Working... ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 100% 0:00:01 Run started:2026-03-27 18:13:01.201941+00:00 Test results: No issues identified. Code scanned: Total lines of code: 128247 Total lines skipped (#nosec): 0 Run metrics: Total issues (by severity): Undefined: 0 Low: 0 Medium: 0 High: 0 Total issues (by confidence): Undefined: 0 Low: 0 Medium: 0 High: 0 Files skipped (0):Added features and functionality
Added: New Network Scan Global Configs service collection with two operations.
_endpoint/__init__.py_endpoint/_network_scan_global_configs.py_payload/__init__.py_payload/_network_scan_global_configs.py__init__.pynetwork_scan_global_configs.pytests/test_network_scan_global_configs.pyAdded: New Network Scan Scan Run Reports service collection with one operation.
_endpoint/__init__.py_endpoint/_network_scan_scan_run_reports.py__init__.pynetwork_scan_scan_run_reports.pytests/test_network_scan_scan_run_reports.pyAdded: New Network Scan Scan Runs service collection with five operations.
_endpoint/__init__.py_endpoint/_network_scan_scan_runs.py_payload/__init__.py_payload/_network_scan_scan_runs.py__init__.pynetwork_scan_scan_runs.pytests/test_network_scan_scan_runs.pyAdded: New Network Scan Scanners service collection with four operations.
_endpoint/__init__.py_endpoint/_network_scan_scanners.py_payload/__init__.py_payload/_network_scan_scanners.py__init__.pynetwork_scan_scanners.pytests/test_network_scan_scanners.pyAdded: New Network Scan Templates service collection with six operations.
_endpoint/__init__.py_endpoint/_network_scan_templates.py_payload/__init__.py_payload/_network_scan_templates.py__init__.pynetwork_scan_templates.pytests/test_network_scan_templates.pyAdded: New Network Scan Networks service collection with six operations.
_endpoint/__init__.py_endpoint/_network_scan_networks.py_payload/__init__.py_payload/_network_scan_networks.py__init__.pynetwork_scan_networks.pytests/test_network_scan_networks.pyAdded: New Network Scan Scans service collection with six operations.
_endpoint/__init__.py_endpoint/_network_scan_scans.py_payload/__init__.py_payload/_network_scan_scans.py__init__.pynetwork_scan_scans.pytests/test_network_scan_scans.pyAdded: New Network Scan Zones service collection with seven operations.
_endpoint/__init__.py_endpoint/_network_scan_zones.py_payload/__init__.py_payload/_network_scan_zones.py__init__.pynetwork_scan_zones.pytests/test_network_scan_zones.pyAdded: New Network Scan parent service collection aggregating all eight Network Scan sub-services via multiple inheritance.
__init__.pynetwork_scan.pyDeprecated: All operations within the Incidents service collection have been deprecated by CrowdStrike and will be removed in the next major release.
_endpoint/deprecated/_mapping.pyDeprecated: The AggregateFCIncidents and QueryIncidentIdsByFilter operations within the Falcon Complete Dashboard service collection have been deprecated by CrowdStrike and will be removed in the next major release.
_endpoint/deprecated/_mapping.pyAdded: Added one new operation to the Spotlight Vulnerabilities service collection.
_endpoint/_spotlight_vulnerabilties.pyspotlight_vulnerabilities.pytests/test_spotlight_vulnerabilities.pyAdded: Added two new operations to the NGSIEM service collection.
_endpoint/_ngsiem.py_endpoint/deprecated/_ngsiem.py_payload/__init__.py_payload/_ngsiem.pyngsiem.pytests/test_ngsiem.pyAdded: Added
device_policies.data-protection.applied,device_policies.data-protection.policy_id,device_policies.data-protection.policy_type,device_policies.data-protection-cloud.applied,device_policies.data-protection-cloud.policy_id,device_policies.data-protection-cloud.policy_type,device_policies.network-scan-content.applied,device_policies.network-scan-content.policy_id, anddevice_policies.network-scan-content.policy_typeas allowed filter and sort fields in the CombinedHiddenDevicesByFilter, QueryDevicesByFilter, and QueryDevicesByFilterScroll operations within the Hosts service collection._endpoint/_hosts.py_endpoint/deprecated/_hosts.pyhosts.pyAdded: Added
multi_archas an allowed filter keyword in the AggregateImageCountByBaseOS, AggregateImageCountByState, AggregateImageCount, GetCombinedImages, CombinedImageByVulnerabilityCount, CombinedImageDetail, and ReadCombinedImagesExport operations within the Container Images service collection._endpoint/_container_images.pycontainer_images.pyUpdated: Updated available FQL filter fields documentation in the combinedQueryVulnerabilities operation within the Spotlight Vulnerabilities service collection.
_endpoint/_spotlight_vulnerabilities.py_endpoint/deprecated/_spotlight_vulnerabilities.pyspotlight_vulnerabilities.pyUpdated: Updated available sort fields documentation in the query_scheduled_scans operation within the ODS service collection.
_endpoint/_ods.py_endpoint/deprecated/_ods.pyods.pyRemoved: Removed the stale
GetCSPMCGPAccountbackward-compatibility alias from the CSPM Registration service collection.cspm_registration.pyIssues resolved
Fixed: Added missing
anomaly,guardrail_notifications,mitre_attack, andtemplate_idparameters to the correlation rules payload builder. List parameters now accept comma-delimited strings or lists. Closes Feature request: enable support of "mitre_attack" in "create_rule" ("entities_rules_post_v1") #1450._payload/_correlation_rules.pyFixed: JSONDecodeError import bug.
util/_functions.pyutil/_auth.pyFixed: Added missing parameters
is_enabledandhost_groupsto the entities_policy_patch_v2 operation from the Data Protection Configuration service collection._payload/_data_protection_configuration.pydata_protection_configuration.pyFixed: Added backward compatibility for
fileandlookup_fileparameters. Closes [ DOC ] UploadLookupV1 - How does this work ? Provided example doesn't work. #1372.ngsiem.pytests/test_ngsiem.pyFixed: Fixed
case_idanddescriptionnot being sent as form data in the upload_file operation within the Case Management service collection. Closes [ BUG ] Upload File to Case #1445.case_management.pyFixed: Added missing
facetkeyword argument documentation to the query_combined_hosts operation within the Discover service collection. Closes [ BUG ] Falconpy Discover doesn't support facet parameter #1382.discover.pyFixed: Fixed upload_file operation in the NGSIEM service collection not returning the file ID on successful upload.
ngsiem.py