-
Notifications
You must be signed in to change notification settings - Fork 130
Content Update Policies
Operation ID | Description | ||||
---|---|---|---|---|---|
|
Search for members of a Content Update Policy in your environment by providing an FQL filter and paging details. Returns a set of host details which match the filter criteria. | ||||
|
Search for Content Update Policies in your environment by providing an FQL filter and paging details. Returns a set of Content Update Policies which match the filter criteria. | ||||
|
Perform the specified action on the Content Update Policies specified in the request. | ||||
|
Sets the precedence of Content Update Policies based on the order of IDs specified in the request. The first ID specified will have the highest precedence and the last ID specified will have the lowest. You must specify all non-Default Policies when updating precedence. | ||||
|
Retrieve a set of Content Update Policies by specifying their IDs. | ||||
|
Create Content Update Policies by specifying details about the policy to create. | ||||
|
Delete a set of Content Update Policies by specifying their IDs. | ||||
|
Update Content Update Policies by specifying the ID of the policy and details to update. | ||||
|
Search for members of a Content Update Policy in your environment by providing an FQL filter and paging details. Returns a set of Agent IDs which match the filter criteria. | ||||
|
Search for content versions available for pinning given the category. | ||||
|
Search for Content Update Policies in your environment by providing an FQL filter and paging details. Returns a set of Content Update Policy IDs which match the filter criteria. |
Search for members of a Content Update Policy in your environment by providing an FQL filter and paging details. Returns a set of host details which match the filter criteria.
query_policy_members_combined
Method | Route |
---|---|
/policy/combined/content-update-members/v1 |
- Produces: application/json
Name | Service | Uber | Type | Data type | Description |
---|---|---|---|---|---|
id | query | string | The ID of the Content Update Policy to search for members of. | ||
filter | query | string | The filter expression that should be used to limit the results. | ||
offset | query | integer | The offset to start retrieving records from. | ||
limit | query | integer | The maximum records to return. [1-5000] | ||
sort | query | string | The property to sort by. | ||
parameters | query | dictionary | Full set of query string parameters in a JSON formatted dictionary. |
from falconpy import ContentUpdatePolicies
falcon = ContentUpdatePolicies(client_id=CLIENT_ID,
client_secret=CLIENT_SECRET
)
response = falcon.query_policy_members_combined(id="string",
filter="string",
offset=integer,
limit=integer,
sort="string"
)
print(response)
from falconpy import ContentUpdatePolicies
falcon = ContentUpdatePolicies(client_id=CLIENT_ID,
client_secret=CLIENT_SECRET
)
response = falcon.queryCombinedContentUpdatePolicyMembers(id="string",
filter="string",
offset=integer,
limit=integer,
sort="string"
)
print(response)
from falconpy import APIHarnessV2
falcon = APIHarnessV2(client_id=CLIENT_ID,
client_secret=CLIENT_SECRET
)
response = falcon.command("queryCombinedContentUpdatePolicyMembers",
id="string",
filter="string",
offset=integer,
limit=integer,
sort="string"
)
print(response)
Search for Content Update Policies in your environment by providing an FQL filter and paging details. Returns a set of Content Update Policies which match the filter criteria.
query_policies_combined
Method | Route |
---|---|
/policy/combined/content-update/v1 |
- Produces: application/json
Name | Service | Uber | Type | Data type | Description |
---|---|---|---|---|---|
filter | query | string | The filter expression that should be used to limit the results. | ||
offset | query | integer | The offset to start retrieving records from. | ||
limit | query | integer | The maximum records to return. [1-5000] | ||
sort | query | string | The property to sort by. | ||
parameters | query | dictionary | Full set of query string parameters in a JSON formatted dictionary. |
from falconpy import ContentUpdatePolicies
falcon = ContentUpdatePolicies(client_id=CLIENT_ID,
client_secret=CLIENT_SECRET
)
response = falcon.query_policies_combined(filter="string",
offset=integer,
limit=integer,
sort="string"
)
print(response)
from falconpy import ContentUpdatePolicies
falcon = ContentUpdatePolicies(client_id=CLIENT_ID,
client_secret=CLIENT_SECRET
)
response = falcon.queryCombinedContentUpdatePolicies(filter="string",
offset=integer,
limit=integer,
sort="string"
)
print(response)
from falconpy import APIHarnessV2
falcon = APIHarnessV2(client_id=CLIENT_ID,
client_secret=CLIENT_SECRET
)
response = falcon.command("queryCombinedContentUpdatePolicies",
filter="string",
offset=integer,
limit=integer,
sort="string"
)
print(response)
Perform the specified action on the Content Update Policies specified in the request.
perform_action
Method | Route |
---|---|
/policy/entities/content-update-actions/v1 |
- Produces: application/json
Name | Service | Uber | Type | Data type | Description |
---|---|---|---|---|---|
action_name | query | string | The action to perform. Allowed values:
|
||
action_parameters | query | dictionary or list of dictionaries | Action specific parameter options. | ||
body | body | dictionary | Full body payload as JSON formatted dictionary. | ||
ids | body | string or list of strings | Content update policy IDs to perform action against. | ||
parameters | query | dictionary | Full set of query string parameters in a JSON formatted dictionary. |
from falconpy import ContentUpdatePolicies
falcon = ContentUpdatePolicies(client_id=CLIENT_ID,
client_secret=CLIENT_SECRET
)
act_params = {
"name": "string",
"value": "string"
}
id_list = 'ID1,ID2,ID3' # Can also pass a list here: ['ID1', 'ID2', 'ID3']
response = falcon.perform_action(action_name="string",
action_parameters=act_params,
ids=id_list
)
print(response)
from falconpy import ContentUpdatePolicies
falcon = ContentUpdatePolicies(client_id=CLIENT_ID,
client_secret=CLIENT_SECRET
)
act_params = {
"name": "string",
"value": "string"
}
id_list = 'ID1,ID2,ID3' # Can also pass a list here: ['ID1', 'ID2', 'ID3']
response = falcon.performContentUpdatePoliciesAction(action_name="string",
action_parameters=act_params,
ids=id_list
)
print(response)
from falconpy import APIHarnessV2
falcon = APIHarnessV2(client_id=CLIENT_ID,
client_secret=CLIENT_SECRET
)
body_payload = {
"action_parameters": [
{
"name": "string",
"value": "string"
}
],
"ids": [
"string"
]
}
response = falcon.command("performContentUpdatePoliciesAction",
action_name="string",
body=body_payload
)
print(response)
Sets the precedence of Content Update Policies based on the order of IDs specified in the request. The first ID specified will have the highest precedence and the last ID specified will have the lowest. You must specify all non-Default Policies when updating precedence.
set_precedence
Method | Route |
---|---|
/policy/entities/content-update-precedence/v1 |
- Produces: application/json
Name | Service | Uber | Type | Data type | Description |
---|---|---|---|---|---|
body | body | dictionary | Full body payload as JSON formatted dictionary. | ||
ids | body | string or list of strings | ID list in precedence order. |
from falconpy import ContentUpdatePolicies
falcon = ContentUpdatePolicies(client_id=CLIENT_ID,
client_secret=CLIENT_SECRET
)
id_list = 'ID1,ID2,ID3' # Can also pass a list here: ['ID1', 'ID2', 'ID3']
response = falcon.set_precedence(ids=id_list)
print(response)
from falconpy import ContentUpdatePolicies
falcon = ContentUpdatePolicies(client_id=CLIENT_ID,
client_secret=CLIENT_SECRET
)
id_list = 'ID1,ID2,ID3' # Can also pass a list here: ['ID1', 'ID2', 'ID3']
response = falcon.setContentUpdatePoliciesPrecedence(ids=id_list)
print(response)
from falconpy import APIHarnessV2
falcon = APIHarnessV2(client_id=CLIENT_ID,
client_secret=CLIENT_SECRET
)
body_payload = {
"ids": [
"string"
]
}
response = falcon.command("setContentUpdatePoliciesPrecedence", body=body_payload)
print(response)
Retrieve a set of Content Update Policies by specifying their IDs.
get_policies
Method | Route |
---|---|
/policy/entities/content-update/v1 |
- Produces: application/json
Name | Service | Uber | Type | Data type | Description |
---|---|---|---|---|---|
ids | query | string or list of strings | Content update policy IDs to return. | ||
parameters | query | dictionary | Full set of query string parameters in a JSON formatted dictionary. |
from falconpy import ContentUpdatePolicies
falcon = ContentUpdatePolicies(client_id=CLIENT_ID,
client_secret=CLIENT_SECRET
)
id_list = 'ID1,ID2,ID3' # Can also pass a list here: ['ID1', 'ID2', 'ID3']
response = falcon.get_policies(ids=id_list)
print(response)
from falconpy import ContentUpdatePolicies
falcon = ContentUpdatePolicies(client_id=CLIENT_ID,
client_secret=CLIENT_SECRET
)
id_list = 'ID1,ID2,ID3' # Can also pass a list here: ['ID1', 'ID2', 'ID3']
response = falcon.getContentUpdatePolicies(ids=id_list)
print(response)
from falconpy import APIHarnessV2
falcon = APIHarnessV2(client_id=CLIENT_ID,
client_secret=CLIENT_SECRET
)
id_list = 'ID1,ID2,ID3' # Can also pass a list here: ['ID1', 'ID2', 'ID3']
response = falcon.command("getContentUpdatePolicies", ids=id_list)
print(response)
Create Content Update Policies by specifying details about the policy to create.
create_policies
Method | Route |
---|---|
/policy/entities/content-update/v1 |
- Produces: application/json
Name | Service | Uber | Type | Data type | Description |
---|---|---|---|---|---|
body | body | dictionary | Full body payload as JSON formatted dictionary. | ||
description | body | string | Content Update policy description. | ||
name | body | string | Content Update policy name. | ||
settings | body | dictionary | Content Update policy settings. |
from falconpy import ContentUpdatePolicies
falcon = ContentUpdatePolicies(client_id=CLIENT_ID,
client_secret=CLIENT_SECRET
)
policy_settings = {
"ring_assignment_settings": [
{
"delay_hours": "string",
"id": "string",
"ring_assignment": "string"
}
]
}
response = falcon.create_policies(description="string", name="string", settings=policy_settings)
print(response)
from falconpy import ContentUpdatePolicies
falcon = ContentUpdatePolicies(client_id=CLIENT_ID,
client_secret=CLIENT_SECRET
)
policy_settings = {
"ring_assignment_settings": [
{
"delay_hours": "string",
"id": "string",
"ring_assignment": "string"
}
]
}
response = falcon.createContentUpdatePolicies(description="string",
name="string",
settings=policy_settings
)
print(response)
from falconpy import APIHarnessV2
falcon = APIHarnessV2(client_id=CLIENT_ID,
client_secret=CLIENT_SECRET
)
body_payload = {
"resources": [
{
"description": "string",
"name": "string",
"settings": {
"ring_assignment_settings": [
{
"delay_hours": "string",
"id": "string",
"ring_assignment": "string"
}
]
}
}
]
}
response = falcon.command("createContentUpdatePolicies", body=body_payload)
print(response)
Delete a set of Content Update Policies by specifying their IDs.
delete_policies
Method | Route |
---|---|
/policy/entities/content-update/v1 |
- Produces: application/json
Name | Service | Uber | Type | Data type | Description |
---|---|---|---|---|---|
ids | query | string or list of strings | Content update policy IDs to remove. | ||
parameters | query | dictionary | Full set of query string parameters in a JSON formatted dictionary. |
from falconpy import ContentUpdatePolicies
falcon = ContentUpdatePolicies(client_id=CLIENT_ID,
client_secret=CLIENT_SECRET
)
id_list = 'ID1,ID2,ID3' # Can also pass a list here: ['ID1', 'ID2', 'ID3']
response = falcon.delete_policies(ids=id_list)
print(response)
from falconpy import ContentUpdatePolicies
falcon = ContentUpdatePolicies(client_id=CLIENT_ID,
client_secret=CLIENT_SECRET
)
id_list = 'ID1,ID2,ID3' # Can also pass a list here: ['ID1', 'ID2', 'ID3']
response = falcon.deleteContentUpdatePolicies(ids=id_list)
print(response)
from falconpy import APIHarnessV2
falcon = APIHarnessV2(client_id=CLIENT_ID,
client_secret=CLIENT_SECRET
)
id_list = 'ID1,ID2,ID3' # Can also pass a list here: ['ID1', 'ID2', 'ID3']
response = falcon.command("deleteContentUpdatePolicies", ids=id_list)
print(response)
Update Content Update Policies by specifying the ID of the policy and details to update.
update_policies
Method | Route |
---|---|
/policy/entities/content-update/v1 |
- Produces: application/json
Name | Service | Uber | Type | Data type | Description |
---|---|---|---|---|---|
body | body | dictionary | Full body payload as JSON formatted dictionary. | ||
description | body | string | Content Update policy description. | ||
id | body | string | Content Update policy ID to update. | ||
name | body | string | Content Update policy name. | ||
settings | body | dictionary | Content Update policy settings. |
from falconpy import ContentUpdatePolicies
falcon = ContentUpdatePolicies(client_id=CLIENT_ID,
client_secret=CLIENT_SECRET
)
policy_settings = {
"ring_assignment_settings": [
{
"delay_hours": "string",
"id": "string",
"ring_assignment": "string"
}
]
}
response = falcon.update_policies(description="string",
id="string",
name="string",
settings=policy_settings
)
print(response)
from falconpy import ContentUpdatePolicies
falcon = ContentUpdatePolicies(client_id=CLIENT_ID,
client_secret=CLIENT_SECRET
)
policy_settings = {
"ring_assignment_settings": [
{
"delay_hours": "string",
"id": "string",
"ring_assignment": "string"
}
]
}
response = falcon.updateContentUpdatePolicies(description="string",
id="string",
name="string",
settings=policy_settings
)
print(response)
from falconpy import APIHarnessV2
falcon = APIHarnessV2(client_id=CLIENT_ID,
client_secret=CLIENT_SECRET
)
body_payload = {
"resources": [
{
"description": "string",
"id": "string",
"name": "string",
"settings": {
"ring_assignment_settings": [
{
"delay_hours": "string",
"id": "string",
"ring_assignment": "string"
}
]
}
}
]
}
response = falcon.command("updateContentUpdatePolicies", body=body_payload)
print(response)
Search for members of a Content Update Policy in your environment by providing an FQL filter and paging details. Returns a set of Agent IDs which match the filter criteria.
query_policy_members
Method | Route |
---|---|
/policy/queries/content-update-members/v1 |
- Produces: application/json
Name | Service | Uber | Type | Data type | Description |
---|---|---|---|---|---|
id | query | string | The ID of the Content Update Policy to search for members of. | ||
filter | query | string | The filter expression that should be used to limit the results. | ||
offset | query | integer | The offset to start retrieving records from. | ||
limit | query | integer | The maximum records to return. [1-5000] | ||
sort | query | string | The property to sort by. | ||
parameters | query | dictionary | Full set of query string parameters in a JSON formatted dictionary. |
from falconpy import ContentUpdatePolicies
falcon = ContentUpdatePolicies(client_id=CLIENT_ID,
client_secret=CLIENT_SECRET
)
response = falcon.query_policy_members(id="string",
filter="string",
offset=integer,
limit=integer,
sort="string"
)
print(response)
from falconpy import ContentUpdatePolicies
falcon = ContentUpdatePolicies(client_id=CLIENT_ID,
client_secret=CLIENT_SECRET
)
response = falcon.queryContentUpdatePolicyMembers(id="string",
filter="string",
offset=integer,
limit=integer,
sort="string"
)
print(response)
from falconpy import APIHarnessV2
falcon = APIHarnessV2(client_id=CLIENT_ID,
client_secret=CLIENT_SECRET
)
response = falcon.command("queryContentUpdatePolicyMembers",
id="string",
filter="string",
offset=integer,
limit=integer,
sort="string"
)
print(response)
Search for content versions available for pinning given the category.
query_pinnable_content_versions
Method | Route |
---|---|
/policy/queries/content-update-pin-versions/v1 |
- Produces: application/json
Name | Service | Uber | Type | Data type | Description |
---|---|---|---|---|---|
category | query | string | Content category.
|
||
sort | query | string | The value to sort returned content versions by. Defaults to deployed_timestamp.desc . Available values: deployed_timestamp.asc , deployed_timestamp.desc
|
||
parameters | query | dictionary | Full set of query string parameters in a JSON formatted dictionary. |
from falconpy.content_update_policies import ContentUpdatePolicies
falcon = ContentUpdatePolicies(client_id=CLIENT_ID,
client_secret=CLIENT_SECRET
)
response = falcon.query_pinnable_content_versions(category="string", sort="string")
print(response)
from falconpy import ContentUpdatePolicies
falcon = ContentUpdatePolicies(client_id=CLIENT_ID,
client_secret=CLIENT_SECRET
)
response = falcon.queryPinnableContentVersions(category="string", sort="string")
print(response)
from falconpy import APIHarnessV2
falcon = APIHarnessV2(client_id=CLIENT_ID,
client_secret=CLIENT_SECRET
)
response = falcon.command("queryPinnableContentVersions", category="string", sort="string")
print(response)
Search for Content Update Policies in your environment by providing an FQL filter and paging details. Returns a set of Content Update Policy IDs which match the filter criteria.
query_policies
Method | Route |
---|---|
/policy/queries/content-update/v1 |
- Produces: application/json
Name | Service | Uber | Type | Data type | Description |
---|---|---|---|---|---|
filter | query | string | The filter expression that should be used to limit the results. | ||
offset | query | integer | The offset to start retrieving records from. | ||
limit | query | integer | The maximum records to return. [1-5000] | ||
sort | query | string | The property to sort by. | ||
parameters | query | dictionary | Full set of query string parameters in a JSON formatted dictionary. |
from falconpy import ContentUpdatePolicies
falcon = ContentUpdatePolicies(client_id=CLIENT_ID,
client_secret=CLIENT_SECRET
)
response = falcon.query_policies(filter="string",
offset=integer,
limit=integer,
sort="string"
)
print(response)
from falconpy import ContentUpdatePolicies
falcon = ContentUpdatePolicies(client_id=CLIENT_ID,
client_secret=CLIENT_SECRET
)
response = falcon.queryContentUpdatePolicies(filter="string",
offset=integer,
limit=integer,
sort="string"
)
print(response)
from falconpy import APIHarnessV2
falcon = APIHarnessV2(client_id=CLIENT_ID,
client_secret=CLIENT_SECRET
)
response = falcon.command("queryContentUpdatePolicies",
filter="string",
offset=integer,
limit=integer,
sort="string"
)
print(response)
- Home
- Discussions Board
- Glossary of Terms
- Installation, Upgrades and Removal
- Samples Collection
- Using FalconPy
- API Operations
-
Service Collections
- Alerts
- API Integrations
- ASPM
- CAO Hunting
- Certificate Based Exclusions
- Cloud AWS Registration
- Cloud Azure Registration
- Cloud OCI Registration
- Cloud Connect AWS (deprecated)
- Cloud Security Assets
- Cloud Snapshots
- Configuration Assessment
- Configuration Assessment Evaluation Logic
- Container Alerts
- Container Detections
- Container Image Compliance
- Container Images
- Container Packages
- Container Vulnerabilities
- Content Update Policies
- Correlation Rules
- CSPM Registration
- Custom IOAs
- Custom Storage
- D4C Registration (deprecated)
- DataScanner (deprecated)
- Delivery Settings
- Deployments
- Detects
- Device Content
- Device Control Policies
- Discover
- Downloads
- Drift Indicators
- Event Streams
- Exposure Management
- FaaS Execution
- Falcon Complete Dashboard
- Falcon Container
- Falcon Intelligence Sandbox
- FDR
- FileVantage
- Firewall Management
- Firewall Policies
- Foundry LogScale
- Host Group
- Host Migration
- Hosts
- Identity Protection
- Image Assessment Policies
- Incidents
- Installation Tokens
- Intel
- Intelligence Feeds
- Intelligence Indicator Graph
- IOA Exclusions
- IOC
- IOCs (deprecated)
- Kubernetes Protection
- MalQuery
- Message Center
- ML Exclusions
- Mobile Enrollment
- MSSP (Flight Control)
- NGSIEM
- OAuth2
- ODS (On Demand Scan)
- Overwatch Dashboard
- Prevention Policy
- Quarantine
- Quick Scan
- Quick Scan Pro
- Real Time Response
- Real Time Response Admin
- Real Time Response Audit
- Recon
- Report Executions
- Response Policies
- Sample Uploads
- Scheduled Reports
- Sensor Download
- Sensor Update Policy
- Sensor Usage
- Sensor Visibility Exclusions
- Serverless Vulnerabilities
- Spotlight Evaluation Logic
- Spotlight Vulnerabilities
- Tailored Intelligence
- ThreatGraph
- Unidentified Containers
- User Management
- Workflows
- Zero Trust Assessment
- Documentation Support
-
CrowdStrike SDKs
- Crimson Falcon - Ruby
- FalconPy - Python 3
- FalconJS - Javascript
- goFalcon - Go
- PSFalcon - Powershell
- Rusty Falcon - Rust