Data

Tools

Indexes

Applications

Experiments

Open Source Science

Recent Releases of https://github.com/crowdstrike/falcon-toolkit

https://github.com/crowdstrike/falcon-toolkit - Version 3.5.1

This version brings some minor updates to documentation and dependencies with a focus on Python 3.13 compatibility. The only functional change is that the version of the Toolkit is now shown at the CLI when commands are executed.

What's Changed

  • Documentation Update for User Management by @natalie363 in https://github.com/CrowdStrike/Falcon-Toolkit/pull/156
  • Bumps Caracara to the 0.9.x branch by @ChristopherHammond13 in https://github.com/CrowdStrike/Falcon-Toolkit/pull/168

Full Changelog: https://github.com/CrowdStrike/Falcon-Toolkit/compare/v3.5.0...v3.5.1

- Python
Published by ChristopherHammond13 over 1 year ago

https://github.com/crowdstrike/falcon-toolkit - Version 3.5.0

What's Changed

  • Adds user management module by @natalie363 in https://github.com/CrowdStrike/Falcon-Toolkit/pull/155
  • Dependency updates across the board

New Contributors

  • @natalie363 made their first contribution in https://github.com/CrowdStrike/Falcon-Toolkit/pull/155

Full Changelog: https://github.com/CrowdStrike/Falcon-Toolkit/compare/v3.4.2...v3.5.0

- Python
Published by ChristopherHammond13 almost 2 years ago

https://github.com/crowdstrike/falcon-toolkit - Version 3.4.2

What's Changed

This release brings a slew of dependency updates (including updates for libraries with open CVEs), so we recommend upgrading ASAP.

There has been one small breaking change to the MSSP Auth backend, documented here: https://github.com/CrowdStrike/Falcon-Toolkit/pull/147. This allows for a much better user experience when working with multi-CID setups, at the expense of renaming an environment variable. We doubt this was used often (if at all), but are raising the breaking change here just to make users aware.

  • Formats codebase using black and bumps requirements by @ChristopherHammond13 in https://github.com/CrowdStrike/Falcon-Toolkit/pull/146
  • CID Command Line Option for MSSP Auth Backend by @ChristopherHammond13 in https://github.com/CrowdStrike/Falcon-Toolkit/pull/147

Full Changelog: https://github.com/CrowdStrike/Falcon-Toolkit/compare/v3.4.1...v3.4.2

- Python
Published by ChristopherHammond13 about 2 years ago

https://github.com/crowdstrike/falcon-toolkit - Version 3.4.1

What's Changed

  • Visual Guard Rail for Network Containment by @ChristopherHammond13 in https://github.com/CrowdStrike/Falcon-Toolkit/pull/130

Full Changelog: https://github.com/CrowdStrike/Falcon-Toolkit/compare/v3.4.0...v3.4.1

- Python
Published by ChristopherHammond13 over 2 years ago

https://github.com/crowdstrike/falcon-toolkit - Version 3.4.0

Version 3.4.0

This is a bumper release that includes two new commands: - containment to contain and uncontain systems. - maintenance_token to get bulk and device maintenance tokens.

General improvements: - Dependency updates across the board. - Some older code has been moved over to Prompt Toolkit for a better UI experience when creating profiles and selecting a CID in the MSSP experience. - The mount command has been added to the RTR shell to show mount points. - Underlying fixes to Caracara should better handle CIDs with a large number of PUT files.

As always, let us know if you identify any bugs have any feature requests!

What's Changed

  • Bump cryptography from 41.0.3 to 41.0.4 by @dependabot in https://github.com/CrowdStrike/Falcon-Toolkit/pull/82
  • Bump urllib3 from 2.0.4 to 2.0.6 by @dependabot in https://github.com/CrowdStrike/Falcon-Toolkit/pull/84
  • Bump pylint from 2.17.5 to 2.17.7 by @dependabot in https://github.com/CrowdStrike/Falcon-Toolkit/pull/83
  • Bump platformdirs from 3.10.0 to 3.11.0 by @dependabot in https://github.com/CrowdStrike/Falcon-Toolkit/pull/85
  • Bump pylint from 2.17.7 to 3.0.1 by @dependabot in https://github.com/CrowdStrike/Falcon-Toolkit/pull/86
  • Bump urllib3 from 2.0.6 to 2.0.7 by @dependabot in https://github.com/CrowdStrike/Falcon-Toolkit/pull/87
  • Bump pytest from 7.4.2 to 7.4.3 by @dependabot in https://github.com/CrowdStrike/Falcon-Toolkit/pull/89
  • Bump pylint from 3.0.1 to 3.0.2 by @dependabot in https://github.com/CrowdStrike/Falcon-Toolkit/pull/88
  • Bump keyring from 24.2.0 to 24.3.0 by @dependabot in https://github.com/CrowdStrike/Falcon-Toolkit/pull/90
  • Bump platformdirs from 3.11.0 to 4.0.0 by @dependabot in https://github.com/CrowdStrike/Falcon-Toolkit/pull/91
  • Bump pytest from 7.4.3 to 7.4.4 by @dependabot in https://github.com/CrowdStrike/Falcon-Toolkit/pull/100
  • Bump pylint from 3.0.2 to 3.0.3 by @dependabot in https://github.com/CrowdStrike/Falcon-Toolkit/pull/98
  • Bump platformdirs from 4.0.0 to 4.1.0 by @dependabot in https://github.com/CrowdStrike/Falcon-Toolkit/pull/94
  • Bump cryptography from 41.0.4 to 41.0.6 by @dependabot in https://github.com/CrowdStrike/Falcon-Toolkit/pull/93
  • Bump pycryptodomex from 3.18.0 to 3.19.1 by @dependabot in https://github.com/CrowdStrike/Falcon-Toolkit/pull/101
  • Bump caracara from 0.5.2 to 0.5.3 by @dependabot in https://github.com/CrowdStrike/Falcon-Toolkit/pull/105
  • Bump cryptography from 41.0.6 to 42.0.2 by @dependabot in https://github.com/CrowdStrike/Falcon-Toolkit/pull/109
  • Bump platformdirs from 4.1.0 to 4.2.0 by @dependabot in https://github.com/CrowdStrike/Falcon-Toolkit/pull/107
  • Bump cryptography from 42.0.2 to 42.0.4 by @dependabot in https://github.com/CrowdStrike/Falcon-Toolkit/pull/111
  • Add Mount Command to the Shell by @ChristopherHammond13 in https://github.com/CrowdStrike/Falcon-Toolkit/pull/112
  • Bump keyring from 24.3.0 to 25.1.0 by @dependabot in https://github.com/CrowdStrike/Falcon-Toolkit/pull/122
  • Start of migration to Python 3.12 with a dependency bump by @ChristopherHammond13 in https://github.com/CrowdStrike/Falcon-Toolkit/pull/113
  • Bump idna from 3.6 to 3.7 by @dependabot in https://github.com/CrowdStrike/Falcon-Toolkit/pull/123
  • Bump flake8 from 6.1.0 to 7.0.0 by @dependabot in https://github.com/CrowdStrike/Falcon-Toolkit/pull/102
  • Bump keyring from 24.3.1 to 25.1.0 by @dependabot in https://github.com/CrowdStrike/Falcon-Toolkit/pull/126
  • Bump setuptools from 69.2.0 to 69.5.1 by @dependabot in https://github.com/CrowdStrike/Falcon-Toolkit/pull/125
  • Host Containment and Uncontainment by @ChristopherHammond13 in https://github.com/CrowdStrike/Falcon-Toolkit/pull/124
  • Adds Maintenance Token Command by @ChristopherHammond13 in https://github.com/CrowdStrike/Falcon-Toolkit/pull/127

Full Changelog: https://github.com/CrowdStrike/Falcon-Toolkit/compare/v3.3.1...v3.4.0

- Python
Published by ChristopherHammond13 over 2 years ago

https://github.com/crowdstrike/falcon-toolkit - Version 3.3.1

This is mostly a bugfix release which incorporates a slew of dependency updates including, most importantly, caracara-filters v0.2.0. Also, the redesigned host_search output also provides the OS role in the table.

Thank you to @lautriv for the bug report and feature request that led to this release.

If you're coming to Fal.Con next week, I look forward to meeting you there!

What's Changed

  • Bump pytest from 7.4.1 to 7.4.2 by @dependabot in https://github.com/CrowdStrike/Falcon-Toolkit/pull/80
  • Adds OS Role to host_search and bumps dependencies by @ChristopherHammond13 in https://github.com/CrowdStrike/Falcon-Toolkit/pull/81

Full Changelog: https://github.com/CrowdStrike/Falcon-Toolkit/compare/v3.3.0...v3.3.1

- Python
Published by ChristopherHammond13 almost 3 years ago

https://github.com/crowdstrike/falcon-toolkit - Version 3.3.0

What's Changed

This release provides some major enhancements to host_search, as well as some significant improvements under the hood by migrating to Caracara 0.5.

Firstly, congratulations to @Dylan-Watson on his first contribution! Thanks to his work, host_search now has a -e switch which lets you export host lists to CSV. We have also reworked host_search to leverage the tabulate library for some beautiful CLI output with much more information that was previously provided.

Next up, we have case-insensitive filters! Unsure if you needed OsVersion, osversion or OSVersion? That no longer matters, as the underlying improvements to Caracara mean that we can now map to filters internally in a case-insensitive manner. The bounds checking of inputs to the filters has been made more robust, too, and far more flexible than what we had before. We're looking forward to seeing some feedback on the progress we have made here.

Finally, this release comes with the usual bug fixes and dependency updates that you will have come to expect from this project. An issue affecting Windows users was resolved in #69, and some underlying libraries have been bumped.

As ever, keep raising issues and making suggestions, as we take them all onboard as we work to continuously improve this tool!

-Chris

GitHub Changelog

  • Moves from os.mkdir to os.makedirs by @ChristopherHammond13 in https://github.com/CrowdStrike/Falcon-Toolkit/pull/69
  • Bump click from 8.1.6 to 8.1.7 by @dependabot in https://github.com/CrowdStrike/Falcon-Toolkit/pull/71
  • Bump pytest from 7.4.0 to 7.4.1 by @dependabot in https://github.com/CrowdStrike/Falcon-Toolkit/pull/76
  • Caracara 0.5.x Migration by @ChristopherHammond13 in https://github.com/CrowdStrike/Falcon-Toolkit/pull/73
  • Cleaned Up Version of Watson/Issue-70 by @ChristopherHammond13 in https://github.com/CrowdStrike/Falcon-Toolkit/pull/78
  • Better host_search Output by @ChristopherHammond13 in https://github.com/CrowdStrike/Falcon-Toolkit/pull/72

Full Changelog: https://github.com/CrowdStrike/Falcon-Toolkit/compare/v3.2.1...v3.3.0

- Python
Published by ChristopherHammond13 almost 3 years ago

https://github.com/crowdstrike/falcon-toolkit - Version 3.2.1

What's Changed

  • Bugfix for Issue #65 by @kenoel in https://github.com/CrowdStrike/Falcon-Toolkit/pull/66

Full Changelog: https://github.com/CrowdStrike/Falcon-Toolkit/compare/v3.2.0...v3.2.1

- Python
Published by ChristopherHammond13 almost 3 years ago

https://github.com/crowdstrike/falcon-toolkit - Version 3.2.0

What's Changed

  • [FEATURE] Support filtering on host online state by @kenoel in https://github.com/CrowdStrike/Falcon-Toolkit/pull/49
  • Bump requests from 2.30.0 to 2.31.0 by @dependabot in https://github.com/CrowdStrike/Falcon-Toolkit/pull/51
  • Bump cryptography from 40.0.2 to 41.0.0 by @dependabot in https://github.com/CrowdStrike/Falcon-Toolkit/pull/54
  • Bump pylint from 2.17.3 to 2.17.4 by @dependabot in https://github.com/CrowdStrike/Falcon-Toolkit/pull/50
  • Bump certifi from 2022.12.7 to 2023.7.22 by @dependabot in https://github.com/CrowdStrike/Falcon-Toolkit/pull/63
  • Bump click from 8.1.3 to 8.1.6 by @dependabot in https://github.com/CrowdStrike/Falcon-Toolkit/pull/62
  • Bump cryptography from 41.0.0 to 41.0.2 by @dependabot in https://github.com/CrowdStrike/Falcon-Toolkit/pull/60
  • Bump click-option-group from 0.5.5 to 0.5.6 by @dependabot in https://github.com/CrowdStrike/Falcon-Toolkit/pull/56
  • Bump pytest from 7.3.1 to 7.4.0 by @dependabot in https://github.com/CrowdStrike/Falcon-Toolkit/pull/57
  • Follow OS conventions on Data Storage by @ChristopherHammond13 in https://github.com/CrowdStrike/Falcon-Toolkit/pull/53
  • Bump keyring from 23.13.1 to 24.2.0 by @dependabot in https://github.com/CrowdStrike/Falcon-Toolkit/pull/58
  • Adds some additional wording to the Parent CID authentication backend by @ChristopherHammond13 in https://github.com/CrowdStrike/Falcon-Toolkit/pull/64

New Contributors

  • @kenoel made their first contribution in https://github.com/CrowdStrike/Falcon-Toolkit/pull/49

Full Changelog: https://github.com/CrowdStrike/Falcon-Toolkit/compare/v3.1.2...v3.2.0

- Python
Published by ChristopherHammond13 almost 3 years ago

https://github.com/crowdstrike/falcon-toolkit - Version 3.1.2

What's Changed

Merged https://github.com/CrowdStrike/Falcon-Toolkit/pull/48, which contains the following improvements: * Resolution to issues with the put_files command * Resolves issues with --help in several commands * Upgrades backend dependencies

Full Changelog: https://github.com/CrowdStrike/Falcon-Toolkit/compare/v3.1.1...v3.1.2

- Python
Published by ChristopherHammond13 about 3 years ago

https://github.com/crowdstrike/falcon-toolkit - Version 3.1.1

This is a minor update to address #25 on a best effort basis. The user experience is greatly increased for those who have multiple profiles on macOS. There may also be some small performance gains across all platforms.

What's Changed

  • Lazy Load Client Secret by @ChristopherHammond13 in https://github.com/CrowdStrike/Falcon-Toolkit/pull/32

Full Changelog: https://github.com/CrowdStrike/Falcon-Toolkit/compare/v3.1.0...v3.1.1

- Python
Published by ChristopherHammond13 over 3 years ago

https://github.com/crowdstrike/falcon-toolkit - Version 3.1.0

Policies, policies, policies! This is our first feature release since launching the Toolkit onto GitHub. From today, you can describe Prevention and Response policies in your Falcon tenant, export them to JSON, and re-import them again (e.g., to a new tenant). This can help MSSPs who have a 'known good' configuration that they would like to replicate over to another customer.

Let us know how you use it and feel free to open up an issue if you encounter any issues!

We have also bumped up dependencies across the board to bring in fixes in Caracara, FalconPy, and several other libraries that this project uses (and is hugely grateful for!).

What's Changed

  • Fix minor typo on README by @lautriv in https://github.com/CrowdStrike/Falcon-Toolkit/pull/24
  • Bump pytest from 7.2.0 to 7.2.1 by @dependabot in https://github.com/CrowdStrike/Falcon-Toolkit/pull/28
  • Bump pydocstyle from 6.2.2 to 6.3.0 by @dependabot in https://github.com/CrowdStrike/Falcon-Toolkit/pull/26
  • Bump pylint from 2.15.9 to 2.15.10 by @dependabot in https://github.com/CrowdStrike/Falcon-Toolkit/pull/27
  • Bump cryptography from 39.0.0 to 39.0.1 by @dependabot in https://github.com/CrowdStrike/Falcon-Toolkit/pull/31
  • Bump cmd2 from 2.4.2 to 2.4.3 by @dependabot in https://github.com/CrowdStrike/Falcon-Toolkit/pull/29
  • Bump pylint from 2.15.10 to 2.16.1 by @dependabot in https://github.com/CrowdStrike/Falcon-Toolkit/pull/30
  • Policy Describe/Import/Export by @ChristopherHammond13 in https://github.com/CrowdStrike/Falcon-Toolkit/pull/12

New Contributors

  • @lautriv made their first contribution in https://github.com/CrowdStrike/Falcon-Toolkit/pull/24

Full Changelog: https://github.com/CrowdStrike/Falcon-Toolkit/compare/v3.0.2...v3.1.0

- Python
Published by ChristopherHammond13 over 3 years ago

https://github.com/crowdstrike/falcon-toolkit - Version 3.0.2

This patch release of Falcon Toolkit includes fixes for #11 and #20, as well as some better README content. There is also a significant bump in dependency versions to keep up to date with the latest security and feature patches up and down the stack.

We recommend that all users upgrade to this version as soon as possible to get these fixes.

- Python
Published by ChristopherHammond13 over 3 years ago

https://github.com/crowdstrike/falcon-toolkit - Version 3.0.1

This release contains a minor update to address #5, as well as some fixes in #7 which should improve how the project appears on PyPI.

- Python
Published by ChristopherHammond13 over 3 years ago

https://github.com/crowdstrike/falcon-toolkit - Version 3.0.0: First Public Release!

This release brings Falcon Toolkit to the world. The public release has been given a major version number bump to ensure that it does not conflict with any other versions of the Toolkit used internally within CrowdStrike, and from this version we will be moving internally to tracking the public repository.

Let us know how this first public release supports your use cases, and we look forward to adding lots more features in the coming months!

- Chris Hammond and the CrowdStrike IR Team

- Python
Published by ChristopherHammond13 over 3 years ago