Using the Content Update Policies service collection

Table of Contents

Passing credentials

WARNING

client_id and client_secret are keyword arguments that contain your CrowdStrike API credentials. Please note that all examples below do not hard code these values. (These values are ingested as strings.)

CrowdStrike does not recommend hard coding API credentials or customer identifiers within source code.

queryCombinedContentUpdatePolicyMembers

Search for members of a Content Update Policy in your environment by providing an FQL filter and paging details. Returns a set of host details which match the filter criteria.

PEP8 method name

query_policy_members_combined

Endpoint

Method	Route
	/policy/combined/content-update-members/v1

Required Scope

Content-Type

• Produces: application/json

Keyword Arguments

Name	Service	Uber	Type	Data type	Description
id			query	string	The ID of the Content Update Policy to search for members of.
filter			query	string	The filter expression that should be used to limit the results.
offset			query	integer	The offset to start retrieving records from.
limit			query	integer	The maximum records to return. [1-5000]
sort			query	string	The property to sort by.
parameters			query	dictionary	Full set of query string parameters in a JSON formatted dictionary.

Usage

Service class example (PEP8 syntax)

from falconpy import ContentUpdatePolicies

# Do not hardcode API credentials!
falcon = ContentUpdatePolicies(client_id=CLIENT_ID,
                               client_secret=CLIENT_SECRET
                               )

response = falcon.query_policy_members_combined(id="string",
                                                filter="string",
                                                offset=integer,
                                                limit=integer,
                                                sort="string"
                                                )
print(response)

Service class example (Operation ID syntax)

from falconpy import ContentUpdatePolicies

# Do not hardcode API credentials!
falcon = ContentUpdatePolicies(client_id=CLIENT_ID,
                               client_secret=CLIENT_SECRET
                               )

response = falcon.queryCombinedContentUpdatePolicyMembers(id="string",
                                                          filter="string",
                                                          offset=integer,
                                                          limit=integer,
                                                          sort="string"
                                                          )
print(response)

Uber class example

from falconpy import APIHarnessV2

# Do not hardcode API credentials!
falcon = APIHarnessV2(client_id=CLIENT_ID,
                      client_secret=CLIENT_SECRET
                      )

response = falcon.command("queryCombinedContentUpdatePolicyMembers",
                          id="string",
                          filter="string",
                          offset=integer,
                          limit=integer,
                          sort="string"
                          )
print(response)

Back to Table of Contents

queryCombinedContentUpdatePolicies

Search for Content Update Policies in your environment by providing an FQL filter and paging details. Returns a set of Content Update Policies which match the filter criteria.

PEP8 method name

query_policies_combined

Endpoint

Method	Route
	/policy/combined/content-update/v1

Required Scope

Content-Type

• Produces: application/json

Keyword Arguments

Name	Service	Uber	Type	Data type	Description
filter			query	string	The filter expression that should be used to limit the results.
offset			query	integer	The offset to start retrieving records from.
limit			query	integer	The maximum records to return. [1-5000]
sort			query	string	The property to sort by.
parameters			query	dictionary	Full set of query string parameters in a JSON formatted dictionary.

Usage

Service class example (PEP8 syntax)

from falconpy import ContentUpdatePolicies

# Do not hardcode API credentials!
falcon = ContentUpdatePolicies(client_id=CLIENT_ID,
                               client_secret=CLIENT_SECRET
                               )

response = falcon.query_policies_combined(filter="string",
                                          offset=integer,
                                          limit=integer,
                                          sort="string"
                                          )
print(response)

Service class example (Operation ID syntax)

from falconpy import ContentUpdatePolicies

# Do not hardcode API credentials!
falcon = ContentUpdatePolicies(client_id=CLIENT_ID,
                               client_secret=CLIENT_SECRET
                               )

response = falcon.queryCombinedContentUpdatePolicies(filter="string",
                                                     offset=integer,
                                                     limit=integer,
                                                     sort="string"
                                                     )
print(response)

Uber class example

from falconpy import APIHarnessV2

# Do not hardcode API credentials!
falcon = APIHarnessV2(client_id=CLIENT_ID,
                      client_secret=CLIENT_SECRET
                      )

response = falcon.command("queryCombinedContentUpdatePolicies",
                          filter="string",
                          offset=integer,
                          limit=integer,
                          sort="string"
                          )
print(response)

Back to Table of Contents

performContentUpdatePoliciesAction

Perform the specified action on the Content Update Policies specified in the request.

PEP8 method name

perform_action

Endpoint

Method	Route
	/policy/entities/content-update-actions/v1

Required Scope

Content-Type

• Produces: application/json

Keyword Arguments

Name	Service	Uber	Type	Data type	Description
action_name			query	string	The action to perform. Allowed values: add-host-group disable enable override-allow override-pause override-revert remove-host-group remove-pinned-content-version set-pinned-content-version
action_parameters			query	dictionary or list of dictionaries	Action specific parameter options.
body			body	dictionary	Full body payload as JSON formatted dictionary.
ids			body	string or list of strings	Content update policy IDs to perform action against.
parameters			query	dictionary	Full set of query string parameters in a JSON formatted dictionary.

Usage

Service class example (PEP8 syntax)

from falconpy import ContentUpdatePolicies

# Do not hardcode API credentials!
falcon = ContentUpdatePolicies(client_id=CLIENT_ID,
                               client_secret=CLIENT_SECRET
                               )

act_params = {
    "name": "string",
    "value": "string"
}

id_list = 'ID1,ID2,ID3'  # Can also pass a list here: ['ID1', 'ID2', 'ID3']

response = falcon.perform_action(action_name="string",
                                 action_parameters=act_params,
                                 ids=id_list
                                 )
print(response)

Service class example (Operation ID syntax)

from falconpy import ContentUpdatePolicies

# Do not hardcode API credentials!
falcon = ContentUpdatePolicies(client_id=CLIENT_ID,
                               client_secret=CLIENT_SECRET
                               )

act_params = {
    "name": "string",
    "value": "string"
}

id_list = 'ID1,ID2,ID3'  # Can also pass a list here: ['ID1', 'ID2', 'ID3']

response = falcon.performContentUpdatePoliciesAction(action_name="string",
                                                     action_parameters=act_params,
                                                     ids=id_list
                                                     )
print(response)

Uber class example

from falconpy import APIHarnessV2

# Do not hardcode API credentials!
falcon = APIHarnessV2(client_id=CLIENT_ID,
                      client_secret=CLIENT_SECRET
                      )

body_payload = {
  "action_parameters": [
    {
      "name": "string",
      "value": "string"
    }
  ],
  "ids": [
    "string"
  ]
}

response = falcon.command("performContentUpdatePoliciesAction",
                          action_name="string",
                          body=body_payload
                          )
print(response)

Back to Table of Contents

setContentUpdatePoliciesPrecedence

Sets the precedence of Content Update Policies based on the order of IDs specified in the request. The first ID specified will have the highest precedence and the last ID specified will have the lowest. You must specify all non-Default Policies when updating precedence.

PEP8 method name

set_precedence

Endpoint

Method	Route
	/policy/entities/content-update-precedence/v1

Required Scope

Content-Type

• Produces: application/json

Keyword Arguments

Name	Service	Uber	Type	Data type	Description
body			body	dictionary	Full body payload as JSON formatted dictionary.
ids			body	string or list of strings	ID list in precedence order.

Usage

Service class example (PEP8 syntax)

from falconpy import ContentUpdatePolicies

# Do not hardcode API credentials!
falcon = ContentUpdatePolicies(client_id=CLIENT_ID,
                               client_secret=CLIENT_SECRET
                               )

id_list = 'ID1,ID2,ID3'  # Can also pass a list here: ['ID1', 'ID2', 'ID3']

response = falcon.set_precedence(ids=id_list)

print(response)

Service class example (Operation ID syntax)

from falconpy import ContentUpdatePolicies

# Do not hardcode API credentials!
falcon = ContentUpdatePolicies(client_id=CLIENT_ID,
                               client_secret=CLIENT_SECRET
                               )

id_list = 'ID1,ID2,ID3'  # Can also pass a list here: ['ID1', 'ID2', 'ID3']

response = falcon.setContentUpdatePoliciesPrecedence(ids=id_list)

print(response)

Uber class example

from falconpy import APIHarnessV2

# Do not hardcode API credentials!
falcon = APIHarnessV2(client_id=CLIENT_ID,
                      client_secret=CLIENT_SECRET
                      )

body_payload = {
  "ids": [
    "string"
  ]
}

response = falcon.command("setContentUpdatePoliciesPrecedence", body=body_payload)

print(response)

Back to Table of Contents

getContentUpdatePolicies

Retrieve a set of Content Update Policies by specifying their IDs.

PEP8 method name

get_policies

Endpoint

Method	Route
	/policy/entities/content-update/v1

Required Scope

Content-Type

• Produces: application/json

Keyword Arguments

Name	Service	Uber	Type	Data type	Description
ids			query	string or list of strings	Content update policy IDs to return.
parameters			query	dictionary	Full set of query string parameters in a JSON formatted dictionary.

Usage

Service class example (PEP8 syntax)

from falconpy import ContentUpdatePolicies

# Do not hardcode API credentials!
falcon = ContentUpdatePolicies(client_id=CLIENT_ID,
                               client_secret=CLIENT_SECRET
                               )

id_list = 'ID1,ID2,ID3'  # Can also pass a list here: ['ID1', 'ID2', 'ID3']

response = falcon.get_policies(ids=id_list)

print(response)

Service class example (Operation ID syntax)

from falconpy import ContentUpdatePolicies

# Do not hardcode API credentials!
falcon = ContentUpdatePolicies(client_id=CLIENT_ID,
                               client_secret=CLIENT_SECRET
                               )

id_list = 'ID1,ID2,ID3'  # Can also pass a list here: ['ID1', 'ID2', 'ID3']

response = falcon.getContentUpdatePolicies(ids=id_list)

print(response)

Uber class example

from falconpy import APIHarnessV2

# Do not hardcode API credentials!
falcon = APIHarnessV2(client_id=CLIENT_ID,
                      client_secret=CLIENT_SECRET
                      )

id_list = 'ID1,ID2,ID3'  # Can also pass a list here: ['ID1', 'ID2', 'ID3']

response = falcon.command("getContentUpdatePolicies", ids=id_list)

print(response)

Back to Table of Contents

createContentUpdatePolicies

Create Content Update Policies by specifying details about the policy to create.

PEP8 method name

create_policies

Endpoint

Method	Route
	/policy/entities/content-update/v1

Required Scope

Content-Type

• Produces: application/json

Keyword Arguments

Name	Service	Uber	Type	Data type	Description
body			body	dictionary	Full body payload as JSON formatted dictionary.
description			body	string	Content Update policy description.
name			body	string	Content Update policy name.
settings			body	dictionary	Content Update policy settings.

Usage

Service class example (PEP8 syntax)

from falconpy import ContentUpdatePolicies

# Do not hardcode API credentials!
falcon = ContentUpdatePolicies(client_id=CLIENT_ID,
                               client_secret=CLIENT_SECRET
                               )

policy_settings = {
    "ring_assignment_settings": [
        {
            "delay_hours": "string",
            "id": "string",
            "ring_assignment": "string"
        }
    ]
}

response = falcon.create_policies(description="string", name="string", settings=policy_settings)

print(response)

Service class example (Operation ID syntax)

from falconpy import ContentUpdatePolicies

# Do not hardcode API credentials!
falcon = ContentUpdatePolicies(client_id=CLIENT_ID,
                               client_secret=CLIENT_SECRET
                               )

policy_settings = {
    "ring_assignment_settings": [
        {
            "delay_hours": "string",
            "id": "string",
            "ring_assignment": "string"
        }
    ]
}

response = falcon.createContentUpdatePolicies(description="string",
                                              name="string",
                                              settings=policy_settings
                                              )
print(response)

Uber class example

from falconpy import APIHarnessV2

# Do not hardcode API credentials!
falcon = APIHarnessV2(client_id=CLIENT_ID,
                      client_secret=CLIENT_SECRET
                      )

body_payload = {
  "resources": [
    {
      "description": "string",
      "name": "string",
      "settings": {
        "ring_assignment_settings": [
          {
            "delay_hours": "string",
            "id": "string",
            "ring_assignment": "string"
          }
        ]
      }
    }
  ]
}

response = falcon.command("createContentUpdatePolicies", body=body_payload)

print(response)

Back to Table of Contents

deleteContentUpdatePolicies

Delete a set of Content Update Policies by specifying their IDs.

PEP8 method name

delete_policies

Endpoint

Method	Route
	/policy/entities/content-update/v1

Required Scope

Content-Type

• Produces: application/json

Keyword Arguments

Name	Service	Uber	Type	Data type	Description
ids			query	string or list of strings	Content update policy IDs to remove.
parameters			query	dictionary	Full set of query string parameters in a JSON formatted dictionary.

Usage

Service class example (PEP8 syntax)

from falconpy import ContentUpdatePolicies

# Do not hardcode API credentials!
falcon = ContentUpdatePolicies(client_id=CLIENT_ID,
                               client_secret=CLIENT_SECRET
                               )

id_list = 'ID1,ID2,ID3'  # Can also pass a list here: ['ID1', 'ID2', 'ID3']

response = falcon.delete_policies(ids=id_list)

print(response)

Service class example (Operation ID syntax)

from falconpy import ContentUpdatePolicies

# Do not hardcode API credentials!
falcon = ContentUpdatePolicies(client_id=CLIENT_ID,
                               client_secret=CLIENT_SECRET
                               )

id_list = 'ID1,ID2,ID3'  # Can also pass a list here: ['ID1', 'ID2', 'ID3']

response = falcon.deleteContentUpdatePolicies(ids=id_list)

print(response)

Uber class example

from falconpy import APIHarnessV2

# Do not hardcode API credentials!
falcon = APIHarnessV2(client_id=CLIENT_ID,
                      client_secret=CLIENT_SECRET
                      )

id_list = 'ID1,ID2,ID3'  # Can also pass a list here: ['ID1', 'ID2', 'ID3']

response = falcon.command("deleteContentUpdatePolicies", ids=id_list)

print(response)

Back to Table of Contents

updateContentUpdatePolicies

Update Content Update Policies by specifying the ID of the policy and details to update.

PEP8 method name

update_policies

Endpoint

Method	Route
	/policy/entities/content-update/v1

Required Scope

Content-Type

• Produces: application/json

Keyword Arguments

Name	Service	Uber	Type	Data type	Description
body			body	dictionary	Full body payload as JSON formatted dictionary.
description			body	string	Content Update policy description.
id			body	string	Content Update policy ID to update.
name			body	string	Content Update policy name.
settings			body	dictionary	Content Update policy settings.

Usage

Service class example (PEP8 syntax)

from falconpy import ContentUpdatePolicies

# Do not hardcode API credentials!
falcon = ContentUpdatePolicies(client_id=CLIENT_ID,
                               client_secret=CLIENT_SECRET
                               )

policy_settings = {
    "ring_assignment_settings": [
        {
            "delay_hours": "string",
            "id": "string",
            "ring_assignment": "string"
        }
    ]
}

response = falcon.update_policies(description="string",
                                  id="string",
                                  name="string",
                                  settings=policy_settings
                                  )
print(response)

Service class example (Operation ID syntax)

from falconpy import ContentUpdatePolicies

# Do not hardcode API credentials!
falcon = ContentUpdatePolicies(client_id=CLIENT_ID,
                               client_secret=CLIENT_SECRET
                               )

policy_settings = {
    "ring_assignment_settings": [
        {
            "delay_hours": "string",
            "id": "string",
            "ring_assignment": "string"
        }
    ]
}

response = falcon.updateContentUpdatePolicies(description="string",
                                              id="string",
                                              name="string",
                                              settings=policy_settings
                                              )
print(response)

Uber class example

from falconpy import APIHarnessV2

# Do not hardcode API credentials!
falcon = APIHarnessV2(client_id=CLIENT_ID,
                      client_secret=CLIENT_SECRET
                      )

body_payload = {
  "resources": [
    {
      "description": "string",
      "id": "string",
      "name": "string",
      "settings": {
        "ring_assignment_settings": [
          {
            "delay_hours": "string",
            "id": "string",
            "ring_assignment": "string"
          }
        ]
      }
    }
  ]
}

response = falcon.command("updateContentUpdatePolicies", body=body_payload)

print(response)

Back to Table of Contents

queryContentUpdatePolicyMembers

Search for members of a Content Update Policy in your environment by providing an FQL filter and paging details. Returns a set of Agent IDs which match the filter criteria.

PEP8 method name

query_policy_members

Endpoint

Method	Route
	/policy/queries/content-update-members/v1

Required Scope

Content-Type

• Produces: application/json

Keyword Arguments

Name	Service	Uber	Type	Data type	Description
id			query	string	The ID of the Content Update Policy to search for members of.
filter			query	string	The filter expression that should be used to limit the results.
offset			query	integer	The offset to start retrieving records from.
limit			query	integer	The maximum records to return. [1-5000]
sort			query	string	The property to sort by.
parameters			query	dictionary	Full set of query string parameters in a JSON formatted dictionary.

Usage

Service class example (PEP8 syntax)

from falconpy import ContentUpdatePolicies

# Do not hardcode API credentials!
falcon = ContentUpdatePolicies(client_id=CLIENT_ID,
                               client_secret=CLIENT_SECRET
                               )

response = falcon.query_policy_members(id="string",
                                       filter="string",
                                       offset=integer,
                                       limit=integer,
                                       sort="string"
                                       )
print(response)

Service class example (Operation ID syntax)

from falconpy import ContentUpdatePolicies

# Do not hardcode API credentials!
falcon = ContentUpdatePolicies(client_id=CLIENT_ID,
                               client_secret=CLIENT_SECRET
                               )

response = falcon.queryContentUpdatePolicyMembers(id="string",
                                                  filter="string",
                                                  offset=integer,
                                                  limit=integer,
                                                  sort="string"
                                                  )
print(response)

Uber class example

from falconpy import APIHarnessV2

# Do not hardcode API credentials!
falcon = APIHarnessV2(client_id=CLIENT_ID,
                      client_secret=CLIENT_SECRET
                      )

response = falcon.command("queryContentUpdatePolicyMembers",
                          id="string",
                          filter="string",
                          offset=integer,
                          limit=integer,
                          sort="string"
                          )
print(response)

Back to Table of Contents

queryPinnableContentVersions

Search for content versions available for pinning given the category.

PEP8 method name

query_pinnable_content_versions

Endpoint

Method	Route
	/policy/queries/content-update-pin-versions/v1

Required Scope

Content-Type

• Produces: application/json

Keyword Arguments

Name	Service	Uber	Type	Data type	Description
category			query	string	Content category. rapid_response_al_bl_listing sensor_operations system_critical vulnerability_management
sort			query	string	The value to sort returned content versions by. Defaults to deployed_timestamp.desc. Available values: deployed_timestamp.asc, deployed_timestamp.desc
parameters			query	dictionary	Full set of query string parameters in a JSON formatted dictionary.

Usage

Service class example (PEP8 syntax)

from falconpy import ContentUpdatePolicies

# Do not hardcode API credentials!
falcon = ContentUpdatePolicies(client_id=CLIENT_ID,
                               client_secret=CLIENT_SECRET
                               )

response = falcon.query_pinnable_content_versions(category="string", sort="string")

print(response)

Service class example (Operation ID syntax)

from falconpy import ContentUpdatePolicies

# Do not hardcode API credentials!
falcon = ContentUpdatePolicies(client_id=CLIENT_ID,
                               client_secret=CLIENT_SECRET
                               )

response = falcon.queryPinnableContentVersions(category="string", sort="string")

print(response)

Uber class example

from falconpy import APIHarnessV2

# Do not hardcode API credentials!
falcon = APIHarnessV2(client_id=CLIENT_ID,
                      client_secret=CLIENT_SECRET
                      )

response = falcon.command("queryPinnableContentVersions", category="string", sort="string")

print(response)

Back to Table of Contents

queryContentUpdatePolicies

Search for Content Update Policies in your environment by providing an FQL filter and paging details. Returns a set of Content Update Policy IDs which match the filter criteria.

PEP8 method name

query_policies

Endpoint

Method	Route
	/policy/queries/content-update/v1

Required Scope

Content-Type

• Produces: application/json

Keyword Arguments

Name	Service	Uber	Type	Data type	Description
filter			query	string	The filter expression that should be used to limit the results.
offset			query	integer	The offset to start retrieving records from.
limit			query	integer	The maximum records to return. [1-5000]
sort			query	string	The property to sort by.
parameters			query	dictionary	Full set of query string parameters in a JSON formatted dictionary.

Usage

Service class example (PEP8 syntax)

from falconpy import ContentUpdatePolicies

# Do not hardcode API credentials!
falcon = ContentUpdatePolicies(client_id=CLIENT_ID,
                               client_secret=CLIENT_SECRET
                               )

response = falcon.query_policies(filter="string",
                                 offset=integer,
                                 limit=integer,
                                 sort="string"
                                 )
print(response)

Service class example (Operation ID syntax)

from falconpy import ContentUpdatePolicies

# Do not hardcode API credentials!
falcon = ContentUpdatePolicies(client_id=CLIENT_ID,
                               client_secret=CLIENT_SECRET
                               )

response = falcon.queryContentUpdatePolicies(filter="string",
                                             offset=integer,
                                             limit=integer,
                                             sort="string"
                                             )
print(response)

Uber class example

from falconpy import APIHarnessV2

# Do not hardcode API credentials!
falcon = APIHarnessV2(client_id=CLIENT_ID,
                      client_secret=CLIENT_SECRET
                      )

response = falcon.command("queryContentUpdatePolicies",
                          filter="string",
                          offset=integer,
                          limit=integer,
                          sort="string"
                          )
print(response)

Back to Table of Contents