<br/>

FalconPy - The CrowdStrike Falcon SDK for Python

The FalconPy SDK contains a collection of Python classes that abstract CrowdStrike Falcon OAuth2 API interaction, removing duplicative code and allowing developers to focus on just the logic of their solution requirements.

• Overview
• Quick Start
• Documentation and Support
• Contribute to FalconPy

Overview 🔎

There are many CrowdStrike Falcon API service collections collectively containing hundreds of individual operations, all of which are accessible to your project via FalconPy.

The CrowdStrike Falcon SDK for Python completely abstracts token management, while also supporting interaction with all CrowdStrike regions, custom connection and response timeouts, routing requests through a list of proxies, disabling SSL verification, and custom header configuration.

If the CrowdStrike APIs were rings of great power, that the Dark Lord Sauron gifted to the kings of dwarves, elves and men, then CrowdStrike's FalconPy would be the One Ring.

"One SDK to rule them all, One SDK to find them, One SDK to bring them all and in the darkness bind them."

Supported versions of Python

The CrowdStrike Falcon SDK for Python was developed for Python 3. Current versions of FalconPy provide support for Python versions 3.8 - 3.13. Every commit to the FalconPy code base is unit tested for functionality using all versions of Python the library currently supports.

[!NOTE] Developers working with Python version 3.6 will need to leverage versions of FalconPy less than 1.4.0. Developers working with Python version 3.7 will need to leverage version of FalconPy less than 1.6.0.

Supported Operating Systems

The FalconPy SDK is unit tested on the following operating systems.

FalconPy will also run on any of the following operating systems.

Details regarding supported operating systems and Python versions, and project security and testing procedures can be found here.

Components

The FalconPy SDK provides two distinct methods for interacting with CrowdStrike's API.

| Service Classes | The Uber Class | | :-- | :-- | | <BR/> | | | Each Service Class represents a single CrowdStrike API service collection providing an interface to the operations available within that service collection.| An all-in-one class that provides a singular interface for all operations in every CrowdStrike API service collection. |

Service Classes

Representing a single CrowdStrike Falcon API service collection, each Service Class has a method defined for every operation available within that service collection.

Available Service Classes

For each CrowdStrike Falcon API service collection, a matching Service Class is available in the FalconPy library. For a complete list of service collections and their related Service Class, please review the Operations by Collection page on falconpy.io.

Service Class benefits

• Closely follows Python and OpenAPI best practice for code style and syntax. PEP-8 compliant.
• Completely abstracts token management, automatically refreshing your token when it expires.
• Interact with newly released API operations not yet available in the library via the override method.
• Provides simple programmatic patterns for interacting with CrowdStrike Falcon APIs.
• Supports cloud region autodiscovery for the CrowdStrike US-1, US-2 and EU-1 regions.
• Supports dynamic configuration based upon the needs of your environment.
• Supports CrowdStrike Falcon API parameter abstraction functionality.
• Supports CrowdStrike Falcon API body payload abstraction functionality.

The Uber Class

Operating as a single harness for interacting with the entire CrowdStrike Falcon API, the Uber Class can access every available operation within every API service collection.

Uber Class benefits

• Access every CrowdStrike Falcon API service collection with only one import and only one class.
• Completely abstracts token management, automatically refreshing your token when it expires.
• Interact with newly released API operations not yet available in the library via the override keyword.
• Provides simple programmatic patterns for interacting with CrowdStrike Falcon APIs.
• Supports cloud region autodiscovery for the CrowdStrike US-1, US-2 and EU-1 regions.
• Supports CrowdStrike Falcon API parameter abstraction functionality.
• Su