This is a patch release fixing a single eval failure: the functions-falcon-api skill was still directing the model to use the deprecated Detects class from FalconPy, which returns 405 Method Not Allowed in production.
Fixed
- Replaced deprecated Detects API with Alerts API — The skill now directs users to
from falconpy import Alertswithquery_alerts_v2()/get_alerts_v2()instead of the removedDetectsclass. Filter byproduct:'detections'to scope results to detections only. Eval confirmed 5/5 trials passing after the fix.
Getting started
Install:
/plugin install crowdstrike-falcon-foundry
Already installed? Update to 1.4.1:
/plugin update crowdstrike-falcon-foundry