IOC service classes are merging!

[jshcodes]

Hi everyone!

As a couple of users have reported (#313, #314), several of the endpoints / operations within the legacy IOCs service class (iocs.py) have been fully deprecated and now return 500's from the API. All of the endpoints that were deprecated have readily available replacement operations within the new IOC service class (ioc.py).

The four operations within the legacy IOCs service class that were not deprecated are still available.

• devices_count - DevicesCount
• devices_ran_on - DevicesRanOn
• processes_ran_on - ProcessesRanOn
• entities_processess - entities_processes

Already this is starting to get a little confusing...

In order to combat potential developer frustration, the following changes are being implemented in version 0.6.3:

1. Endpoints within the legacy service class, iocs.py that are deprecated will be updated to provide a "this method is deprecated" message along with the name of the replacement operation.
2. All methods remaining within the legacy service class iocs.py have been ported into the new service class, ioc.py.
   • This does not change the support for using these operations via the legacy service class.
   • This means you should be able to access all available IOC functionality using just the new service class.
3. This does not change support for any of these operations within the Uber class whatsoever.
   • Using the Uber class to attempt to access one of the disabled legacy IOC operations will result in a 500 originating from the API.

Complete list of available methods - ioc.py

Method Name - Operation ID

• indicator_combined - indicator_combined_v1
• indicator_get - indicator_get_v1
• indicator_create - indicator_create_v1
• indicator_delete - indicator_delete_v1
• indicator_update - indicator_update_v1
• indicator_search - indicator_search_v1
• devices_count - DevicesCount
• devices_ran_on - DevicesRanOn
• processes_ran_on - ProcessesRanOn
• entities_processes - entities_processes

Complete list of available methods - iocs.py

Method Name - Operation ID

• devices_count - DevicesCount
• devices_ran_on - DevicesRanOn
• processes_ran_on - ProcessesRanOn
• entities_processes - entities_processes

Complete list of deprecated methods - iocs.py

Method Name - Operation ID

• get_ioc - GetIOC
• create_ioc - CreateIOC
• delete_ioc - DeleteIOC
• update_ioc - UpdateIOC
• query_iocs - QueryIOCs

Questions

If you have any questions or concerns regarding this change, you can reply here or post a new Discussion. If you encounter any issues with this new functionality once it is released, please let us know by posting a new issue.