SophosFirewall.ActiveThreatResponse.psd1

@{
    RootModule           = 'SophosFirewall.ActiveThreatResponse.psm1'
    ModuleVersion        = '1.4.1'
    GUID                 = '818bf495-5c4e-4bd4-a8e2-fef4b97d2372'
    Author               = 'Jan Weis'
    Description          = 'PowerShell module for managing Active Threat Response on Sophos XGS / SFOS 22.0 firewalls: ATP (Sophos X-Ops threat feeds) settings, third-party threat feeds, NDR intrusion detection settings and MDR threat feed settings.'

    PowerShellVersion    = '5.1'
    CompatiblePSEditions = @('Desktop', 'Core')
    RequiredModules      = @(
        @{
            ModuleName    = 'SophosFirewall.Core'
            ModuleVersion = '1.4.1'
        }
    )

    FunctionsToExport    = @(
        'Add-SfosATPHostException',
        'Add-SfosATPThreatException',
        'Get-SfosATPSettings',
        'Get-SfosMDRThreatFeed',
        'Get-SfosNDRSettings',
        'Get-SfosThirdPartyFeed',
        'New-SfosThirdPartyFeed',
        'Remove-SfosATPHostException',
        'Remove-SfosATPThreatException',
        'Remove-SfosThirdPartyFeed',
        'Set-SfosATPSettings',
        'Set-SfosMDRThreatFeed',
        'Set-SfosNDRSettings',
        'Set-SfosThirdPartyFeed',
        'Sync-SfosThirdPartyFeed'
    )

    CmdletsToExport      = @()
    VariablesToExport    = @()
    AliasesToExport      = @()

    PrivateData          = @{
        PSData = @{
            Tags         = @('Sophos', 'Firewall', 'API', 'XGS', 'SFOS', 'ActiveThreatResponse', 'ATP', 'ThreatFeed')
            LicenseUri   = 'https://github.com/janweis/SophosFirewall-PowerShell/blob/main/Modules/SophosFirewall.ActiveThreatResponse/LICENSE.txt'
            ProjectUri   = 'https://github.com/janweis/SophosFirewall-PowerShell/tree/main/Modules/SophosFirewall.ActiveThreatResponse'
            ReleaseNotes = '1.4.1: Get-SfosNDRSettings and Set-SfosNDRSettings read and change NDR intrusion detection; Get-SfosMDRThreatFeed and Set-SfosMDRThreatFeed do the same for the MDR threat feed. Both screens have no XML API equivalent and are reached through the JSON REST path of the web admin interface. Sync-SfosThirdPartyFeed triggers an immediate poll of a third-party threat feed instead of waiting for its schedule; the XML API can configure feeds but cannot trigger one.'
        }
    }
}