[ BUG ] `Receive-FalconNgsLookupFile` ValidateSet missing `third-party`

[jenquist]

Describe the bug
The validation set for possible repository param omits "third-party" which is a valid repository name.

To Reproduce
Create a lookup file in the third-party repository, connect psfalcon, attempt to retrieve with

Receive-FalconNgsLookupFile -Filename "TEST_thirdParty.csv" -Repository "third-party" Receive-FalconNgsLookupFile: Cannot validate argument on parameter 'Repository'. The argument "third-party" does not belong to the set "3pi_parsers,event_search_all,falcon_for_it_view,forensics_view,investigate_view,search-all" specified by the ValidateSet attribute. Supply an argument that is in the set and then try the command again.

Expected behavior
File is retrieved. Manually tested by correcting the validation set in humio.ps1
https://github.com/CrowdStrike/psfalcon/blob/master/public/humio.ps1

Line 23/24

    [ValidateSet('3pi_parsers','event_search_all','falcon_for_it_view','forensics_view','investigate_view',
      'search-all',IgnoreCase=$false)]

add ,'third-party'

    [ValidateSet('3pi_parsers','event_search_all','falcon_for_it_view','forensics_view','investigate_view',
      'search-all','third-party',IgnoreCase=$false)]

and the file can be downloaded

Receive-FalconNgsLookupFile -Filename "TEST_thirdParty.csv" -Repository "third-party"

FullName                                          Length LastWriteTime
--------                                               ------ -------------
C:\redacted\TEST_thirdParty.csv       30 12/2/2025 3:45:52 PM

Environment (please complete the following information):

• OS: Windows 11
• PSVersion 7.5.4
• Version psfalcon 2.2.9

Additional context
Get-FalconNgsLookupFile uses -Domain to reference repository by friendly name (I think) and Receive-FalconNgsLookupFile uses the repository naming. Why are they different? Why are these event separate commandlets?

[bk-cs]

Thank you for catching this! I have added third-party as a valid value for Repository for the next PSFalcon release. If you'd like to resolve it for your local module before release, you can replace public\humio.ps1 using the steps outlined below.

Import-Module -Name PSFalcon
$ModulePath = (Show-FalconModule).ModulePath
(Invoke-WebRequest -Uri https://raw.githubusercontent.com/CrowdStrike/psfalcon/refs/heads/dev/public/humio.ps1 -UseBasicParsing).Content > (Join-Path (Join-Path $ModulePath public) humio.ps1)

Please ensure that you close and re-open PowerShell and re-import PSFalcon before testing. I'll keep this issue open for others to apply this change until release.