You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
# falcon-integration-gateway [](https://github.com/CrowdStrike/falcon-integration-gateway/actions/workflows/linting.yml)[](https://quay.io/repository/crowdstrike/falcon-integration-gateway)
3
+
# falcon-integration-gateway [](https://github.com/CrowdStrike/falcon-integration-gateway/actions/workflows/linting.yml)[](https://quay.io/repository/crowdstrike/falcon-integration-gateway)
4
4
5
5
Falcon Integration Gateway (FIG) forwards threat detection findings and audit events from the CrowdStrike Falcon platform to the [backend](fig/backends) of your choice.
6
6
7
7
Detection findings and audit events generated by CrowdStrike Falcon platform inform you about suspicious files and behaviors in your environment. You will see detections on a range of activities from the presence of a bad file (indicator of compromise (IOC)) to a nuanced collection of suspicious behaviors (indicator of attack (IOA)) occurring on one of your hosts or containers. You can learn more about the individual detections in [Falcon documentation](https://falcon.crowdstrike.com/support/documentation/40/mitre-based-falcon-detections-framework).
8
8
9
9
This project facilitates the export of the individual detections and audit events from CrowdStrike Falcon to third-party security dashboards (so called backends). The export is useful in cases where security operation team workflows are tied to given third-party solution to get early real-time heads-up about malicious activities or unusual user activities detected by CrowdStrike Falcon platform.
10
10
11
+
## Table of Contents
12
+
13
+
-[Python Compatibility](#python-compatibility)
14
+
-[API Scopes](#api-scopes)
15
+
-[Authentication](#authentication)
16
+
-[Direct Configuration](#direct-configuration)
17
+
-[Environment Variables](#environment-variables)
18
+
-[Credential Store](#credential-store)
19
+
-[Configuration](#configuration)
20
+
-[Deployment](#deployment)
21
+
-[Backends w/ Available Deployment Guide(s)](#backends-w-available-deployment-guides)
Please refer to the [config.ini](./config/config.ini) file for more details on the available options along with their respective environment variables.
@@ -106,15 +128,15 @@ Please refer to the [config.ini](./config/config.ini) file for more details on t
106
128
| Workspace ONE | Pushes events to VMware Workspace ONE Intelligence |*Coming Soon*|[Workspace ONE backend](fig/backends/workspaceone)|
107
129
| Generic | Displays events to STDOUT (useful for dev/debugging) | N/A |[Generic Backend](fig/backends/generic)|
108
130
109
-
## Alternative Deployment Options
131
+
###Alternative Deployment Options
110
132
111
133
> :exclamation: Prior to any deployment, ensure you refer to the [configuration options](./config/config.ini) available to the application :exclamation:
112
134
113
-
### Installation to Kubernetes using the helm chart
135
+
####Installation to Kubernetes using the helm chart
114
136
115
137
Please refer to the [FIG helm chart documentation](https://github.com/CrowdStrike/falcon-helm/tree/main/helm-charts/falcon-integration-gateway) for detailed instructions on deploying the FIG via helm chart for your respective backend(s).
116
138
117
-
### With Docker/Podman
139
+
####With Docker/Podman
118
140
119
141
To install as a container:
120
142
@@ -142,12 +164,14 @@ To install as a container:
142
164
docker logs <container>
143
165
```
144
166
145
-
### From the Python Package Index (PyPI)
167
+
#### From the Python Package Index (PyPI)
146
168
147
-
> [!IMPORTANT]
148
-
> Falcon Integration Gateway (FIG) versions below 3.2.1 on PyPI are broken and will not install correctly. Please ensure you install version 3.2.1 or higher from PyPI.
169
+
Falcon Integration Gateway (FIG) is available on the [Python Package Index](https://pypi.org/project/falcon-integration-gateway/).
170
+
171
+
> [!WARNING]
172
+
> Falcon Integration Gateway (FIG) versions below 3.2.2 on PyPI are broken and will not install correctly. Please ensure you install version 3.2.2 or higher from PyPI.
Copy file name to clipboardExpand all lines: docs/listings/gke/deployer/schema.yaml
+19-19Lines changed: 19 additions & 19 deletions
Original file line number
Diff line number
Diff line change
@@ -3,7 +3,7 @@ x-google-marketplace:
3
3
4
4
applicationApiVersion: v1beta1
5
5
6
-
publishedVersion: "3.2.1"
6
+
publishedVersion: "3.2.2"
7
7
publishedVersionMetadata:
8
8
releaseNote: >-
9
9
3.1
@@ -14,13 +14,13 @@ x-google-marketplace:
14
14
15
15
clusterConstraints:
16
16
resources:
17
-
- replicas: 1
18
-
requests:
19
-
cpu: 100m
20
-
memory: 300Mi
17
+
- replicas: 1
18
+
requests:
19
+
cpu: 100m
20
+
memory: 300Mi
21
21
22
22
images:
23
-
'': # Primary image has no name.
23
+
"":# Primary image has no name.
24
24
properties:
25
25
imageRepo:
26
26
type: REPO_WITH_REGISTRY
@@ -45,10 +45,10 @@ properties:
45
45
type: STRING
46
46
default: us-1
47
47
enum:
48
-
- 'us-1'
49
-
- 'us-2'
50
-
- 'eu-1'
51
-
- 'us-gov-1'
48
+
- "us-1"
49
+
- "us-2"
50
+
- "eu-1"
51
+
- "us-gov-1"
52
52
falcon.client_id:
53
53
title: "Falcon API OAuth2 Credentials: Client ID"
54
54
description: "API keypair used to authenticate with Falcon Platform and to initiate streaming session. Only the following permissions are required: READ 'Event streams' and READ 'Hosts'"
0 commit comments