Skip to content

Commit 14418c2

Browse files
CSOAR-3398: Added the new action to CrowdStrike Falcon Integration (#5452)
1 parent f15414b commit 14418c2

File tree

1 file changed

+7
-4
lines changed

1 file changed

+7
-4
lines changed

docs/platform-services/automation-service/app-central/integrations/crowdstrike-falcon.md

Lines changed: 7 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -7,13 +7,14 @@ import useBaseUrl from '@docusaurus/useBaseUrl';
77

88
<img src={useBaseUrl('/img/platform-services/automation-service/app-central/logos/crowdstrike-falcon.png')} alt="crowdstrike-falcon" width="100"/>
99

10-
***Version: 1.15
11-
Updated: June 3, 2025***
10+
***Version: 1.16
11+
Updated: June 5, 2025***
1212

1313
The CrowdStrike Falcon integration allows you to pull and update Detections/Incidents, and search Incidents/Devices/Detections.
1414

1515
## Actions
1616

17+
* **Alerts CrowdStrike Falcon Daemon** *(Daemon)* - Daemon to pull CrowdStrike Alerts.
1718
* **Close CrowdStrike Incident** *(Containment)* - Close the state of the CrowdStrike Incident.
1819
* **Create Indicators** *(Containment)* - Create the Indicators.
1920
* **Detections CrowdStrike Falcon Daemon** *(Daemon)* - Daemon to pull CrowdStrike Detections.
@@ -26,13 +27,13 @@ The CrowdStrike Falcon integration allows you to pull and update Detections/Inci
2627
* **Get IDP Device Info** *(Enrichment)* - Retrieve detailed information about a devices from IDP. Requires IDP rights and relevant IDP-related API scopes.
2728
* **Incidents CrowdStrike Falcon Daemon** *(Daemon)* - Daemon to pull CrowdStrike Incidents.
2829
* **List Endpoints** *(Enrichment)* - Search for hosts in your environment by platform, hostname, IP.
30+
* **Retrieve Alert Details** *(Enrichment)* - Get details for a specific CrowdStrike Alert.
31+
* **Search into Alerts** *(Enrichment)* - Retrieves all Alerts IDs that match a given query.
2932
* **Search into Detections** *(Enrichment)* - Search for Detections that match a given query.
3033
* **Search into Incidents** *(Enrichment)* - Search for incidents by providing an FQL filter, sorting, and paging
3134
details.
3235
* **Update Detections** *(Containment)* - Modify the state or assignee of Detections.
3336
* **Update Alerts** *(Containment)* - Perform actions on Alerts identified by composite ID(s) in request.
34-
* **Search into Alerts** *(Enrichment)* - Retrieves all Alerts IDs that match a given query.
35-
* **Alerts CrowdStrike Falcon Daemon** *(Daemon)* - Daemon to pull CrowdStrike Alerts.
3637

3738
## Category
3839

@@ -80,3 +81,5 @@ For information about CrowdStrike Falcon, see [CrowdStrike documentation](https:
8081
+ Refactored the code to improve performance and maintainability.
8182
* June 3, 2025 (v1.15) - Updated the Integration
8283
* Resolved timeout issues across all actions, including daemons and enrichment queries, for improved stability and performance.
84+
* June 5, 2025 (v1.16) - Added new actions
85+
* Retrieve Alert Details

0 commit comments

Comments
 (0)