You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
The CrowdStrike Falcon integration allows you to pull and update Detections/Incidents, and search Incidents/Devices/Detections.
14
14
15
15
## Actions
16
16
17
+
***Alerts CrowdStrike Falcon Daemon***(Daemon)* - Daemon to pull CrowdStrike Alerts.
17
18
***Close CrowdStrike Incident***(Containment)* - Close the state of the CrowdStrike Incident.
18
19
***Create Indicators***(Containment)* - Create the Indicators.
19
20
***Detections CrowdStrike Falcon Daemon***(Daemon)* - Daemon to pull CrowdStrike Detections.
@@ -26,13 +27,13 @@ The CrowdStrike Falcon integration allows you to pull and update Detections/Inci
26
27
***Get IDP Device Info***(Enrichment)* - Retrieve detailed information about a devices from IDP. Requires IDP rights and relevant IDP-related API scopes.
27
28
***Incidents CrowdStrike Falcon Daemon***(Daemon)* - Daemon to pull CrowdStrike Incidents.
28
29
***List Endpoints***(Enrichment)* - Search for hosts in your environment by platform, hostname, IP.
30
+
***Retrieve Alert Details***(Enrichment)* - Get details for a specific CrowdStrike Alert.
31
+
***Search into Alerts***(Enrichment)* - Retrieves all Alerts IDs that match a given query.
29
32
***Search into Detections***(Enrichment)* - Search for Detections that match a given query.
30
33
***Search into Incidents***(Enrichment)* - Search for incidents by providing an FQL filter, sorting, and paging
31
34
details.
32
35
***Update Detections***(Containment)* - Modify the state or assignee of Detections.
33
36
***Update Alerts***(Containment)* - Perform actions on Alerts identified by composite ID(s) in request.
34
-
***Search into Alerts***(Enrichment)* - Retrieves all Alerts IDs that match a given query.
35
-
***Alerts CrowdStrike Falcon Daemon***(Daemon)* - Daemon to pull CrowdStrike Alerts.
36
37
37
38
## Category
38
39
@@ -80,3 +81,5 @@ For information about CrowdStrike Falcon, see [CrowdStrike documentation](https:
80
81
+ Refactored the code to improve performance and maintainability.
81
82
* June 3, 2025 (v1.15) - Updated the Integration
82
83
* Resolved timeout issues across all actions, including daemons and enrichment queries, for improved stability and performance.
0 commit comments