You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
The CrowdStrike Falcon integration allows you to pull and update Detections/Incidents, and search Incidents/Devices/Detections.
14
14
@@ -27,6 +27,7 @@ The CrowdStrike Falcon integration allows you to pull and update Detections/Inci
27
27
***Get IDP Device Info***(Enrichment)* - Retrieve detailed information about a devices from IDP. Requires IDP rights and relevant IDP-related API scopes.
28
28
***Incidents CrowdStrike Falcon Daemon***(Daemon)* - Daemon to pull CrowdStrike Incidents.
29
29
***List Endpoints***(Enrichment)* - Search for hosts in your environment by platform, hostname, IP.
30
+
***Query Devices By Filter***(Enrichment)* - Search for hosts in your environment by platform, hostname, IP, and other criteria.
30
31
***Retrieve Alert Details***(Enrichment)* - Get details for a specific CrowdStrike Alert.
31
32
***Search into Alerts***(Enrichment)* - Retrieves all Alerts IDs that match a given query.
32
33
***Search into Detections***(Enrichment)* - Search for Detections that match a given query.
@@ -100,3 +101,5 @@ For information about CrowdStrike Falcon, see [CrowdStrike documentation](https:
100
101
* Resolved timeout issues across all actions, including daemons and enrichment queries, for improved stability and performance.
0 commit comments