Skip to content
Merged
Changes from 1 commit
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Original file line number Diff line number Diff line change
Expand Up @@ -7,8 +7,8 @@ import useBaseUrl from '@docusaurus/useBaseUrl';

<img src={useBaseUrl('/img/platform-services/automation-service/app-central/logos/crowdstrike-falcon.png')} alt="crowdstrike-falcon" width="100"/>

***Version: 1.12
Updated: Nov 28, 2024***
***Version: 1.13
Updated: Feb 13, 2025***

The CrowdStrike Falcon integration allows you to pull and update Detections/Incidents, and search Incidents/Devices/Detections.

Expand All @@ -23,6 +23,7 @@ The CrowdStrike Falcon integration allows you to pull and update Detections/Inci
* **Get Incident Info** *(Enrichment)* - Get details for a specific Crowdstrike Incident.
* **Get Indicators** *(Containment)* - Get Indicators By IDs.
* **Get User ID By Mail** *(Enrichment)* - Search for a specific User ID with a given email address.
* **Get IDP Device Info** *(Enrichment)* - Search for sensors in your environment by hostname, IP, and other criteria.
* **Incidents CrowdStrike Falcon Daemon** *(Daemon)* - Daemon to pull CrowdStrike Incidents.
* **List Endpoints** *(Enrichment)* - Search for hosts in your environment by platform, hostname, IP.
* **Search into Detections** *(Enrichment)* - Search for Detections that match a given query.
Expand Down Expand Up @@ -63,3 +64,5 @@ EDR
+ Update Alerts
+ Search into Alerts
+ Alerts CrowdStrike Falcon Daemon
* February 13, 2025 (v1.13) - Added new action
+ Get IDP Device Info