Skip to content

CSOAR-3552: added new action in crowdstrike integration #5551

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 3 commits into from
Jul 4, 2025
Merged

CSOAR-3552: added new action in crowdstrike integration #5551

Changes from all commits
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
d9e94ec
CSOAR-3552: added new action in crowdstrike integration
ruturajsumo Jul 4, 2025
26ff7cd
Merge branch 'main' into app_central_crowd_query
ruturajsumo Jul 4, 2025
54fed9d
Merge branch 'main' into app_central_crowd_query
kimsauce Jul 4, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
7 changes: 5 additions & 2 deletions ...form-services/automation-service/app-central/integrations/crowdstrike-falcon.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -7,8 +7,8 @@ import useBaseUrl from '@docusaurus/useBaseUrl';

<img src={useBaseUrl('/img/platform-services/automation-service/app-central/logos/crowdstrike-falcon.png')} alt="crowdstrike-falcon" width="100"/>

***Version: 1.16
Updated: June 5, 2025***
***Version: 1.17
Updated: July 4, 2025***

The CrowdStrike Falcon integration allows you to pull and update Detections/Incidents, and search Incidents/Devices/Detections.

Expand All @@ -27,6 +27,7 @@ The CrowdStrike Falcon integration allows you to pull and update Detections/Inci
* **Get IDP Device Info** *(Enrichment)* - Retrieve detailed information about a devices from IDP. Requires IDP rights and relevant IDP-related API scopes.
* **Incidents CrowdStrike Falcon Daemon** *(Daemon)* - Daemon to pull CrowdStrike Incidents.
* **List Endpoints** *(Enrichment)* - Search for hosts in your environment by platform, hostname, IP.
* **Query Devices By Filter** *(Enrichment)* - Search for hosts in your environment by platform, hostname, IP, and other criteria.
* **Retrieve Alert Details** *(Enrichment)* - Get details for a specific CrowdStrike Alert.
* **Search into Alerts** *(Enrichment)* - Retrieves all Alerts IDs that match a given query.
* **Search into Detections** *(Enrichment)* - Search for Detections that match a given query.
Expand Down Expand Up @@ -100,3 +101,5 @@ For information about CrowdStrike Falcon, see [CrowdStrike documentation](https:
* Resolved timeout issues across all actions, including daemons and enrichment queries, for improved stability and performance.
* June 5, 2025 (v1.16) - Added new actions
* Retrieve Alert Details
* July 4, 2025 (v1.17) - Added new action
* Query Devices By Filter