Crowdstrike

Welcome Forums Integrations Crowdstrike

Viewing 1 post (of 1 total)
  • Author
    Posts
  • #1623
    Mike RiforgiateMike Riforgiate
    Keymaster

    Crowdstrike Configuration

    1. Navigate to Support > API Clients and Keys
    2. Click “Add new API Client
    3. Name the new client, select read-only for all scopes and click Add.
    4. Copy the Client ID and Client Secret

    PRECINCT CONFIGURATION

    • Go to Admin > SOAR > Crowdstrike API > Config
    • Click the checkbox for Enable the Crowdstrike Integration
    • Paste the Client ID and Client Secret
    • Click the disk icon (Save)
    • Click Jobs and go to Artifacts from Crowdstrike.
    • Select Triggers, expanding Manual Trigger and Interval Trigger. 
      • Toggle both to State: ENABLED
    • The Interval Trigger is set to 2 hours by default, but you can update it to what best suits your organization. (Recommended: 10 minutes)
    • Click the disk icon (Save)

     

    Crowdstrike API doc

Viewing 1 post (of 1 total)
  • You must be logged in to reply to this topic.