Import CrowdStrike Threat Intelligence into your instance of MISP
Cloud deployment size calculation utilities
Async rust support for the reverse-engineered Crowdstrike Falcon protocol between the Sensor and cloud services
This project shows a graphical view of the process executions relationship in a tree format (HTML version)
CrowdStrike Powershell module for parsing WFP for Falcon Host Based Firewall
CrowdStrike Falcon Advanced Threat Hunting Queries
CrowdStrike Problematic Windows Driver files Auto Removal Tool
A simple python tool to apply tags a host via a regex matches from a json file
Get bulk ip against crowstrike falcon prime. Iterate over dataframe. If anything is found append to dataframe. Was given 90%-95% of the code from crowdstrike engineer and their SDK.
A new filter backend for Caracara
Execute bulk actions on your hosts using falconpy SDK of Crowdstrike (RTR/RTRA).
Alert Slack on new Crowdstrike Falcon detections
Collection of Python scripts to interact with the CrowdStrike API
Automatically retrieve latest IoC from [bazaar, threatfox].abuse.ch and get them into your Falcon instance
CrowdStrike Falcon® Contain GUI for more flexible control over the host containment process.
Falcon-NextGen-SIEM is a curated collection of resources, tools, and documentation for CrowdStrike Falcon® Next-Gen SIEM. This repository provides deployment guides, detection rules, dashboards, and integration templates to streamline threat detection, log analysis, and security operations.
CrowdStrike Falcon Windows PowerShell remote/unattended install script
This guide helps you with necessary information for onboarding MAC workstations on CrowdStrike Falcon using Microsoft Intune
Add a description, image, and links to the crowdstrike-falcon topic page so that developers can more easily learn about it.
To associate your repository with the crowdstrike-falcon topic, visit your repo's landing page and select "manage topics."