Import CrowdStrike Threat Intelligence into your instance of MISP
Cloud deployment size calculation utilities
Async rust support for the reverse-engineered Crowdstrike Falcon protocol between the Sensor and cloud services
This project shows a graphical view of the process executions relationship in a tree format (HTML version)
CrowdStrike Powershell module for parsing WFP for Falcon Host Based Firewall
CrowdStrike Problematic Windows Driver files Auto Removal Tool
CrowdStrike Falcon Advanced Threat Hunting Queries
Get bulk ip against crowstrike falcon prime. Iterate over dataframe. If anything is found append to dataframe. Was given 90%-95% of the code from crowdstrike engineer and their SDK.
A new filter backend for Caracara
Execute bulk actions on your hosts using falconpy SDK of Crowdstrike (RTR/RTRA).
Automatically retrieve latest IoC from [bazaar, threatfox].abuse.ch and get them into your Falcon instance
Alert Slack on new Crowdstrike Falcon detections
A simple python tool to apply tags a host via a regex matches from a json file
Falcon-NextGen-SIEM is a curated collection of resources, tools, and documentation for CrowdStrike Falcon® Next-Gen SIEM. This repository provides deployment guides, detection rules, dashboards, and integration templates to streamline threat detection, log analysis, and security operations.
Collection of Python scripts to interact with the CrowdStrike API
CrowdStrike Falcon® Contain GUI for more flexible control over the host containment process.
A compilation of queries I use for hunting on the CrowdStrike Falcon platform.
CrowdStrike Falcon Windows PowerShell remote/unattended install script
Add a description, image, and links to the crowdstrike-falcon topic page so that developers can more easily learn about it.
To associate your repository with the crowdstrike-falcon topic, visit your repo's landing page and select "manage topics."