Import CrowdStrike Threat Intelligence into your instance of MISP

Use SQL to instantly query CrowdStrike resources. Open source CLI. No DB required.

This repo is used to automate containment of hosts in a Crowdstrike environment with python

Execute bulk actions on your hosts using falconpy SDK of Crowdstrike (RTR/RTRA).

A script that automates the process of polling IOCs from a STIX/TAXII server and ingesting them into CrowdStrike Falcon using the Falcon Intelligence API. It supports transforming domain names, IP addresses, and file hashes from STIX format into CrowdStrike-compatible IOCs for threat detection and response.

CrowdStrike Firewall API Toolkit