Automatically retrieve latest IoC from [bazaar, threatfox].abuse.ch and get them into your Falcon instance
-
Updated
Nov 1, 2024 - Python
Automatically retrieve latest IoC from [bazaar, threatfox].abuse.ch and get them into your Falcon instance
Import CrowdStrike Threat Intelligence into your instance of MISP
A new filter backend for Caracara
Cloud deployment size calculation utilities
CrowdStrike Problematic Windows Driver files Auto Removal Tool
Collection of Python scripts to interact with the CrowdStrike API
CrowdStrike Falcon® Contain GUI for more flexible control over the host containment process.
This project shows a graphical view of the process executions relationship in a tree format (HTML version)
CrowdStrike Powershell module for parsing WFP for Falcon Host Based Firewall
Create a powershell DSC configuration file for use in a group policy to distribute and enroll the Falcon LogScale Collector.
Package to help around crowdstrike/fdr data
Execute bulk actions on your hosts using falconpy SDK of Crowdstrike (RTR/RTRA).
CrowdStrike Falcon Windows PowerShell remote/unattended install script
Async rust support for the reverse-engineered Crowdstrike Falcon protocol between the Sensor and cloud services
CrowdStrike Falcon Event Stream to Humio
Get bulk ip against crowstrike falcon prime. Iterate over dataframe. If anything is found append to dataframe. Was given 90%-95% of the code from crowdstrike engineer and their SDK.
A simple python tool to apply tags a host via a regex matches from a json file
Alert Slack on new Crowdstrike Falcon detections
Add a description, image, and links to the crowdstrike-falcon topic page so that developers can more easily learn about it.
To associate your repository with the crowdstrike-falcon topic, visit your repo's landing page and select "manage topics."