CrowdStrike Falcon Streaming - Classifier

Classifies CrowdStrike Falcon events.

CrowdStrike Falcon Streaming Classification

Details

ID	`crowdstrike-streaming-api`
Type	classification
Version	-1
From Version	6.0.0
Default Incident Type	—
Feed	No

Key Type Map

Key	Incident Type
`EppDetectionSummaryEvent`	Malware

Source

classifier-Crowdstrike-Streaming.json

Download History Raw

{
	"id": "crowdstrike-streaming-api",
    "name": "CrowdStrike Falcon Streaming - Classifier",
    "type": "classification",
    "description": "Classifies CrowdStrike Falcon events.",
	"version": -1,
	"defaultIncidentType": "",
	"transformer": {
		"simple": "metadata.eventType",
		"complex": null
	},
	"keyTypeMap": {
		"EppDetectionSummaryEvent": "Malware"
	},
	"fromVersion": "6.0.0"
}