FalconHost Deprecated
Deprecated. Use the CrowdStrike Falcon integration instead.
Endpoint · FalconHost (Deprecated)
Configuration parameters
url— Server URL (e.g. https://192.168.0.1) (required)id— API ID (required)key— API Key (required)useproxy— Use system proxy settingsinsecure— Trust any certificate (not secure)
Commands (17)
-
cs-delete-iocDeletes an indicator that you are monitoring
-
cs-detection-detailsDeprecatedDeprecated. Use the cs-falcon-search-detection command from the CrowdStrike Falcon integration instead.
-
cs-detection-searchDeprecatedDeprecated. Use the cs-falcon-search-detection command from the CrowdStrike Falcon integration instead.
-
cs-device-count-iocReturns the number of devices on which an IOC ran, according to type and value of an IOC
-
cs-device-detailsGet details for one or more devices, according to device ID
-
cs-device-ran-onReturns a list of device IDs on which an indicator ran
-
cs-device-searchSearch for devices in your environment by platform, host name, IP, or various other parameters
-
cs-get-iocGet the full definition of one or more indicators that you are watching
-
cs-process-detailsRetrieves the details of a process, according to process ID, that is running or that previously ran.
-
cs-processes-ran-onReturns the process ID of the indicator if it ran on given device recently
-
cs-resolve-detectionDeprecatedDeprecated. Use the cs-falcon-resolve-detection command from the CrowdStrike Falcon integration instead.
-
cs-search-iocsReturns a list of your uploaded IOCs that match the search criteria
-
cs-threatgraph-detectionsGets the child process Threat Graph Detections.
-
cs-threatgraph-processesGets the summary of Threat Graph Processes.
-
cs-threatgraph-summaryGets the details of a threat graph summary.
-
cs-update-iocUpdates one or more of the uploaded indicators
-
cs-upload-iocUploads one or more indicators for CrowdStrike to monitor