CrowdStrike Rapid IOC Hunting
Deprecated. Use "CrowdStrike Rapid IOC Hunting v2" playbook instead. Hunt for endpoint activity involving hash and domain IOCs, using Crowdstrike Falcon Host.\nAlso use AnalystEmail label to determine where to send an email alert if something is found.
- Pack
- DeprecatedContent
- Tasks
- 17
Commands used
- cs-device-ran-on
- cs-device-search