Search Endpoints By Hash - CrowdStrike Deprecated Hidden

Deprecated. Use CrowdStrike Falcon instead.

FalconHost (Deprecated) · 13 tasks · 3 inputs · 2 outputs

Inputs

  • MD5Hash — MD5 Hash
  • SHA1Hash — SHA1 Hash
  • SHA256Hash — SHA256 Hash

Outputs

  • Endpoint.Hostname — Device hostname
  • Endpoint — The endpoint

Commands used

cs-device-details cs-device-ran-on

Flowchart

yes yes yes yes yes Start Start Are there MD5s to hunt? Are there MD5s to hunt? Are there SHA1s to hunt? Are there SHA1s to hunt? Are there SHA256s to hunt? Are there SHA256s to hunt? Hunt for devices running MD5 - cs-device-ran-on Hunt for devices running MD5 cs-device-ran-on Hunt for devices accessing SHA1 - cs-device-ran-on Hunt for devices accessin... cs-device-ran-on Hunt for devices accessing SHA256 - cs-device-ran-on Hunt for devices accessin... cs-device-ran-on Get device details Get device details Found any devices? Found any devices? Done Done Is FalconHost enabled? Is FalconHost enabled? Hunt for indicators Hunt for indicators Get device hostnames - cs-device-details Get device hostnames cs-device-details