Crowdstrike

​

Overview

​

Setup instructions

​

Authorization/setup steps

1. Log in to CrowdStrike Falcon Console:
   • Access the CrowdStrike Falcon Console using an administrator account.
2. Generate API Client:
   • Navigate to Support > API Clients and Keys in the Falcon Console.
   • Click Add new API client, name it ThreatAware Integration, and configure the required permissions:
     • Hosts: Read
     • Detection: Read
     • Additional permissions based on ThreatAware’s requirements.
   • Click Save to generate the Client ID and Client Secret. Copy these details as they will not be shown again.
3. Input API Credentials in ThreatAware:
   • Open ThreatAware, go to Integrations, and select CrowdStrike.
   • Enter the Client ID and Client Secret in their respective fields.

​

Important notes and links

• For specific permissions and further details, refer to the CrowdStrike API Documentation.
• Ensure API credentials are securely stored, as they allow access to sensitive data within your CrowdStrike environment.

​

Input details

• Client ID: ID generated for API access in CrowdStrike.
  Field: Client ID
  Name: CrowdStrike Client ID
  Type: String
  
• Client Secret: Secret key associated with the Client ID.
  Field: Client Secret
  Name: CrowdStrike Client Secret
  Type: Password
  

​

Verification and troubleshooting

• Verification: Confirm the Integration Status in ThreatAware shows as Active once the setup is complete.
• Troubleshooting:
  • Invalid Credentials: Ensure the Client ID and Client Secret are correct and that the required permissions are granted.
  • Permission Issues: Revisit the API Clients and Keys in CrowdStrike to confirm appropriate access levels.