Import CrowdStrike Threat Intelligence into your instance of MISP
A collection of Claude Code skills that help security teams stay secure
Cloud deployment size calculation utilities
Async rust support for the reverse-engineered Crowdstrike Falcon protocol between the Sensor and cloud services
CrowdStrike Falcon Advanced Threat Hunting Queries
This project shows a graphical view of the process executions relationship in a tree format (HTML version)
Open, machine-readable CrowdStrike Falcon sensor events data dictionary (CSV + Markdown) for threat hunting, detection engineering, SIEM onboarding, and AI/LLM ingestion.
CrowdStrike Powershell module for parsing WFP for Falcon Host Based Firewall
A simple python tool to apply tags a host via a regex matches from a json file
Execute bulk actions on your hosts using falconpy SDK of Crowdstrike (RTR/RTRA).
Get bulk ip against crowstrike falcon prime. Iterate over dataframe. If anything is found append to dataframe. Was given 90%-95% of the code from crowdstrike engineer and their SDK.
Falcon-NextGen-SIEM is a curated collection of resources, tools, and documentation for CrowdStrike Falcon® Next-Gen SIEM. This repository provides deployment guides, detection rules, dashboards, and integration templates to streamline threat detection, log analysis, and security operations.
CrowdStrike Falcon® Contain GUI for more flexible control over the host containment process.
A new filter backend for Caracara
An Open-source Security Information and Event Management (SIEM) solution blended with UEBA and TI Capabilities
CrowdStrike Problematic Windows Driver files Auto Removal Tool
A modular, containerized Threat Simulation Framework (SIEM/EDR/SOAR) generating high-fidelity Azure & CrowdStrike telemetry for detection engineering and automated response logic testing.
This guide helps you with necessary information for onboarding MAC workstations on CrowdStrike Falcon using Microsoft Intune
Add a description, image, and links to the crowdstrike-falcon topic page so that developers can more easily learn about it.
To associate your repository with the crowdstrike-falcon topic, visit your repo's landing page and select "manage topics."