Tools
CrowdStrike
Query CrowdStrike Identity Protection sensors and documented aggregates
Usage Instructions
Integrate CrowdStrike Identity Protection into workflows to search sensors, fetch documented sensor details by device ID, and run documented sensor aggregate queries.
Tools
crowdstrike_get_sensor_aggregates
Get documented CrowdStrike Identity Protection sensor aggregates from a JSON aggregate query body
Input
| Parameter | Type | Required | Description |
|---|---|---|---|
clientId | string | Yes | CrowdStrike Falcon API client ID |
clientSecret | string | Yes | CrowdStrike Falcon API client secret |
cloud | string | Yes | CrowdStrike Falcon cloud region |
aggregateQuery | json | Yes | JSON aggregate query body documented by CrowdStrike for sensor aggregates |
Output
| Parameter | Type | Description |
|---|---|---|
aggregates | array | Aggregate result groups returned by CrowdStrike |
count | number | Number of aggregate result groups returned |
crowdstrike_get_sensor_details
Get documented CrowdStrike Identity Protection sensor details for one or more device IDs
Input
| Parameter | Type | Required | Description |
|---|---|---|---|
clientId | string | Yes | CrowdStrike Falcon API client ID |
clientSecret | string | Yes | CrowdStrike Falcon API client secret |
cloud | string | Yes | CrowdStrike Falcon cloud region |
ids | json | Yes | JSON array of CrowdStrike sensor device IDs |
Output
| Parameter | Type | Description |
|---|---|---|
sensors | array | CrowdStrike identity sensor detail records |
count | number | Number of sensors returned |
pagination | json | Pagination metadata when returned by the underlying API |
crowdstrike_query_sensors
Search CrowdStrike identity protection sensors by hostname, IP, or related fields
Input
| Parameter | Type | Required | Description |
|---|---|---|---|
clientId | string | Yes | CrowdStrike Falcon API client ID |
clientSecret | string | Yes | CrowdStrike Falcon API client secret |
cloud | string | Yes | CrowdStrike Falcon cloud region |
filter | string | No | Falcon Query Language filter for identity sensor search |
limit | number | No | Maximum number of sensor records to return |
offset | number | No | Pagination offset for the identity sensor query |
sort | string | No | Sort expression for identity sensor results |
Output
| Parameter | Type | Description |
|---|---|---|
sensors | array | Matching CrowdStrike identity sensor records |
count | number | Number of sensors returned |
pagination | json | Pagination metadata (limit, offset, total) |
Notes
- Category:
tools - Type:
crowdstrike