Import CrowdStrike Threat Intelligence into your instance of MISP
A collection of Claude Code skills that help security teams stay secure
Cloud deployment size calculation utilities
Async rust support for the reverse-engineered Crowdstrike Falcon protocol between the Sensor and cloud services
CrowdStrike Falcon Advanced Threat Hunting Queries
This project shows a graphical view of the process executions relationship in a tree format (HTML version)
CrowdStrike Powershell module for parsing WFP for Falcon Host Based Firewall
A simple python tool to apply tags a host via a regex matches from a json file
CrowdStrike Problematic Windows Driver files Auto Removal Tool
Get bulk ip against crowstrike falcon prime. Iterate over dataframe. If anything is found append to dataframe. Was given 90%-95% of the code from crowdstrike engineer and their SDK.
CrowdStrike Falcon® Contain GUI for more flexible control over the host containment process.
A new filter backend for Caracara
Execute bulk actions on your hosts using falconpy SDK of Crowdstrike (RTR/RTRA).
A modular, containerized Threat Simulation Framework (SIEM/EDR/SOAR) generating high-fidelity Azure & CrowdStrike telemetry for detection engineering and automated response logic testing.
Automatically retrieve latest IoC from [bazaar, threatfox].abuse.ch and get them into your Falcon instance
Falcon-NextGen-SIEM is a curated collection of resources, tools, and documentation for CrowdStrike Falcon® Next-Gen SIEM. This repository provides deployment guides, detection rules, dashboards, and integration templates to streamline threat detection, log analysis, and security operations.
Collection of Python scripts to interact with the CrowdStrike API
CrowdStrike Falcon Windows PowerShell remote/unattended install script
Add a description, image, and links to the crowdstrike-falcon topic page so that developers can more easily learn about it.
To associate your repository with the crowdstrike-falcon topic, visit your repo's landing page and select "manage topics."