theCanary / CrowdStrike2TH Public

Notifications You must be signed in to change notification settings
Fork 3
Star 2

A Python program to connect to the CrowdStrike QueryAPI, retrieve the latest detections and create an alert in TheHive Project

AGPL-3.0 license

2 stars 3 forks Branches Tags Activity

Notifications

Name		Name	Last commit message	Last commit date
Latest commit History 10 Commits
CrowdStrike		CrowdStrike
LICENSE		LICENSE
README.md		README.md
code_of_conduct.md		code_of_conduct.md
config.py		config.py
cs2th.py		cs2th.py

Repository files navigation

CrowdStrike2TH

A Python program to connect to the CrowdStrike QueryAPI, retrieve the latest detections and create an alert in TheHive

TODO

Add option to only create alerts for medium, high or critical incidents.
Add option to only create alerts for intel incidents.
Add markdown parser to enrich observable descriptions.
Add log parser to generate debug logs.
Add option to create cases instead of alerts.

About

A Python program to connect to the CrowdStrike QueryAPI, retrieve the latest detections and create an alert in TheHive Project

AGPL-3.0 license

Code of conduct

Report repository

Releases

No releases published

Packages

No packages published

Languages

Python 100.0%