CrowdStrike Falcon
Bring CrowdStrike Falcon security alerts into DataOS
This guide brings your CrowdStrike Falcon security alerts (warnings about suspicious activity found on your devices) into DataOS.
crowdstrike.com
?
What you need
A client ID and secret from CrowdStrike, plus your Falcon cloud address
Who can get it
A Falcon administrator
Where data lands
A governed table in your DataOS lakehouse
Connection type
REST API
How the connection works
?
Source
CrowdStrike Falcon
DataOS connector
Keeps it up to date
DataOS lakehouse
Governed data product
The connector uses your CrowdStrike key to ask Falcon for alerts from the last seven days and refreshes the table in DataOS. It only reads alerts. It never changes them.
What's next
Ready to bring this data into DataOS?
