Brazil, Australia, Zurich, Yokohama
Integration
Falcon Insight delivers continuous, comprehensive endpoint visibility that spans detection, response, and forensics to ensure nothing is missed and stops potential breaches.
CrowdStrike Falcon Insight Integration for Security Operations provides CI enrichment and host isolation capabilities.
Integration with CrowdStrike Falcon Insight provides the following EDR (Endpoint Detection and Response) capabilities:
- Get Host Details
- Get Network Stats
- Get Running Processes
- Get Running Services
- Get Logged-on Users
- Sighting Search
- Isolate Host
- Remove Host Isolation
Fixed:
- The "Create Indicators" action in the CrowdStrike Create IOCs subflow that failed with the provided data does not match expected format when the instance's date_format system property was set to a non-UTC format (e.g. DD-MM-YYYY). Date values are now normalized to the API-expected format regardless of the instance's date_format setting.
Not applicable for this application version. For more information, please see
Application Runtime Policy
Security Incident Response Dependency plugin (com.snc.si_dep) is required. This plugin automatically installs all the dependencies required to support the Security Incident Response product.
Verify that Security Incident Response (SIR) is installed and activated from the ServiceNow Store.