Skip to content

CrowdStrike/foundry-tutorial-fusion-soar

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

5 Commits
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 

CrowdStrike CrowdStrike

CrowdStrike Subreddit

Fusion SOAR tutorial Foundry app

Important

To view this tutorial and import the app, you need access to the Falcon console.

This code is the result of doing the Falcon Foundry Create a Custom Fusion SOAR Workflow Action tutorial.

Prerequisites

  • Falcon Insight XDR or Falcon Prevent (one app)
  • Falcon Next-Gen SIEM or Falcon Foundry (1+ apps depending on entitlement)

Getting Started

  1. Download this repository as a zip file.
  2. Log in to the Falcon console and go to Foundry > App manager.
  3. Click Import app and select the zip file you downloaded.
  4. Click Import.

Tip

If you get an error that the name already exists, change the name to something unique to your CID when importing the app.

Links

This example uses the following CrowdStrike products:

Help

Please post any questions as issues in this repo, ask for help in our CrowdStrike subreddit, or post your question to our Foundry Developer Community.

Support

The foundry-tutorial-fusion-soar repo is the resulting code from doing the Foundry Create a Custom Fusion SOAR Workflow Action tutorial. While not a formal CrowdStrike product, foundry-tutorial-fusion-soar is maintained by CrowdStrike and supported in partnership with the open source developer community.

License

MIT, see LICENSE.

About

Use Falcon Foundry to create a custom workflow action available in Falcon Fusion SOAR. The workflow action uses REST APIs to work with data.

Topics

Resources

License

Code of conduct

Contributing

Security policy

Stars

Watchers

Forks

Contributors