← Go back to library

Analyze CrowdStrike endpoint alerts

Pulls a list of new CrowdStrike Detections, flags them as in progress in CrowdStrike, and gets the detection details for each one. For each detection, the individual behaviors are examined, and the process hash is checked in VirusTotal to see if it is known malicious. A Jira ticket is created for each Detection, and a message sent to a Slack Channel.

Created by

Michael Tolan

How it works

Import this story to your tenant, from where you can adapt it to meet your unique needs.

Import
Was this story helpful?