CrowdStrike × Tines

Integrating Tines’ automation platform with CrowdStrike’s endpoint protection empowers organizations to streamline and enhance their cybersecurity operations by automating threat detection and response workflows.

Book a demoSign up free

Pre-built templates

With Tines, you can easily take any action that has a defined API. We've already pre-built some of the most popular ones for you, so you can build quickly.

Update the details of external assets
Returns external assets aggregates
Retrieves detailed information about ecosystem subsidiaries by ID
Retrieves a list of IDs for ecosystem subsidiaries
Retrieves a list of ecosystem subsidiaries with their detailed information
Get details on external assets by providing one or more IDs
Get a list of external asset IDs that match the provided filter conditions
Download the entire contents of the blob
Download a preview of the blob
Delete multiple external assets
Add external assets for external asset scanning
View the latest security assessment report
Upload multiple IOCs
Upload file to NGSIEM
Upload File to Crowdstrike Falcon Sandbox
Upload a single IOC
Update the incident lifecycle state
Update Saved Query from LogScale YAML Template in NGSIEM. Please note a successf
Update Parser in NGSIEM. Please note that name changes are not supported, but ra
Update Lookup File in NGSIEM

Build your own connections

With Tines, you can easily take any action that has a defined API using an HTTP request. To build even more quickly, copy a cURL command and paste it into the storyboard.

cURL request

curl -v -X GET --location "https://api.nasa.gov/neo/rest/v1/neo/browse?api_key=DEMO_KEY" -H 'Content-Type: application/json'

Paste in your Tines story

Full workflow examples

Explore pre-built workflows for CrowdStrike. Use them for inspiration or as a starting point to build your custom automation solution.

Analyze CrowdStrike endpoint alerts

Tools: CrowdStrike, Jira Software, Slack, VirusTotal

Ingest, analyze and store IOCs with Tines

Tools: AbuseIPDB, CrowdStrike, GreyNoise, Pulsedive, Sublime Security, Tines, URLScan.io, VirusTotal

Analyze Crowdstrike detections and report in Jira and Microsoft Teams

Tools: CrowdStrike, Jira Software, Microsoft, Microsoft Teams

Receive password breach alerts from SpyCloud and secure accounts

Tools: CrowdStrike, Jira Software, Okta, SpyCloud

Contain devices identified by CrowdStrike Falcon Overwatch

Tools: CrowdStrike, Jira Software

Retrieve CrowdStrike endpoint alerts and send to Falcon LogScale (Humio)

Tools: CrowdStrike

Connect quickly

It takes minutes, not months, to connect to tools in Tines.

CrowdStrike connect flow

Learn how to authenticate CrowdStrike for use with Tines.

CrowdStrike authentication guide

Learn how to authenticate CrowdStrike for use with Tines.

Explore more resources

Check out our blogs that mention CrowdStrike, browse our learning paths, and more.

Blog

Managing CrowdStrike detections, analyzing behaviors, & containing user devices

Read now

Case studies

Powerful users, powerful studies

Discover how companies – from Fortune 10 to startups – apply Tines to transform the way their teams operate.

Read case studies

Learn

Tines University

Build your knowledge with dedicated learning paths at all levels.

Start learning

Learn

Learn to use Tines with our documentation

Go to docs

Trusted by industry innovators

CanvaCode42CoinbaseDropboxElasticGitLab
MarsMcKessonOpenTableSnowflakeReddit

Built by you,
powered by Tines

Book a demoSign up free

Already have an account? Log in.