Cloud-native cybersecurity platform to stop breaches and secure businesses
CrowdStrike’s Falcon platform provides endpoint and workload protection, threat intelligence, and cyberattack response services. Assemble your choice of modules, each implemented via one endpoint agent and a cloud-based management console.
How to get data flowing
This is a built-in integration between Cribl Stream and Crowdstrike Falcon.
Configure Crowdstrike Falcon to queue notifications to Stream.
Configure Stream to ingest notifications via Sources > Crowdstrike.
Specify the queue, region, filter expression, authentication and ARN credentials, Event Breakers, and optional parameters
Stream will fetch data as it becomes available.
Cribl, the Data Engine for IT and Security, empowers organizations to transform their data strategy. Customers use Cribl’s suite of products to collect, process, route, and analyze all IT and security data, delivering the flexibility, choice, and control required to adapt to their ever-changing needs.
We offer free training, certifications, and a free tier across our products. Our community Slack features Cribl engineers, partners, and customers who can answer your questions as you get started and continue to build and evolve. We also offer a variety of hands-on-Sandboxes for those interested in how companies globally leverage our products for their data challenges.
