crowdstrike/ioc

VendorCrowdStrike Holdings, Inc.Parsers
AuthorCrowdStrikeDashboards
Version1.0.0Alerts
Minimum LogScale Version1.45.0Actions
  Scheduled Searches

The CrowdStrike IOC Connector integration package enables seamless ingestion and analysis of Indicators of Compromise (IOCs) from the CrowdStrike Falcon platform into Log Collector. It provides pre-built parsers, dashboards, and alerts specifically designed to track and correlate malicious indicators such as IP addresses, domains, file hashes, and other threat intelligence data.

The package allows security teams to automatically match incoming logs against known IOCs, enabling faster threat detection and reducing response times. By integrating CrowdStrike's threat intelligence directly into Log Collector's search capabilities, it enhances an organization's ability to proactively hunt for threats across their environment.