Promote Sign in Sign up

Repository

foundry-tutorial-fusion-soar

Use Falcon Foundry to create a custom workflow action available in Falcon Fusion SOAR. The workflow action uses REST APIs to work with data.

CrowdStrike
Repository

README

CrowdStrike
CrowdStrike

CrowdStrike Subreddit

Fusion SOAR tutorial Foundry app

[!IMPORTANT]
To view this tutorial and import the app, you need access to the Falcon console.

This code is the result of doing the Falcon Foundry Create a Custom Fusion SOAR Workflow Action tutorial.

Prerequisites

  • Falcon Insight XDR or Falcon Prevent (one app)
  • Falcon Next-Gen SIEM or Falcon Foundry (1+ apps depending on entitlement)

Getting Started

  1. Download this repository as a zip file.
  2. Log in to the Falcon console and go to Foundry > App manager.
  3. Click Import app and select the zip file you downloaded.
  4. Click Import.

[!TIP]
If you get an error that the name already exists, change the name to something unique to your CID when importing the app.

This example uses the following CrowdStrike products:

Help

Please post any questions as issues in this repo, ask for help in our CrowdStrike subreddit, or post your question to our Foundry Developer Community.

Support

The foundry-tutorial-fusion-soar repo is the resulting code from doing the Foundry Create a Custom Fusion SOAR Workflow Action tutorial. While not a formal CrowdStrike product, foundry-tutorial-fusion-soar is maintained by CrowdStrike and supported in partnership with the open source developer community.

License

MIT, see LICENSE.