Link Search Menu Expand Document

Crowdstrike Falcon

Table of contents
  1. Creating an OAuth2 API Client in Falcon
  2. Configuring a Crowdstrike API integration Plugin

This guide addresses the procedures required to allow Fluency Cloud to integrate with Crowdstrike Falcon, and read data via the API.

Creating an OAuth2 API Client in Falcon

Login to your Crowdstrike Falcon account.

To create an API Client, open the Main Menu from the upper left-hand corner and choose the “API Client and Keys” option under the Support section.

In the OAuth API Client section of the next page, choose the “+ Add new API Client” option on the right.

Provide a Client Name and Description for the API Client

As this is a read-only integration, please select ALL of the check boxes under the “Read” column.

Click “Add” to save the configuration and create the client.

The API Client credentials will be shown. Please make a note of the Client ID, Secret, and the Base URL fields. These values will be needed to complete the integration on Fluency Cloud.

Configuring a Crowdstrike API integration Plugin

Login to the Fluency Cloud portal: https://<companyname>.cloud.fluencysecurity.com.

Open the Main Menu from the upper left-hand corner and choose the “Cloud Import” option under the Configuration section.

On the right hand side of the next page, click the “+ CLOUD CONNECTOR” button to open a dropdown menu with connector options. Select “Falcon”

On the following page, provide a customer name for this integration (or use “default”). This can just be the short name of your organization. (The value will be only used within Fluency.)

Using the Client ID, Client Secret, and the Base URL from the Falcon interface in the previous step, fill out the rest of the form.

Click “SAVE” to save this configuration.