Actions & Endpoints

Actions & Endpoints

Introduction

The Crowdstrike Integration with Rewst delivers a robust set of actions and endpoints for interacting with Crowdstrike. Below is a summary of each section, highlighting the diverse capabilities and opportunities provided through the Crowdstrike Integration:

• Alerts

• Detects

• Devices

• Discover

• Generic Request

• Incidents

• Reports

• Users

Actions

Alerts

List Alerts

GET https://api.crowdstrike.com/alerts/queries/alerts/v1

Lists any alerts that have been raised

Detects

List Detections

GET https://api.crowdstrike.com/detects/queries/detects/v1

Lists any detections that have been raised

Get Detection(s)

POST https://api.crowdstrike.com/detects/entities/summaries/GET/v1

Description coming soon...

Devices

List Devices

GET https://api.crowdstrike.com/devices/queries/devices/v1

Description coming soon...

Get Device(s)

GET https://api.crowdstrike.com/devices/entities/devices/v2

Description coming soon...

List Device Host Groups

GET https://api.crowdstrike.com/devices/queries/host-groups/v1

Description coming soon...

Discover

List Accounts

GET https://api.crowdstrike.com/discover/queries/accounts/v1

List subaccounts associated with your account

List Hosts

GET https://api.crowdstrike.com/discover/queries/hosts/v1

List hosts associated with your account

List Logins

GET https://api.crowdstrike.com/discover/queries/logins/v1

List the logins for users on your account

Generic Request

API Request

GET/PUT/POST/DELETE https://api.crowdstrike.com/<url_path>

Generic action for making authenticated requests against the CrowdStrike Falcon API

Incidents

List Incidents

GET https://api.crowdstrike.com/incidents/queries/incidents/v1

Lists any incidents that have been raised

Reports

List Reports

GET https://api.crowdstrike.com/falconx/queries/reports/v1

Lists FalconX Reports for your account

Users

List Users

GET https://api.crowdstrike.com/user-management/queries/users/v1

Lists created users and their properties for your account

Get User(s)

POST https://api.crowdstrike.com/user-management/entities/users/GET/v1

Gets specified users and their properties from your account

List User Roles

GET https://api.crowdstrike.com/user-management/queries/roles/v1

Lists user roles and their properties for your accounts

Delete User

DELETE https://api.crowdstrike.com/user-management/entities/users/v1

Deletes specified users permanently from your account

Create User

POST https://api.crowdstrike.com/user-management/entities/users/v1

Creates a new user in your account