CrowdStrike Integration - using API

Steps to Get Client ID and Client Secret in CrowdStrike Falcon

1. Log in to the Falcon Console

   • Go to: https://falcon.crowdstrike.com

   • Use your admin credentials to log in.

2. Navigate to API Clients and Keys

   • Click on the "Support" (question mark icon) or your User avatar on the top right.

   • Select "API Clients and Keys" from the dropdown.
     Alternatively, go to: https://falcon.crowdstrike.com/support/api-clients-and-keys

3. Create a New API Client

   • Click on “Add new API client”.

   • Name your client and optionally add a description.

   • Under API Scopes, select the required permissions based on what you need (e.g., read access to Hosts, Alerts, IOCs, etc.).

     Data Stream	Scope
     Intel	read:intel
     IOC	read:iocs
     	read:ioc-management
     Alert	read:alert
     Host	read:host

      

   • Click “Save”.

Please provide to AQUILA support team.

1. Copy the Client ID and Client Secret

   • After saving, the Client ID and Client Secret will be displayed once.

   • Copy them immediately and store them securely (e.g., in a password manager or secrets vault).

2. Token url

If you need further assistance, kindly contact our support at support@cytechint.com for prompt assistance and guidance.