cs-shadowbq

CQL-Queries. Best Practices, queries, and packages for CQL the language of CrowdStrike's LogScale (Humio) log manager.

blueteam-ioa-rules. CrowdStrike Falcon Custom IOA rules and Examples

psfalcon-docker. Container using a microsoft powershell wrapper for the Crowdstrike Powershell SDK PSFalcon

falcon-intel-spike. falcon intel indicators to mongodb

falcon-tags-tool. A simple python tool to apply tags a host via a regex matches from a json file

falcon-policy-scoring. Python tool designed to score CrowdStrike Falcon Policies against a grading policy

cao-report-fetcher. A modern CLI tool for fetching, managing, and generating CrowdStrike Counter Adversary Operations (CAO) threat intelligence reports.

falcon-exposure-management-universal-reporter. CrowdStrike FEM universal reporter provides large exports of data from FEM

hackmd-memory-analysis. YARA

crowdstrike-actors-list. Python script to list CrowdStrike actors.

falconpy-tools. Collection of tools to use with falonpy SDK

falcon-cwp-tools. Tools for working with the CrowdStrike CWP CR registries and Helm Charts

BulkStrike. BulkStrike enables the usage of CrowdStrike Real Time Response (RTR) to bulk execute commands on multiple machines.

puttygen-cygwin. steps to recreate a PPK-PEM CLI tool in cygwin

falcon-host-deployment-validator. validate deployment against CSV list

paperless-ngx-cao-tools. Tools to seed Paperless NGX with CrowdStrike Falcon CAO Data

falcon-fdr-dictionary. Python tool to download and manipulate the CrowdStrike Falcon FDR Event Dictionary