CrowdStrike Integration - using API

Steps to Get Client ID and Client Secret in CrowdStrike Falcon 

 

 

 Log in to the Falcon Console 

 

 

 Go to: https://falcon.crowdstrike.com 

 

 

 Use your admin credentials to log in. 

 

 

 

 

 Navigate to API Clients and Keys 

 

 

 Click on the "Support" (question mark icon) or your User avatar on the top right. 

 

 

 Select "API Clients and Keys" from the dropdown. Alternatively, go to: https://falcon.crowdstrike.com/support/api-clients-and-keys 

 

 

 

 

 Create a New API Client 

 

 

 Click on “Add new API client” . 

 

 

 Name your client and optionally add a description . 

 

 

 Under API Scopes , select the required permissions based on what you need (e.g., read access to Hosts, Alerts, IOCs, etc.). 

 

 

 

 

 

 Data Stream 

 

 

 Scope 

 

 

 

 

 

 

 Intel  

 

 

 read:intel 

 

 

 

 

 IOC  

 

 

 read:iocs 

 

 

 

 

 

 

 

 read:ioc-management 

 

 

 

 

 Alert 

 

 

 read:alert 

 

 

 

 

 Host  

 

 

 read:host 

 

 

 

 

 

   

 

 Click  “Save”. 

 

 

 

 Please provide to AQUILA support team. 

 

 

 Copy the Client ID and Client Secret 

 

 

 After saving, the Client ID and Client Secret will be displayed once . 

 

 

 Copy them immediately and store them securely (e.g., in a password manager or secrets vault). 

 

 

 

 

 Token url 

 

 

   

 If you need further  assistance , kindly contact our support at  support@cytechint.com  for prompt  assistance  and guidance.