falconpy

The CrowdStrike Falcon SDK for Python

Import CrowdStrike Threat Intelligence into your instance of MISP

Developer enhancements (DX) for FalconPy, the CrowdStrike Python SDK

Infrastructure as code for CrowdStrike — manage detections, saved searches, lookup files, and more with a Terraform-like lifecycle.

A modern CLI tool for fetching, managing, and generating CrowdStrike Counter Adversary Operations (CAO) threat intelligence reports.

Python tool designed to score CrowdStrike Falcon Policies against a grading policy

Execute bulk actions on your hosts using falconpy SDK of Crowdstrike (RTR/RTRA).

Python script to list CrowdStrike actors.

A new filter backend for Caracara

A simple utility to visualize detected behaviors from a CrowdStrike console.

Backup Crowdstrike NGSIEM correlation rules, lookups, custom parsers /AND Falcon Fusion SOAR workflows to dated folders on disk using the FalconPy.

How to add a Falcon Grouping tag to a Single Host

All 15 CrowdStrike Falcon modules mapped honestly — 7 with real code against the verified FalconPy SDK, the rest documented for full platform coverage.

Falcon Cloud Security Tools