#
crowdstrike
Here are 116 public repositories matching this topic...
Connect AI agents to CrowdStrike Falcon for automated security analysis and threat hunting
-
Updated
Oct 8, 2026 - Python
A collection of Claude Code skills that help security teams stay secure
-
Updated
Apr 27, 2026 - Python
Import CrowdStrike Threat Intelligence into your instance of MISP
python intel threat-hunting misp threatintel threat-intelligence crowdstrike pymisp falconpy crowdstrike-apis crowdstrike-falcon crowdstrike-api falcon-threat-intelligence crowdstrike-threat-intelligence
-
Updated
Mar 20, 2026 - Python
Multi-EDR & SIEM mock server. SentinelOne, CrowdStrike, Defender, Elastic, Cortex XDR, Splunk, M365 and Sentinel — 8 platforms in one process. Real API paths, real auth, deterministic seed data, fault injection, scenario engine, SPL parser. GitHub Action + one-click Render deploy. BSL-1.1
testing splunk mock-server siem api-mock security-automation soar crowdstrike edr m365 github-actions sentinelone cortex-xdr microsoft-sentinel mocrosoft-defender elastics-security
-
Updated
Oct 15, 2026 - Python
Developer enhancements (DX) for FalconPy, the CrowdStrike Python SDK
python api toolkit python3 toolbox falcon devsecops crowdstrike python37 python38 python39 python310 falconpy crowdstrike-apis crowdstrike-falconpy falconpy-tools caracara
-
Updated
Jul 1, 2026 - Python
BulkStrike enables the usage of CrowdStrike Real Time Response (RTR) to bulk execute commands on multiple machines.
-
Updated
Nov 27, 2022 - Python
Cloud deployment size calculation utilities
benchmark falcon horizon crowdstrike cloud-auditing cspm cspm-benchmark crowdstrike-horizon crowdstrike-falcon
-
Updated
Jul 30, 2026 - Python
Infrastructure as code for CrowdStrike — manage detections, saved searches, lookup files, and more with a Terraform-like lifecycle.
-
Updated
Oct 14, 2026 - Python
Crowdstrike Falcon Host script for iterating through instances to get alert and other relevant data
-
Updated
Jul 16, 2019 - Python
Open, machine-readable CrowdStrike Falcon sensor events data dictionary (CSV + Markdown) for threat hunting, detection engineering, SIEM onboarding, and AI/LLM ingestion.
security incident-response dfir falcon dataset cybersecurity data-dictionary threat-hunting siem crowdstrike blue-team edr rag detection-engineering crowdstrike-falcon llm
-
Updated
Jun 3, 2026 - Python
Crowdstrike Falcon streaming api client in python
-
Updated
Jan 31, 2019 - Python
CrowdStrike Falcon Custom IOA rules and Examples
-
Updated
Apr 12, 2026 - Python
CrowdClient is a Python library for interacting with CrowdStrike Falcon's REST API.
-
Updated
Jan 11, 2026 - Python
A Model Context Protocol (MCP) server that provides programmatic access to CrowdStrike NGSIEM search capabilities. This server enables MCP-compatible applications to execute security event searches through a standardized interface.
-
Updated
Dec 30, 2025 - Python
Mousejack attack and reverse VBS C2 script
evasion crowdstrike command-and-control out-of-band jackit mousejack-attack keystroke-injection-attack stage-vbs-payload
-
Updated
Nov 25, 2019 - Python
Agentic L1 SOC analyst that triages SIEM alerts (Splunk, QRadar, Elastic, Sentinel, Wazuh), enriches with CrowdStrike, cites its reasoning, and learns from analyst corrections — self-hosted.
python flask splunk incident-response siem soc wazuh crowdstrike qradar threat-detection rag detection-engineering alert-triage ai-agent microsoft-sentinel elastic-security llm security-operations-center agentic-ai prompt-injection-defense
-
Updated
Oct 1, 2026 - Python
A simple python tool to apply tags a host via a regex matches from a json file
-
Updated
Dec 8, 2022 - Python
Add this topic to your repo
To associate your repository with the crowdstrike topic, visit your repo's landing page and select "manage topics."