Activate and configure the CrowdStrike Falcon Intelligence integration

The Integration Configuration feature allows you to quickly activate and set up third-party security integrations, including the CrowdStrike Falcon Intelligence integration.

Before you begin

Role required: admin

The Threat Intelligence plugin must be installed and activated before you can use the CrowdStrike Falcon Intelligence integration.

Note: This procedure can be used to activate the plugin and configure the integration. You can also activate the plugin using the traditional method.

Procedure

  1. Access CrowdStrike Falcon Intelligence and obtain the API Key and API ID under your profile.
  2. Navigate to Security Operations > Integrations > Integration Configurations.
    The available security integrations appear as a series of cards.
    CrowdStrike Falcon Intelligence integration card
  3. In the CrowdStrike Falcon Intelligence card, click Install Plugin.
  4. In the Install CrowdStrike Falcon Intelligence integration dialog box, review the plugin details and click Activate.
  5. When the activation is complete, click Close & Reload Form.
    The Security Integration screen reloads and the Configure button for the integration is available.
  6. Click Configure.
  7. Enter (or paste) the API Key you acquired from the CrowdStrike Falcon Intelligence site.
  8. Enter (or paste) the API ID you acquired from the CrowdStrike Falcon Intelligence site.
  9. Click Submit.

Result

Once configured, CrowdStrike Falcon Intelligence is available under Threat Intelligence > IoC Lookup > Lookup Sources > .