The CrowdStrike Falcon Host integration allows you to push observables in a security incident into a watchlist, making them able to generate additional alerts. This integration is an implementation of the CrowdStrike Falcon Host - Publish to Watchlist workflow.

Table 1.

Explore

Security Incident Response integrations

Set up

Get started with the CrowdStrike Falcon Host integration

Use

Perform lookups on observables

Develop

Troubleshoot and get help