Thank you for your feedback.
Form temporarily unavailable. Please try again or contact docfeedback@servicenow.com to submit your comments.
Versions
  • London
  • Kingston
  • Jakarta
  • Istanbul
  • Helsinki
  • Geneva
  • Store
Close

Activate and configure the CrowdStrike Falcon Host integration

Activate and configure the CrowdStrike Falcon Host integration

The Integration Configuration feature allows you to quickly activate and set up third-party security integrations, including the CrowdStrike Falcon Host integration. Before you can use the CrowdStrike Falcon Host integration, you must activate the plugin and then add a user name and password.

Before you begin

Role required: admin

The Security Incident Response plugin must be installed and activated before you can use the CrowdStrike Falcon Host integration.

Note: This procedure can be used to activate the plugin and configure the integration. You can also activate the plugin using the traditional method.

Procedure

  1. Navigate to Security Operations > Integrations > Integration Configurations.
    The available security integrations appear as a series of cards.
    CrowdStrike Falcon Host integration card
  2. In the CrowdStrike Falcon Host card, click Install Plugin.
  3. In the Install CrowdStrike Falcon Host integration dialog box, review the plugin details and click Activate.
  4. When the activation is complete, click Close & Reload Form.
    The Security Integration screen reloads and the Configure button for the integration is available.
  5. Click Configure.
  6. Enter the Username and Password of the person responsible for administrating the integration.
  7. Click Submit.

Result

Once configured, the CrowdStrike Falcon Host integration can be selected for publishing observables to watchlists in Security Incident Response.