https://store-images.s-microsoft.com/image/apps.45213.b4fcbd8f-c268-4a8f-a2ee-41bd79077793.442e078d-e5df-4a26-a9f0-f350f480d879.58543955-ac53-4121-ae4c-412459fff2ae

CrowPilot

بواسطة Security Risk Advisors Intl, LLC

A free agent for Security Copilot that enables interaction with the Crowdstrike Falcon EDR platform

CrowPilot is an agent that leverages an App Service to allow Security Copilot to control and interact with your Crowdstrike Falcon EDR platform. It enables you and Security Copilot to:

  1. Retrieve host information
  2. List all incidents
  3. Get details of a specific incident
  4. Perform an On Demand Scan
  5. Check the health of their configuration
  6. Isolate a host
  7. Reverse isolation of a host
  8. Hide a host
  9. Unhide a host
  10. Move a host to a new host group
  11. Block an IOC
  12. Unblock an IOC
  13. Retrieve a Zero Trust Score
  14. Suppress a detection
  15. Unsuppress a detection

For further installation pre-requisite instructions prior to using CrowPilot in Security Copilot as an agent, see https://sra.io/crowpilot

لمحة سريعة

https://store-images.s-microsoft.com/image/apps.49572.b4fcbd8f-c268-4a8f-a2ee-41bd79077793.442e078d-e5df-4a26-a9f0-f350f480d879.76cfa298-483b-41f6-8953-2688f8c4bd99