Falcon CrowdStrike EASM

Connection Requirements

1

Domain

The domain of the CrowdStrike.

Default: https://api.crowdstrike.com

2

Client ID

Generated Client ID for a user that has the permissions to fetch asset details.

3

Client Secret

Generated Client Secret Key for a user that has the permissions to fetch asset details.

You can follow the steps below. To define a CrowdStrike API client, you must be assigned the Falcon Administrator role to view, create, or modify API clients or keys. Secrets are only shown when a new API Client is created or reset.

• When logged into the Falcon UI, navigate to Support > API Clients and Keys.

• From there you can view existing clients, add new API clients, or view the audit log.

• When you click “Add new API Client” you will be prompted to give a descriptive name and select the appropriate API scopes. For EASM the following read permission is required: External Asset.

• After you click save, you will be presented with the Client ID and Client Secret.

Note: The secret is only shown once and must be saved somewhere secure.

4

Timeout

(Configure request timeout as needed.)

Attention: Please perform a connection test to ensure there is a valid connection to the host. When the discovery operation is finalized, you will be able to see the details on the Assets page.