Falcon CrowdStrike Spotlight

Connection Requirements

1

Domain

The domain of the CrowdStrike.

Default: https://api.crowdstrike.com

2

Client ID

Generated Client ID for a user that has the permissions to fetch asset details.

3

Client Secret

Generated Client Secret Key for a user that has the permissions to fetch asset details.

You can follow the steps below:

• When logged into the Falcon UI, navigate to Support > API Clients and Keys .

• From there you can view existing clients, add new API clients , or view the audit log.

• When you click “Add new API Client” you will be prompted to give a descriptive name and select the appropriate API scopes. vulnerabilities:read scope should suffice.

• After you click save, you will be presented with the Client ID and Client Secret.

Note: The secret will only be shown once and must be saved somewhere.

4

SSL

Use SSL for connection (optional).

Default: Encrypted

5

Timeout

Timeout for return API call.

Default: 30

Attention: Please perform a connection test to ensure there is a valid connection to the host. When the discovery operation is finalized, you will be able to see the details on the Assets page.