CrowdStrike - Incident Actions

CrowdStrike - Incident Actions

Description

CrowdStrike's Incident Actions is a playbook that provides a streamlined and efficient way to respond to security incidents. It allows organizations to quickly detect, investigate, and respond to threats in real time. This playbook leverages the power of the CrowdStrike Falcon platform to provide a comprehensive set of security incident response capabilities. With Incident Actions, organizations can quickly identify, investigate, and respond to threats, and take proactive steps to prevent future incidents. The playbook includes features such as automated incident response workflows, automated threat intelligence analysis, and automated alerting and notification. Additionally, Incident Actions allows organizations to customize their security incident response processes to meet their specific needs. With Incident Actions, organizations can quickly and effectively respond to security incidents, and ensure that their systems remain secure and protected.

Trigger Request

• HTTP Post Request

• Headers:

• Json body parameters:

Supported CDC Versions

• 2.8