Triage for CrowdStrike alert (multitenant)
  • 02 Apr 2025
  • 1 Minute to read
  • Dark
    Light
  • PDF

Triage for CrowdStrike alert (multitenant)

  • Dark
    Light
  • PDF

Article summary

Triage for CrowdStrike alert (multitenant)

Description

Triage for CrowdStrike Alert (Multi-Tenant) is an automated workflow solution designed to streamline the process of responding to security alerts generated by CrowdStrike. This solution provides an efficient way to quickly assess and respond to alerts, allowing organizations to quickly identify and respond to threats. It automates the process of triaging alerts - determining the severity of the alert, and taking the appropriate action. This solution is designed to be used by organizations of all sizes, from small businesses to large enterprises, and is capable of handling multiple tenants simultaneously. With this solution, organizations can quickly identify and respond to threats, reducing the risk of a security breach and improving their overall security posture.

Trigger Request

  • HTTP Post Request

  • Headers:

KeyValue
Content-Typeapplication/json
  • Json body parameters:
ParametersTypeDescription
alertIDstringThe CDC alert ID that triggered the playbook
detectionIDstringThe CrowdStrike detection ID that triggered the alert.

Supported CDC Versions

  • 2.8

Was this article helpful?