crowdstrike / community

CrowdStrike's Open Source Policy & Contribution Guide

CrowdStrike Github Overview

Last updated 2022-04-19

Falcon Sensor Installation

• install scripts (Bash, Powershell)
• Ansible module (Ansible Galaxy)
• Puppet module

Cloud Integrations

• AWS

  • Sensor Automation
    • AWS Autoscale Groups for Auto Register/Deregister
    • AWS Systems Manager Parameter Store with PowerShell Sensor Installation Script
    • AWS Systems Manager with Linux BASH Sensor Installation Script
    • AWS Terraform Template for Sensor Installation
  • Services Integrations
    • AWS Control Tower with CrowdStrike Discover for Cloud and Containers
    • AWS Control Tower with CrowdStrike Horizon
    • AWS Network Firewall with CrowdStrike Threat Intelligence
    • AWS Private Link with CrowdStrike Sensor Proxy
    • AWS Security Hub with CrowdStrike Event Streams API
    • AWS S3 Protected Bucket with CrowdStrike Quick Scan API

• Azure

  • Sensor Automation
    • VM Extension
    • VM Run Command
    • VM Applications
    • VM Virtual Machine Scale Sets
  • Services Integrations
    • Azure Log Analytics

• GCP

  • Sensor Automation
    • OSConfig
  • Services Integrations
    • Security Command Center
    • Google Chronicle

Kubernetes Deployment

• Falcon Operator
• Falcon Helm
• Containers
  • CI container image scanning script
    • github action
  • helper tools
    • cloud-tools-image
    • detection container

API SDKs

• psfalcon
• falconpy
• gofalcon
• rusty-falcon
• falconjs

Other Integrations

• Falcon Integration Gateway
  • AWS Security Hub
  • Azure Log Analytics
  • Chronicle
  • GCP Security Command Center
  • Workspace ONE
• Cloud-Benchmarks
• Falcon Data Replicator (FDR)
• Various Humio integrations

community's Issues

Request to join CrowdStrike Organization

Name: Ray Heffer
Email: [email protected]

Thank you!

Request to join CrowdStrike GitHub Organization

HI, I am requesting to join the CrowdStrike Organization. Below are my details:

name: frank falor
email: [email protected]

open source/documentation for crowdstrike terraform provider and account provisioning terraform

Trying to use the "batch multi account registration with terraform" and cant find any documentation for

"cs-prod-cloudconnect-templates.s3.amazonaws.com/crowdstrike/crowdstrike"

terraform {
  required_providers {
      crowdstrike = {
        source  = "cs-prod-cloudconnect-templates.s3.amazonaws.com/crowdstrike/crowdstrike"
        version = ">= 0.2.0"
      }
    }
  }

What resources does it support? Can I use it for provisioning workload discovery? Does it support env vars for client_id/client_secret?

I think it would also be great to have

source                      = "https://cs-prod-cloudconnect-templates.s3.amazonaws.com/terraform/tarball/crowdstrike-aws.tar.gz"

as a versioned entity with sourcecode available in github. As is, it makes answering questions like: when changes are coming?, what are they?, will they cause problems? difficult to answer

Thanks!

Request to join CrowdStrike GitHub Organization

Hello -- requesting access to the CrowdStrike GitHub Organization. Please find my CS details below:

e-mail: [email protected]
slack: @musa

Request to join CrowdStrike GitHub Org

Name: Marc Hobson
Email: [email protected]
Role: Cloud Solution Architect
Purpose: To contribute to Crowdstrike GitHub repos such as Cloud-AWS, Cloud-GCP, Cloud-Azure, DevDays, etc.

Thank you.

ERROR 400: Bad Request

While using wget command to check the connectivity we are getting error

wget --no-check-certificate --method POST --timeout=0 --header 'Authorization: Basic ODc4MTM1Zjzg4Mzc4NTQ3MTZkYWI2Nzg6N2FucZHazlMMWhJTlRpMzBGSFFBODVXc0tDMkJ0elhPZmN3RQ' --header 'Content-Type: application/x-www-form-urlencoded' 'https://api.crowdstrike.com/oauth2/token'
--2024-03-11 02:23:15-- https://api.crowdstrike.com/oauth2/token
Resolving api.crowdstrike.com (api.crowdstrike.com)... 54.241.246.108, 13.56.9.61
Connecting to api.crowdstrike.com (api.crowdstrike.com)|54.241.246.108|:443... connected.
HTTP request sent, awaiting response... 400 Bad Request
2024-03-11 02:23:15 ERROR 400: Bad Request.

Request to get added to this repo

Hi,

I would like to join this group. Here are the details:
Name: Amit Jaiswal
Email: [email protected]

Thanks
Amit

Request to join Org

CS Employee in EPP-P @Schmitt on slack.

Please add me to Crowdstrike Github Org

My crowdStrike email is - [email protected]
Thx,
Mac.

Request to join CrowdStrike GitHub Organization

Hi,

Following the steps outlined here, I wanted to confirm my identity as a CrowdStrike engineer since I am planning on contributing a script in the near future. My email's [email protected] and my full name is Kim Brown.

Thanks!
-Kim

BOSH-release for Falcon

Is there any plan in the pipeline to create a BOSH-release for Falcon?

Joining CrowdStrike GitHub Org (mrxinu-cs)

Hi there, per the process at https://opensource.crowdstrike.com/open-source-policy/ I'm submitting a request to join the organization. I'm on the internal slack with the same 'mrxinu' username.

Thanks!

Request to join CS org

Scott MacGregor [email protected]

How to execute command like chown

I want to automate some of the checks like find the owners of some file.
How can I do that?

Request to join

Dao Nguyen
[email protected]

Add guide and instructions around git commits and rebasing

Need a guide to talk about handling multiple commits doing the same thing i.e. Update readme.md stylized commits
Also should talk about how to handle rebasing against main, creating a branch and never developing on main, etc.

Request to join org

Hey, I'm Alon Bukai a Senior UI Engineer.
My email is [email protected]

I'd like to join the org please.

Requesting to Join

Per the policy here, I'm submitting this user for access! 👋 My username on the internal Slack is also 'mrxinu'.

Add feature to RTR containment policy

Issue: Containment policies allow for whitelisted network access to IP addresses but not domains.

Crowdstrike is our primary EDR tool, we use it to perform containment operations. One thing we would like to do is update the containment policy. We use some tools that automatically send data to Amazon S3 buckets. S3 buckets do not have IP addresses so we cant add them to our whitelist in the containment policy.

Could we add functionality that would allow the addition of domains to the network whitelist in containment policies.

Request to join organization

Hi there!

I recently joined the company IRL and would love to join the Github org as well.

Name: Adam Vernon
Email: [email protected]

Thank you!

Running services in Linux

How to check running services in Linux machine?
I can see running services for Windows.

Please add me to the Crowdstrike group

My internal email address is d a n i e l <dot> m a r t i n at any of the MX domains we own.

(obvious transformation to cut down a tiny bit on spam)

GPL source unavailable for Falcon Linux kernel module

I cannot find the GPL-licensed source code for the CrowdStrike Falcon Linux kernel module. What is the best method to acquire the source code?

Add Zoë to the org

Hello, I’d like to be added to the org.

Name: Zoë Bijl
Function: Falcon Accessibility Lead
Email: zoe.bijl

Reques to join org - @faisalabdulmalikqureshi

Copying from #47 (comment)

@faisalabdulmalikqureshi requesting access

Requesting to join

Hey, I just found this process through the OS Contributors slack channel! My name is Jorden Kreps, and my username on Slack is @jorden

Create website of projects

We should create a website of projects that are linked from here in addition to contribution guidelines, etc.

Request to be added to this repo

Hi there!

I would like to join this group. Here are the details:

Name: Ryan Hinchey
Email: [email protected]

Thanks,

Ryan