A collection of Claude Code skills that help security teams stay secure
-
Updated
Apr 27, 2026 - Python
#
crowdstrike-falcon
Here are 31 public repositories matching this topic...
Import CrowdStrike Threat Intelligence into your instance of MISP
python intel threat-hunting misp threatintel threat-intelligence crowdstrike pymisp falconpy crowdstrike-apis crowdstrike-falcon crowdstrike-api falcon-threat-intelligence crowdstrike-threat-intelligence
-
Updated
Mar 20, 2026 - Python
Cloud deployment size calculation utilities
benchmark falcon horizon crowdstrike cloud-auditing cspm cspm-benchmark crowdstrike-horizon crowdstrike-falcon
-
Updated
Jul 30, 2026 - Python
CrowdStrike Falcon Sensor Deployment Doc - Desktop package for Windows with a smooth setup flow and the full pro toolkit included.
endpoint-detection crowdstrike-falcon threat-graph edr-sensor sensor-deploy crowdstrike-setup-failed-fix how-to-install-crowdstrike crowdstrike-windows crowdstrike-desktop-2026 crowdstrike-desktop-package
-
Updated
Sep 9, 2026
Async rust support for the reverse-engineered Crowdstrike Falcon protocol between the Sensor and cloud services
-
Updated
Mar 10, 2023 - Rust
CrowdStrike Falcon Advanced Threat Hunting Queries
threat-hunting cql threatintel threat-analysis threat-intelligence crowdstrike threat-detection logscale detection-engineering crowdstrike-falcon crowdstrike-falcon-sensor threat-detection-response
-
Updated
Aug 19, 2026 - CQL
Open, machine-readable CrowdStrike Falcon sensor events data dictionary (CSV + Markdown) for threat hunting, detection engineering, SIEM onboarding, and AI/LLM ingestion.
security incident-response dfir falcon dataset cybersecurity data-dictionary threat-hunting siem crowdstrike blue-team edr rag detection-engineering crowdstrike-falcon llm
-
Updated
Jun 3, 2026 - Python
This project shows a graphical view of the process executions relationship in a tree format (HTML version)
html process-tree js process execution sysmon carbonblack edr process-explorer sentinelone crowdstrike-falcon
-
Updated
Nov 14, 2023 - HTML
CrowdStrike Powershell module for parsing WFP for Falcon Host Based Firewall
-
Updated
Apr 4, 2026 - PowerShell
A simple python tool to apply tags a host via a regex matches from a json file
-
Updated
Dec 8, 2022 - Python
An Open-source Security Information and Event Management (SIEM) solution blended with UEBA and TI Capabilities
aws splunk azure gcp modbus sentinel cef paloaltonetworks soar iec104 qradar leef plc-controller iec101 crowdstrike-falcon siem-development iec62443 ng-siem security-operation-center rtu-over-tcp
-
Updated
Aug 10, 2026 - Python
Browser extension inventory for Windows endpoints using CrowdStrike Falcon RTR, PowerShell and Python.
python windows api windows-10 python3 falcon devsecops falcon-api crowdstrike windows-11 securtiy crowdstrike-falcon-api crowdstrike-apis crowdstrike-falcon crowdstrike-falconpy crowdstrike-api security-information
-
Updated
Jul 27, 2026 - Python
Execute bulk actions on your hosts using falconpy SDK of Crowdstrike (RTR/RTRA).
-
Updated
Aug 19, 2023 - Python
Get bulk ip against crowstrike falcon prime. Iterate over dataframe. If anything is found append to dataframe. Was given 90%-95% of the code from crowdstrike engineer and their SDK.
-
Updated
Jan 30, 2023 - Python
CrowdStrike Falcon® Contain GUI for more flexible control over the host containment process.
-
Updated
Dec 22, 2023 - PowerShell
Falcon-NextGen-SIEM is a curated collection of resources, tools, and documentation for CrowdStrike Falcon® Next-Gen SIEM. This repository provides deployment guides, detection rules, dashboards, and integration templates to streamline threat detection, log analysis, and security operations.
-
Updated
Sep 8, 2026
A new filter backend for Caracara
python api sdk python3 falconpy crowdstrike-apis crowdstrike-falcon crowdstrike-falconpy falconpy-tools caracara
-
Updated
Aug 18, 2026 - Python
Automatically retrieve latest IoC from [bazaar, threatfox].abuse.ch and get them into your Falcon instance
-
Updated
Nov 1, 2024 - Python
Add this topic to your repo
To associate your repository with the crowdstrike-falcon topic, visit your repo's landing page and select "manage topics."