Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

WAIT FOR RELEASE -- Add CrowdStrike integration docs #538

Open
wants to merge 8 commits into
base: main
Choose a base branch
from

Conversation

misterpantz
Copy link
Contributor

@misterpantz misterpantz commented Jan 10, 2025

Description

Related issue

Types of changes

  • Functional documentation bug fix (i.e., broken link or some other busted behavior)
  • New functional doc capabilities (i.e., filter search results)
  • New content
  • Revision to existing content
  • Chore (non-breaking change that does not add functionality or fix an issue)

Checklist

  • I have read the README document about contributing to this repo.
  • I have tested my changes locally and there are no issues.
  • All commits are signed.

Copy link
Contributor

Starting creation of the PREview environment...

Copy link
Contributor

PREview environment has been created at https://mondoo-pre-docs-1970752374.storage.googleapis.com/docs/index.html
Please allow a few minutes for the environment to be fully deployed.

This comment has been minimized.

Copy link
Contributor

This comment has been minimized.

Copy link
Contributor

Copy link
Contributor

@misterpantz misterpantz changed the title Add CrowdStrike integration docs WAIT FOR RELEASE -- Add CrowdStrike integration docs Jan 21, 2025
@misterpantz misterpantz marked this pull request as ready for review January 21, 2025 23:57
@charlesjohnson
Copy link
Contributor

While creating an API client in CrowdStrike, the required scopes list as such:

In the Scopes table, check these boxes in the Read column to allow Mondoo to read data:

  • Apps
  • Detections
  • Device content
  • Device control policies
  • Hosts
  • Assets
  • Vulnerabilities

While the other 6 are there, I don't see Assets as an available scope while creating the certificate, and I don't see that other clients have that scope.

@misterpantz
Copy link
Contributor Author

@charlesjohnson I posted a question about this yesterday.
https://mondooteam.slack.com/archives/C07QLL59NN7/p1737501136501779

@misterpantz
Copy link
Contributor Author

Screenshot 2025-01-22 at 3 40 48 PM Here it is when @afiune and I went through the scopes. But I don't see it any more either. Does your integration work just fine without it?

@charlesjohnson
Copy link
Contributor

Yeah, seems to work great.

@misterpantz
Copy link
Contributor Author

Okay, thanks, then I'll remove it!

Copy link
Contributor

@afiune
Copy link

afiune commented Jan 23, 2025

The Asset scope is a must have.

Screenshot 2025-01-23 at 12 29 49 PM

https://falcon.us-2.crowdstrike.com/documentation/page/a9df69ec/asset-management-apis

I don't know where did it go, we might need to reach out to @benr but without it, we can't discover applications installed in the assets.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants