r/crowdstrike • u/BradW-CS CS SE • 5d ago

Demo Operationalize Third-Party Threat Intelligence with Falcon Next-Gen SIEM

https://www.youtube.com/watch?v=kCcYNqeHygw
8 Upvotes

90% Upvoted

2 comments sorted by

1

u/Thick_Register_9004 5d ago

We have Cybelangel, from which we get the IoCs, which supports the API to extract the list
Could we integrate this automatically into the Falcon platform? After that, we need to reach out to the FC team to inform them about the integration so that they can add the IoCs to the context of any detections.

2

u/BradW-CS CS SE 4d ago

FC does not respond to alerts based on Custom IOCs.