Skip to main content

get/download any file form the host from which alert is generated.

  • June 2, 2023
  • 1 reply
  • 3 views

Forum|alt.badge.img+4

Hi,

Wanted to download a file from host where an alert is generated through playbook/block and store on wall.

CS integration i guess it get files only from the path in alert and not any file.



1 reply

mikemeeks
Staff
Forum|alt.badge.img+4
  • Staff
  • June 3, 2024

CrowdStrike integration prioritizes precision and efficiency. It specifically retrieves the files identified in security alerts, based on their exact path. This targeted approach ensures that only the most relevant evidence is collected.