Reminder: Crowdstrike Alerts API and Security Validation

Greetings all,

Mandiant Security Validation customers are reminded that the Crowdstrike Detects API was replaced by the Crowdstrike Alerts API in October 2025.  If, upon running actions in MSV, you are not receiving the same events as you would expect, please check your MSV Integration Settings.  

Customers using the Crowdstrike integration in the Security Validation platform should be using the “Raptor Release” Version of the integration.  (Settings → Integrations → Three Dots next to Crowdstrike → Edit and see “Raptor Release” at the top of the page)  If your system shows “V1”, you will need to upgrade.  The new version of the integration requires different permissions than the previous integration.  For more information, please see our documentation at: https://docs.mandiant.com/home/msv-crowdstrike-integration-with-security-validation .