CrowdStrike Falcon Endpoint Protection Platform

Overview

CrowdStrike Falcon is one of the leading solutions in the Endpoint Protection Platform (EPP) market.

Instructions for connecting Query to CrowdStrike data for three common patterns are included in this section:

• CrowdStrike Falcon Endpoint Protection API
• CrowdStrike data stored in Amazon S3 using Falcon Data Replicator (FDR)
• CrowdStrike data stored in Amazon S3