About the CrowdStrike Falcon® Next-Gen SIEM Integration
CrowdStrike Falcon® Next-Gen SIEM is CrowdStrike’s AI-native security information and event management platform, built to ingest, correlate, and analyze security data at enterprise scale with built-in threat intelligence and automated detection capabilities. Part of Synqly’s SIEM Unified API, the Falcon Next-Gen SIEM integration enables security teams to route normalized security event data from their connected tools into CrowdStrike’s analytics engine through a standardized connector. Integrate with CrowdStrike Falcon Next-Gen SIEM to centralize security telemetry from across your stack into the Falcon platform for unified detection, investigation, and response.
Integration Use Cases
Get Alert
Retrieves an alert by ID.
Post Events
Writes a batch of `Event` objects to the SIEM configured with the token used for authentication.
Query Alerts
Queries alerts from the SIEM configured with the token used for authentication.
Query Events
Queries events from the SIEM configured with the token used for authentication.
Query Log Providers
Queries available log providers in the source SIEM
