CrowdStrikeFalconEventStream

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊

↑ Back to Parsers Index

---

Parser Information

Attribute	Value
Title	Parser for CrowdStrikeFalconEventStream
Location	Solution
Solution	CrowdStrike Falcon Endpoint Protection
Version	1.0.0
Last Updated	2023-08-23
Category	Microsoft Sentinel Parser
File Type	.yaml
Source	View on GitHub

Source Tables

This parser reads from the following tables:

Table	Selection Criteria	Transformations	Ingestion API	Lake-Only
CommonSecurityLog	DeviceProduct == "FalconHost" DeviceVendor == "CrowdStrike"	✓	✓	?

---

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊

↑ Back to Parsers Index