Alert Event ASIM parser for CrowdStrike Falcon
Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊
Parser Information
| Property | Value |
|---|---|
| Parser Name | ASimAlertEventCrowdStrikeFalcon |
| Built-in Parser | _ASim_AlertEvent_CrowdStrikeFalcon |
| Schema | AlertEvent |
| Schema Version | 0.1 |
| Parser Type | 🔌 Source (product-specific) |
| Product | CrowdStrike Falcon |
| Parser Version | 0.1.0 (version history) |
| Last Updated | Jun 16, 2026 |
| Unifying Parser | ASimAlertEvent |
| Source File | Parsers\ASimAlertEvent\Parsers\ASimAlertEventCrowdStrikeFalcon.yaml |
Description
This ASIM parser supports normalizing the CrowdStrike API logs (via Codeless Connector Framework) to the ASIM Alert normalized schema.
Source Tables
This parser reads from the following tables:
| Table | Transformations | Ingestion API | Lake-Only |
|---|---|---|---|
CrowdStrikeDetections |
✓ | ✓ | ? |
Parameters
| Name | Type | Default |
|---|---|---|
disabled |
bool | False |
pack |
bool | False |
Associated Connectors
The following connectors provide data for this parser:
| Connector | Solution |
|---|---|
| CrowdStrikeAPIConnector | CrowdStrike Falcon Endpoint Protection |
Solutions: CrowdStrike Falcon Endpoint Protection
References
Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊