
CrowdStrike - Get Real Time Response Command Status
Details
This atomic belongs to the CrowdStrike atomic group.
Gets the status of a real time response command from CrowdStrike.
Target: CrowdStrike integration target or an HTTP Endpoint for "api.crowdstrike.com"
Account Key: None if using an integration-provided target, access token if using an HTTP Endpoint target
Steps:
[] Set the request URL based on the requested user role
[] Build the authorization header
[] Get the command status
[] Check if the request was successful:
[]> If it was, extract the command details and set the output variables
[]> If it wasn't, return an error
More information about this API can be found in the CrowdStrike documentation.
About
Integration
Authorship
Cisco Managed