A script that automates the process of polling IOCs from a STIX/TAXII server and ingesting them into CrowdStrike Falcon using the Falcon Intelligence API. It supports transforming domain names, IP addresses, and file hashes from STIX format into CrowdStrike-compatible IOCs for threat detection and response.
ioc stix taxii crowdstrike crowdstrike-falcon-api crowdstrike-api ioc-feed crowdstrike-ioc taxii-to-crowdstrike
-
Updated
Jun 26, 2026 - Python