Infrastructure as code for CrowdStrike — manage detections, saved searches, lookup files, and more with a Terraform-like lifecycle.
-
Updated
Jun 29, 2026 - Python
#
ngsiem
Here are 5 public repositories matching this topic...
A Model Context Protocol (MCP) server that provides programmatic access to CrowdStrike NGSIEM search capabilities. This server enables MCP-compatible applications to execute security event searches through a standardized interface.
-
Updated
Dec 30, 2025 - Python
CrowdStrike CQL threat-hunting packs — one self-contained playbook per threat (MITRE ATT&CK, IOCs, triage, hardening)
-
Updated
Jul 17, 2026 - HTML
Backup Crowdstrike NGSIEM correlation rules, lookups, custom parsers /AND Falcon Fusion SOAR workflows to dated folders on disk using the FalconPy.
python backup python3 siem security-automation soar crowdstrike correlation-rules crowdstrike-falcon-api falconpy crowdstrike-apis crowdstrike-falcon crowdstrike-falconpy ngsiem crowdstrike-ngsiem fusioin-soar fusion-workflows
-
Updated
May 19, 2026 - Python
Improve this page
Add a description, image, and links to the ngsiem topic page so that developers can more easily learn about it.
Add this topic to your repo
To associate your repository with the ngsiem topic, visit your repo's landing page and select "manage topics."