Any IDR and Crowdstrike users out there using the Falcon Data Replicator to get your falcon data into IDR? I have a quote for it but don’t want to pull the trigger on it until I know it can work. Also has anyone found a way to ingest Crowdstrike threat intel into IDR to alert on the IOCs from Crowdstrike intelligence?
1 Like