Crowdstrike Falcon

Surface Command
1

When I try to run the import feed for CrowdStrike falcon incidents. But prompt “Failed”.

But encounter the below error :

[3:33:24 pm] Calling 'get_incidents'

[3:33:26 pm] Function get_incidents failed: [{'message': 'No content was received for this request.'}]

Workflow execution ended with message "While executing function get_incidents, an error was encountered: [{'message': 'No content was received for this request.'}]".

2

Crowdstrike has removed the Incidents API, so this functionality is no longer available.

1 Like
3

Hmm, thanks for this info since I looking the setup documentation I thought only the detection api was removed

4

You would need to check the release notes from Crowdstrike. They send out continual updates on their changes and sometimes it hard to keep up with.

5

Thanks for your help. Now I am trying to do research about this