Infrastructure as code for CrowdStrike — manage detections, saved searches, lookup files, and more with a Terraform-like lifecycle.
-
Updated
Sep 1, 2026 - Python
#
ngsiem
Here are 5 public repositories matching this topic...
A Model Context Protocol (MCP) server that provides programmatic access to CrowdStrike NGSIEM search capabilities. This server enables MCP-compatible applications to execute security event searches through a standardized interface.
-
Updated
Dec 30, 2025 - Python
CrowdStrike CQL threat-hunting packs — one self-contained playbook per threat (MITRE ATT&CK, IOCs, triage, hardening)
-
Updated
Sep 11, 2026 - HTML
Backup Crowdstrike NGSIEM correlation rules, lookups, custom parsers /AND Falcon Fusion SOAR workflows to dated folders on disk using the FalconPy.
python backup python3 siem security-automation soar crowdstrike correlation-rules crowdstrike-falcon-api falconpy crowdstrike-apis crowdstrike-falcon crowdstrike-falconpy ngsiem crowdstrike-ngsiem fusioin-soar fusion-workflows
-
Updated
Aug 11, 2026 - Python
Add this topic to your repo
To associate your repository with the ngsiem topic, visit your repo's landing page and select "manage topics."