dcoobs/crowdstrike

CrowdStrike Falcon module for munkireport.

Maintainers

Details

github.com/dcoobs/crowdstrike

Source

Issues

Installs: 621

Dependents: 0

Suggesters: 0

Security: 0

Stars: 1

Watchers: 1

Forks: 3

Open Issues: 1

pkg:composer/dcoobs/crowdstrike

v4.1 2024-02-28 18:55 UTC

MIT 10494b7f29d505496d312ba85abc1c93cf6f67d6

This package is auto-updated.

Last update: 2025-11-28 22:31:08 UTC

README

This module gives info on the CrowdStrike Falcon sensor for a given machine. The data comes from the /Applications/Falcon.app/Contents/Resources/falconctl stats command.

Version 3.0 is required for CrowdStrike sensor versions 6.11 and greater. Use version 2.3 for older sensor versions.

CrowdStrike Listing
Included are widgets for sensor versions:
Sensor Versions Widget
and for uninstall protection:
Uninstall Protection Widget

Table Schema

  • sensor_id - VARCHAR(255) - Unique host ID of the client's sensor
  • sensor_version - VARCHAR(255) - Version of the client's sensor
  • customer_id - VARCHAR(255) - The customer ID checksum (CCID) for the sensor's instance
  • sensor_operational - INT(11) - Boolean value for the sensor operational status. 1=Enabled 0=Disabled
  • sensor_installguard - INT(11) - Boolean value for the sensor's uninstall protection policy. 1=Enabled 0=Disabled