Get Indicator Details

Get detailed info about specific indicators. The Indicators ID can be obtained via the List Indicators action.

External Documentation

To learn more, visit the CrowdStrike documentation.

Parameters

Parameter	Description
ID	The IOC ID to get details on.

Example Output

{
    "errors": [
        {
            "code": 0,
            "id": "string",
            "message": "string"
        }
    ],
    "meta": {
        "pagination": {
            "after": "string",
            "limit": 0,
            "offset": 0,
            "total": 0
        },
        "powered_by": "string",
        "query_time": 0,
        "trace_id": "string"
    },
    "resources": [
        {
            "action": "string",
            "applied_globally": false,
            "created_by": "string",
            "created_on": "date-time",
            "deleted": false,
            "description": "string",
            "expiration": "date-time",
            "expired": false,
            "from_parent": false,
            "host_groups": [
                "string"
            ],
            "id": "string",
            "metadata": {
                "av_hits": 0,
                "company_name": "string",
                "file_description": "string",
                "file_version": "string",
                "filename": "string",
                "original_filename": "string",
                "product_name": "string",
                "product_version": "string",
                "signed": false
            },
            "mobile_action": "string",
            "modified_by": "string",
            "modified_on": "date-time",
            "parent_cid_name": "string",
            "platforms": [
                "string"
            ],
            "severity": "string",
            "source": "string",
            "tags": [
                "string"
            ],
            "type": "string",
            "value": "string"
        }
    ]
}

Workflow Library Example

Get Indicator Details with Crowdstrike and Send Results Via Email

Preview this Workflow on desktop