Tables in CrowdStrike
The crowdstrike plugin includes 31 queries:
Name | Description | Queries |
|---|---|---|
crowdstrike_aid_master | CrowdStrike FDR AIDMaster snapshots: sensor, operating system and hardware metadata for every Falcon agent. | |
crowdstrike_app_info | CrowdStrike FDR AppInfo snapshots: the application inventory Falcon observes on each host. | |
crowdstrike_fdr_event | CrowdStrike FDR primary events: sensor telemetry and external-API events delivered by Falcon Data Replicator. | |
crowdstrike_managed_asset | CrowdStrike FDR ManagedAssets snapshots: network interface and gateway info for each Falcon-managed host. | |
crowdstrike_user_info | CrowdStrike FDR UserInfo snapshots: the accounts Falcon observes signing in on each host. |