This workflow template, "Initial CrowdStrike Case Creation," automates the response to cybersecurity alerts by seamlessly integrating CrowdStrike and Torq. It initiates when it receives an alert from CrowdStrike and proceeds to create a structured case in Torq. The template maps alert fields to a predefined case layout, ensuring all relevant information is captured and organized for efficient case management and incident response. This process is enhanced by a nested workflow, which facilitates the field mapping necessary for customized case creation, aligning with best practices in case management.
Trigger
CrowdStrike
Use Cases
Case Management
Workflow Breakdown
Receives an alert event on a CrowdStrike Trigger.
Map alert fields to a predefined case layout.
Creates a new case for the alert with a predefined layout.
Vendors
Utils, CrowdStrike, Torq Cases
Tips