The "QuickAction - Get Device Details using CrowdStrike" workflow template streamlines the process of retrieving detailed information about a device within the CrowdStrike platform. By querying a device's hostname, this workflow checks for its existence, retrieves its ID, and gathers comprehensive device details. This information is then formatted and added as a note to a case, enhancing incident response and endpoint detection capabilities. Ideal for security teams, this workflow simplifies device management and enriches case documentation.
Use Cases
Endpoint Detection and Response (EDR) , Function
Workflow Breakdown
The user is queried for an endpoint host name
Check whether a device by that name exists and if so return the device ID
Get the device details by ID
Add a formatted note to the case
Vendors
Utils, CrowdStrike, Torq Cases