Documentation
¶
Overview ¶
Package crowdstrike implements an EDR provider backed by CrowdStrike Falcon.
Index ¶
- func New(configJSON json.RawMessage) (edrpkg.Provider, error)
- type Client
- func (c *Client) Capabilities() edrpkg.Capabilities
- func (c *Client) ListManagedEndpoints(ctx context.Context) ([]edrpkg.ManagedEndpoint, error)
- func (c *Client) LookupBySerial(ctx context.Context, serial string) (edrpkg.ManagedEndpoint, error)
- func (c *Client) LookupForHost(ctx context.Context, h schema.Host) (edrpkg.ManagedEndpoint, string, error)
- func (c *Client) Name() string
- func (c *Client) Verify(ctx context.Context) error
Constants ¶
This section is empty.
Variables ¶
This section is empty.
Functions ¶
Types ¶
type Client ¶
type Client struct {
// contains filtered or unexported fields
}
func (*Client) Capabilities ¶
func (c *Client) Capabilities() edrpkg.Capabilities
func (*Client) ListManagedEndpoints ¶
func (*Client) LookupBySerial ¶
LookupBySerial resolves a Falcon host by serial_number using the devices query filter API instead of listing the full fleet.
Source Files
Click to show internal directories.
Click to hide internal directories.