crowdstrike-falcon-fusion Codex Plugin
Codex PluginCodexDeveloper ToolsSecurity, Auth & ComplianceEnterprise Business PlatformsMonitoring & ObservabilityThe explanation below is AI-generated. Please verify it against the sources.
This plugin provides a set of skills for building and operating CrowdStrike Falcon Fusion automation workflows through an AI coding assistant. It supports identifying actions currently available from the live CrowdStrike API, writing workflow definitions in YAML with validation against the platform schema, and importing and releasing those definitions to a customer instance (CID). It also lets a user trigger workflow executions and monitor their status, and manage lookup files used by Falcon Next-Gen SIEM queries. The plugin is published by CrowdStrike as version 1.1.0 under the MIT license.
About the service
CrowdStrike Falcon Fusion is a workflow automation capability inside CrowdStrike's Falcon cybersecurity platform, associated with Falcon Next-Gen SIEM, used to build and run security operations playbooks. This plugin communicates with the Falcon API using client credentials to look up available actions and to import, release, trigger, and monitor workflows within a customer's CrowdStrike tenant.
What you can do with crowdstrike-falcon-fusion
- Look up action types currently available from the live CrowdStrike Falcon API
- Write and validate Fusion workflow YAML against the platform schema
- Import and release workflow definitions to a CrowdStrike CID
- Trigger workflow executions and monitor their run status
- Manage Falcon Next-Gen SIEM lookup files used in queries
- Get pointed to a companion Foundry plugin when a request needs a full app rather than a standalone workflow
Sources
History of crowdstrike-falcon-fusion
- Codex Plugin Added crowdstrike-falcon-fusion