CrowdStrike SearchReports
CertifiedEnterprise EditionSearch CrowdStrike Falcon threat intelligence reports
CrowdStrike SearchReports
Search CrowdStrike Falcon threat intelligence reports
Searches intelligence reports with the CrowdStrike Falcon Query Language (FQL). Omitting filter matches every report visible to the API client.
type: io.kestra.plugin.ee.crowdstrike.intel.SearchReportsExamples
List the latest tipper reports
id: search_reports
namespace: company.team
tasks:
- id: search_reports
type: io.kestra.plugin.ee.crowdstrike.intel.SearchReports
clientId: "{{ secret('CROWDSTRIKE_CLIENT_ID') }}"
clientSecret: "{{ secret('CROWDSTRIKE_CLIENT_SECRET') }}"
filter: "type:'tipper'"
sort: "created_date.desc"
limit: 20
Properties
clientId *Requiredstring
API client ID
Client ID of a CrowdStrike API client with the scopes required by the tasks and triggers being used.
clientSecret *Requiredstring
API client secret
Client secret of the CrowdStrike API client. Exchanged for a short-lived OAuth2 Bearer token on every task run and trigger poll; never logged.
baseUrl string
https://api.crowdstrike.comCrowdStrike API base URL
Base URL of the CrowdStrike Falcon API for your cloud region (for example: https://api.crowdstrike.com for US-1, https://api.us-2.crowdstrike.com for US-2, https://api.eu-1.crowdstrike.com for EU-1, or https://api.laggar.gcw.crowdstrike.com for US-GOV-1). Defaults to the US-1 endpoint. Using the wrong region for your tenant results in 403 Forbidden responses.
filter string
FQL filter
CrowdStrike Falcon Query Language expression (for example: type: 'tipper'). Matches every report when omitted.
limit integerstring
50Page size
Maximum number of reports to return, from 1 to 5000. Defaults to 50.
offset integerstring
0Offset
Number of matching reports to skip, for pagination. Defaults to 0.
sort string
Sort order
Sort field and direction (for example: created_date.desc).
Outputs
reports array
Matching intelligence reports
io.kestra.plugin.ee.crowdstrike.intel.ReportRecord
Unix epoch timestamp (in seconds) this report was created.
Report ID, used to fetch its PDF with GetReportPDF.
Report name.
Short description of the report.
URL-safe report slug.
Countries this report covers.
io.kestra.plugin.ee.crowdstrike.intel.ActorRecord-TaxonomyItem
Numeric taxonomy ID.
URL-safe slug.
Human-readable value (for example a country or industry name).
Industries this report covers.
io.kestra.plugin.ee.crowdstrike.intel.ActorRecord-TaxonomyItem
Numeric taxonomy ID.
URL-safe slug.
Human-readable value (for example a country or industry name).
Report type (for example notice, periodic, tipper).
io.kestra.plugin.ee.crowdstrike.intel.ReportRecord-ReportType
Numeric report type ID.
Human-readable report type name (for example notice, periodic, tipper).
URL-safe slug.
total integer
Total number of reports matching the filter, without pagination
