Impelix IMPACT Integration
with CrowdStrike Falcon
The Impelix IMPACT platform ingests telemetry from your all your security products as well as third-party feeds (threat intelligence, cybersecurity risk, business resilience intelligence, etc.) and delivers event correlation, security control efficacy, and compliance monitoring.
We believe that the more data ingested into IMPACT, the more context you will have regarding security incidents, which will allow effective and efficient incident response and compliance management. Therefore, we encourage and facilitate connecting vendor products telemetry with Impelix IMPACT platform.
CrowdStrike Falcon
CrowdStrike Configuration
- Navigate to Support > API Clients and Keys
- Click “Add new API Client”
- Name the new client, select read-only for all scopes and click Add.
- Copy the Client ID and Client Secret
Impelix IMPACT Configuration
- Go to Admin > SOAR > CrowdStrike API > Config
- Click the checkbox for Enable the CrowdStrike Integration
- Paste the Client ID and Client Secret
- Click the disk icon (Save)
- Click Jobs and go to Artifacts from CrowdStrike
- Select Triggers, expanding Manual Trigger and Interval Trigger
- Toggle both to State: ENABLED
- The Interval Trigger is set to 2 hours by default, but you can update it to what best suits your organization. (Recommended: 10 minutes)
- Click the disk icon (Save)
