misp-modules
misp-modules copied to clipboard
Extremely new to this - Trying to get Crowdstrike module to work
Hi everyone, as the title shows I'm very new. I am trying to integrate MISP with our Crowdstrike instance. Here are the steps I took so far, but I cannot determine if this is working. -Created an event with google.com and a known SHA256 file hash as attributes -Published the event to my organization only -Input QUERYAPIUSER and QUERYAPIKEY into the module -Turned module on for my ORG only
I am seeing no feedback/sightings for the events, even though I know they should be getting hit on. Am I missing any steps or is there a way for me to verify if the API is correctly running? Thank you.