misp-modules icon indicating copy to clipboard operation
misp-modules copied to clipboard

Extremely new to this - Trying to get Crowdstrike module to work

Open MySickSi opened this issue 5 years ago • 0 comments

Hi everyone, as the title shows I'm very new. I am trying to integrate MISP with our Crowdstrike instance. Here are the steps I took so far, but I cannot determine if this is working. -Created an event with google.com and a known SHA256 file hash as attributes -Published the event to my organization only -Input QUERYAPIUSER and QUERYAPIKEY into the module -Turned module on for my ORG only

I am seeing no feedback/sightings for the events, even though I know they should be getting hit on. Am I missing any steps or is there a way for me to verify if the API is correctly running? Thank you.

MySickSi avatar Jun 11 '20 14:06 MySickSi