How to integrate Crowdstrike with Splunk?

Getting Data In

I am looking for an add-on/API which can help to onboard all crowdstike related information to splunk.

I see that there is "CrowdStrike Falcon Devices Technical Add-On" available, it retrieves detailed data that the CrowdStrike Falcon sensor has collected about the device.

It does not collect the list of software installed on those devices.

For example,

We have 5000+ windows servers, and I want to check if XYZ software is installed or not !

Is there a way to collected installed software related info into splunk ?

Many thanks in advance!

Get Updates on the Splunk Community!

How much can you really learn in 3 minutes?

Observability can certainly be hard to understand – there's a lot of jargon and buzzwords and it seems to ...

Event Series: The Agentic SOC: Trust Before Autonomy

AI is fundamentally changing security operations, but true progress requires more than just automation—it ...

Free Professional Services for .conf26 Attendees

This year at .conf26, we are doing something a little different. We are bringing the best minds from ...