---
title: "CrowdStrike Identity Based Alerts"
slug: "crowdstrike-identity-based-alerts"
updated: 2026-04-24T20:33:45Z
published: 2026-04-24T20:33:45Z
canonical: "docs.hunters.ai/crowdstrike-identity-based-alerts"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://docs.hunters.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# CrowdStrike Identity Based Alerts

#### Overview

**Table name:** `crowdstrike_idp`

CrowdStrike's identity-based alerts are part of its advanced threat detection capabilities, focusing on identifying security threats that specifically target or involve user identities and credentials. These alerts play a critical role in an organization's security posture by helping to prevent unauthorized access, insider threats, and identity-related attacks. With the increasing sophistication of cyber threats, particularly those involving credential theft, social engineering, and lateral movement within networks, identity-based security solutions have become essential.

#### Send data to Hunters

⚠️ **Attention**

The process below requires you to select the **CrowdStrike API** tile (and not CrowdStrike).

![image.png](https://cdn.document360.io/5f63f0e0-3c70-4d00-b623-82493be0bde5/Images/Documentation/image%28139%29.png?sv=2026-02-06&spr=https&st=2026-11-15T20%3A24%3A30Z&se=2026-11-15T21%3A24%3A30Z&sr=c&sp=r&sig=wn3wBn3FeXnwJyeHvPb5IMLvuEYAySoYNk%2FdTkZDF70%3D)

**Step 1: Create an API client**

Create a CrowdStrike API client with the **Alerts: Read** scope and permissions (as specified [here](https://falcon.crowdstrike.com/documentation/page/a2a7fc0e/crowdstrike-oauth2-based-apis#xcdef629)).

**Step 2: Create a data source on Hunters**

Complete the process on the Hunters platform, and supply the following keys following [this process](https://docs.hunters.ai/docs/connect-a-data-source-using-apiwebhook):

- Client ID
- Client Secret
- Cloud Endpoint - This should only contain the domain name, **without the `https://` prefix**. For example: `api.crowdstrike.com`.