In order to share raw events with Hunters, you must be licensed for Falcon Insights in Crowdstrike.
Supported data types
Sending data to Hunters
As a Crowdstrike customer, the easiest way to get your data into Hunters is through the Falcon Store.
Follow these steps below:
Login to Crowdstrike Falcon portal
In the menu (on the left) click Crowdstrike Store -> All Apps
Click the ‘TRY IT FREE’ button
Your Crowdstike API token is now shared with Hunters with the following permissions:
Crowdstrike Falcon raw data replicator
Crowdstrike Detections API
Email will automatically be generated from Hunters confirming your interest. (Note: This is designed for new prospects who have not yet been introduced to Hunters, please disregard the request to schedule a demo.)
Hunters to provision customer Account for Hunters.AI portal. Leveraging CrowdStrike API Token.