Skip to content

D4C Registration

Joshua Hiller edited this page Apr 17, 2021 · 23 revisions

CrowdStrike Falcon Twitter URL

Using the D4C Registration service collection

Uber class support Uber class support

Table of Contents

API Function Description
GetCSPMAzureAccount Return information about Azure account registration
CreateCSPMAzureAccount Creates a new account in our system for a customer and generates a script for them to run in their cloud environment to grant us access.
UpdateCSPMAzureAccountClientID Update an Azure service account in our system by with the user-created client_id created with the public key we've provided
GetCSPMAzureUserScriptsAttachment Return a script for customer to run in their cloud environment to grant us access to their Azure environment as a downloadable attachment
GetCSPMAzureUserScripts Return a script for customer to run in their cloud environment to grant us access to their Azure environment
GetCSPMCGPAccount Returns information about the current status of an GCP account.
CreateCSPMGCPAccount Creates a new account in our system for a customer and generates a new service account for them to add access to in their GCP environment to grant us access.
GetCSPMGCPUserScriptsAttachment Return a script for customer to run in their cloud environment to grant us access to their GCP environment as a downloadable attachment
GetCSPMGCPUserScripts Return a script for customer to run in their cloud environment to grant us access to their GCP environment

GetCSPMAzureAccount

Return information about Azure account registration

Content-Type

  • Consumes: application/json
  • Produces: application/json

Parameters

Required Name Type Datatype Description
ids query array (string) SubscriptionIDs of accounts to select for this status operation. If this is empty then all accounts are returned.
scan-type query string Type of scan, dry or full, to perform on selected accounts

Usage

Uber class example
from falconpy import api_complete as FalconSDK

falcon = FalconSDK.APIHarness(creds={
      'client_id': falcon_client_id,
      'client_secret': falcon_client_secret
   }
)

PARAMS = {
    'scan-type': 'string'
}

IDS = 'ID1,ID2,ID3'

response = falcon.command('GetCSPMAzureAccount', parameters=PARAMS, ids=IDS)
print(response)
falcon.deauthenticate()

CreateCSPMAzureAccount

Creates a new account in our system for a customer and generates a script for them to run in their cloud environment to grant us access.

Content-Type

  • Consumes: application/json
  • Produces: application/json

Parameters

Required Name Type Datatype Description
body body string

Usage

Uber class example
from falconpy import api_complete as FalconSDK

falcon = FalconSDK.APIHarness(creds={
      'client_id': falcon_client_id,
      'client_secret': falcon_client_secret
   }
)

BODY = {
    'Body Payload': 'See body description above'
}

response = falcon.command('CreateCSPMAzureAccount', body=BODY)
print(response)
falcon.deauthenticate()

UpdateCSPMAzureAccountClientID

Update an Azure service account in our system by with the user-created client_id created with the public key we've provided

Content-Type

  • Consumes: application/json
  • Produces: application/json

Parameters

Required Name Type Datatype Description
id query string ClientID to use for the Service Principal associated with the customer's Azure account

Usage

Uber class example
from falconpy import api_complete as FalconSDK

falcon = FalconSDK.APIHarness(creds={
      'client_id': falcon_client_id,
      'client_secret': falcon_client_secret
   }
)

PARAMS = {
    'id': 'string'
}

response = falcon.command('UpdateCSPMAzureAccountClientID', parameters=PARAMS)
print(response)
falcon.deauthenticate()

GetCSPMAzureUserScriptsAttachment

Return a script for customer to run in their cloud environment to grant us access to their Azure environment as a downloadable attachment

Content-Type

  • Produces: application/json

Parameters

No parameters

Usage

Uber class example
from falconpy import api_complete as FalconSDK

falcon = FalconSDK.APIHarness(creds={
      'client_id': falcon_client_id,
      'client_secret': falcon_client_secret
   }
)

response = falcon.command('GetCSPMAzureUserScriptsAttachment')
print(response)
falcon.deauthenticate()

GetCSPMAzureUserScripts

Return a script for customer to run in their cloud environment to grant us access to their Azure environment

Content-Type

  • Consumes: application/json
  • Produces: application/json

Parameters

No parameters

Usage

Uber class example
from falconpy import api_complete as FalconSDK

falcon = FalconSDK.APIHarness(creds={
      'client_id': falcon_client_id,
      'client_secret': falcon_client_secret
   }
)

response = falcon.command('GetCSPMAzureUserScripts')
print(response)
falcon.deauthenticate()

GetCSPMCGPAccount

Returns information about the current status of an GCP account.

Content-Type

  • Consumes: application/json
  • Produces: application/json

Parameters

Required Name Type Datatype Description
scan-type query string Type of scan, dry or full, to perform on selected accounts
ids query array (string) Parent IDs of accounts

Usage

Uber class example
from falconpy import api_complete as FalconSDK

falcon = FalconSDK.APIHarness(creds={
      'client_id': falcon_client_id,
      'client_secret': falcon_client_secret
   }
)

PARAMS = {
    'scan-type': 'string'
}

IDS = 'ID1,ID2,ID3'

response = falcon.command('GetCSPMCGPAccount', parameters=PARAMS, ids=IDS)
print(response)
falcon.deauthenticate()

CreateCSPMGCPAccount

Creates a new account in our system for a customer and generates a new service account for them to add access to in their GCP environment to grant us access.

Content-Type

  • Consumes: application/json
  • Produces: application/json

Parameters

Required Name Type Datatype Description
body body string

Usage

Uber class example
from falconpy import api_complete as FalconSDK

falcon = FalconSDK.APIHarness(creds={
      'client_id': falcon_client_id,
      'client_secret': falcon_client_secret
   }
)

BODY = {
    'Body Payload': 'See body description above'
}

response = falcon.command('CreateCSPMGCPAccount', body=BODY)
print(response)
falcon.deauthenticate()

GetCSPMGCPUserScriptsAttachment

Return a script for customer to run in their cloud environment to grant us access to their GCP environment as a downloadable attachment

Content-Type

  • Produces: application/json

Parameters

No parameters

Usage

Uber class example
from falconpy import api_complete as FalconSDK

falcon = FalconSDK.APIHarness(creds={
      'client_id': falcon_client_id,
      'client_secret': falcon_client_secret
   }
)

response = falcon.command('GetCSPMGCPUserScriptsAttachment')
print(response)
falcon.deauthenticate()

GetCSPMGCPUserScripts

Return a script for customer to run in their cloud environment to grant us access to their GCP environment

Content-Type

  • Consumes: application/json
  • Produces: application/json

Parameters

No parameters

Usage

Uber class example
from falconpy import api_complete as FalconSDK

falcon = FalconSDK.APIHarness(creds={
      'client_id': falcon_client_id,
      'client_secret': falcon_client_secret
   }
)

response = falcon.command('GetCSPMGCPUserScripts')
print(response)
falcon.deauthenticate()

CrowdStrike Falcon

Clone this wiki locally