Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
33 changes: 20 additions & 13 deletions README.md
Original file line number Diff line number Diff line change
Expand Up @@ -257,34 +257,41 @@ The server provides core tools for interacting with the Falcon API:

Provides tools for accessing and analyzing CrowdStrike Falcon detections:

- `falcon_search_detections`: Query and return information about detections
- `falcon_get_detection_details`: Get information about specific detection composite IDs
- `falcon_search_detections`: Search for detections in your CrowdStrike environment
- `falcon_search_detections_fql_filter_guide`: Get comprehensive FQL documentation for the search_detections tool
- `falcon_get_detection_details`: Retrieve detailed information for specified detection IDs

### Incidents Module

Provides tools for accessing and analyzing CrowdStrike Falcon incidents:

- `falcon_show_crowd_score`: Show CrowdScore in the environment
- `falcon_search_incidents`: Query for incidents
- `falcon_get_incident_details`: Get incidents by ID
- `falcon_search_behaviors`: Query for behaviors
- `falcon_get_behavior_details`: Get behaviors by ID
- `falcon_show_crowd_score`: Query environment wide CrowdScore and return the entity data
- `falcon_show_crowd_score_fql_filter_guide`: Get comprehensive FQL documentation for the show_crowd_score tool
- `falcon_search_incidents`: Search for incidents by providing a FQL filter, sorting, and paging details
- `falcon_search_incidents_fql_filter_guide`: Get comprehensive FQL documentation for the search_incidents tool
- `falcon_get_incident_details`: Retrieve detailed information for specified incident IDs
- `falcon_search_behaviors`: Search for behaviors by providing a FQL filter, sorting, and paging details
- `falcon_search_behaviors_fql_filter_guide`: Get comprehensive FQL documentation for the search_behaviors tool
- `falcon_get_behavior_details`: Retrieve detailed information for specified behavior IDs

### Intel Module

Provides tools for accessing and analyzing CrowdStrike Intel:

- `falcon_search_actors`: Get info about actors
- `falcon_search_actors_fql_filter_guide`: Get FQL rules for falcon_search_actors tool filter param
- `falcon_search_indicators`: Get info about indicators
- `falcon_search_reports`: Get info about reports
- `falcon_search_actors`: Get info about actors that match provided FQL filters
- `falcon_search_actors_fql_filter_guide`: Get comprehensive FQL documentation for the search_actors tool
- `falcon_search_indicators`: Get info about indicators that match provided FQL filters
- `falcon_search_indicators_fql_filter_guide`: Get comprehensive FQL documentation for the search_indicators tool
- `falcon_search_reports`: Retrieve intelligence reports that match provided FQL filters
- `falcon_search_reports_fql_filter_guide`: Get comprehensive FQL documentation for the search_reports tool

### Hosts Module

Provides tools for accessing and managing CrowdStrike Falcon hosts/devices:

- `falcon_search_hosts`: Query and return information about hosts
- `falcon_get_host_details`: Get information about specific host IDs
- `falcon_search_hosts`: Search for hosts in your CrowdStrike environment
- `falcon_search_hosts_fql_filter_guide`: Get comprehensive FQL documentation for the search_hosts tool
- `falcon_get_host_details`: Retrieve detailed information for specified host device IDs

## MCP Configuration

Expand Down
Loading
Loading