CrowdStrike ThreatGraph

By CrowdStrike Inc.

Interact with CrowdStrike Falcon data and investigate relationships between events.

Endpoint & Security Events Malware Threat Hunting Threat Intelligence

Introduction
Resources
Contact

CrowdStrike ThreatGraph Transforms for Maltego

CrowdStrike provides a suite of five APIs to enable customers of the CrowdStrike Falcon platform to enhance their triage workflow and leverage their existing security investments.

The Falcon Threat Graph API is one of the five API’s offered by Crowdstrike that leverages CrowdStrike’s multi-petabyte graph database to reveal the underlying relationships between indicators of compromise (IOCs), devices, processes, and other forensic data and events, such as files written, module loads, or network connections.

With ThreatGraph Transforms, investigators can query the CrowdStrike ThreatGraph API to interact with CrowdStrike Falcon data and traverse the graph to investigate relationships between events.

Typical Users of This Data

Threat Intelligence Teams
Pen Testers

Resources

Others

Operational Threat Intelligence with Maltego Transform Hub

Contact

Reach out to us to learn more about this data integration and how to access it.

First Name*

Last Name*

COMPANY EMAIL*

Country*

Organization Name *

Organization size *

Business role *

Industry type *

Are you an active Maltego user? *

Reason for contacting *

Focus of Your Business Unit *

Main Use Cases *

Message *

Please provide us details on the Transforms you are interested in.

By clicking on "Send Message", you agree to the processing of the data you entered and you allow us to contact you for the purpose selected in the form. For further information, see our Data Privacy Policy.

I would like to receive updates about Maltego product updates, news, events and offers.

About CrowdStrike

CrowdStrike offers endpoint protection and threat intelligence solutions that enables customers to prevent damage from targeted attacks, detect and attribute advanced malware, and search all endpoints. CrowdStrike serves customers worldwide.

Falcon is the CrowdStrike platform purpose-built to stop breaches via a unified set of cloud-delivered technologies that prevent all types of attacks — including malware and much more.

For more information, visit https://www.crowdstrike.com.

Pick the right product and get started.

Choose your solution