This guide walks you through creating a CrowdStrike Falcon API client for use with Synqly's Vulnerabilities Connector.
Once logged in as an administrator, you'll have the option to create an API client, provided your account already has the Falcon Administrator role assigned. If you need to create a separate user to manage API clients, you can do so by creating a new user and assigning them the Falcon Administrator role. Note: for adding a user, you need to navigate to Host setup and management > Falcon users > User management.
For integrating with Synqly, you need to create one API client, which includes the associated Client ID, Secret, and Base URL.
- Navigate to Support and resource > Resources and tools > API client and keys.
- In the modal dialog to create the API client, provide Client name and Description.
- In the same modal dialog, for the scopes section, grant the scopes listed in Required Scopes below.
- Click Create on the modal dialog to create the new API client.
- Another modal dialog shows up, from which you can copy the Client ID, Secret, and Base URL.
| Scope | Access | Required for |
|---|---|---|
| Hosts | Read | Querying host information associated with vulnerabilities |
| Vulnerabilities | Read | Querying vulnerability findings |
Create your integration by supplying all configuration values.
URL
Supply the value as gathered in step 2.
Token URL
Add token at the end of the root URL as gathered in step 2.
Client ID
Supply the value as gathered in step 2.
Client Secret
Supply the value as gathered in step 2.