Playbook: CrowdStrike OAuth API File Eviction

Description

Accepts a hostname or device id as well as a file path as input and deletes the file from a device in Crowdstrike. We then generate an observable report as well as a Markdown formatted report. Both reports can be customized based on user preference.

Apps

CrowdStrike OAuth API

How To Implement

This input playbook requires the CrowdStrike OAuth API connector to be configured. It is designed to work with an endpoint hostname or device id and delete a specific file from the endpoint (using an absolute path) for use in automation playbooks.

Explore Playbook

Click the playbook screenshot to explore in more detail!

explore

Required fields

  • device

  • path

Reference

source | version: 1