Playbook: CrowdStrike OAuth API File Restore

Description

Accepts a hostname or device id as well as a file path as input and restores the file from the File Vault to a device in Crowdstrike. We then generate an observable report as well as a Markdown formatted report. Both reports can be customized based on user preference.

Apps

CrowdStrike OAuth API

How To Implement

This input playbook requires the CrowdStrike OAuth API connector to be configured. It is designed to work with an endpoint hostname or device id and restore a specific file to the endpoint (based on a previous run of the CrowdStrike_OAuth_API_File_Collection playbook) for use in automation playbooks.

Explore Playbook

Click the playbook screenshot to explore in more detail!

explore

Required fields

  • device

  • file

Reference

source | version: 1