Create a CrowdStrike API Key

Step 1:

• Log in to your CrowdStrike Falcon User Interface as an admin level user.

• Select the Falcon Menu, select Support, and then select API Clients and Keys.

• Select Add new API client.

Step 2:

• In CLIENT NAME, enter Epiphany – Read Only.

• In DESCRIPTION, enter CrowdStrike API Read-Only key for Epiphany.

• Set these API Scopes to READ:

  • Detections

  • Hosts

  • Host Groups

  • Prevention Policies

  • Sensor Update Policies

  • User Management

  • Vulnerabilities

• Select Add.

Step 3:

• The API client created form displays. It shows the CLIENT ID and SECRET. Write these down; it is the only time you will see them and you need to enter them in the next section.

Be sure to write down the CLIENT ID and SECRET and keep them in a secure and safe location. You won't be able to retrieve them later.