CrowdStrike FalconをChatGPTとClaudeに接続

• 01 / 03脆弱性監査の方法
• 02 / 03ホストの隔離方法
• 03 / 03インジケーターの管理方法

最速日

752ms

最遅日

1088ms

14日間の傾向

安定+1%

CrowdStrike Falcon Connector

準備完了です。MCPクライアントを選択し、セットアップ手順に従ってください。

コネクタリンクhttps://edge.vinkius.com/vk_preview_Uam95HEcDSo3obA4xKgBdXTFdUwShAgA5MEsKr32/mcpコピー

Claude Desktop

以下の手順で数秒で接続できます。

1. 1In Claude Desktop, open Settings → Connectors.
2. 2Click “Add custom connector” and paste the connector link above as the remote MCP server URL.
3. 3Click Add and start a new chat — CrowdStrike Falcon capabilities are ready to use.

設定 · claude_desktop_config.jsonコピー

{
  "mcpServers": {
    "crowdstrike-falcon-mcp": {
      "url": "https://edge.vinkius.com/vk_preview_Uam95HEcDSo3obA4xKgBdXTFdUwShAgA5MEsKr32/mcp"
    }
  }
}

• Claude
• ChatGPT
• Cursor
• VS Code
• Windsurf
• Claude Code
• JetBrains
• Cline

各クライアントの手順ガイドはこちらです。 接続方法

Claude向けのガイド付きセットアップ？ CrowdStrike FalconをClaudeや他のAIに設定する

このConnectorが対応するすべてのAIクライアントを見る ↑

• 01

  SOCアナリスト

  チャットを通じて検知やインシデントのトリアージを10倍速く実行できます。

• 02

  セキュリティエンジニア

  IOCの管理やスレットハンティングのプロセスを自動化できます。

• 03

  CISO

  フリート全体の健全性や脅威状況の要約をリアルタイムで把握できます。

• 04

  IT運用担当者

  エンドポイントのコンプライアンス状況やセンサーの適用範囲を監視できます。

• 01

  How do I connect my CrowdStrike account?

  You provide your Falcon credentials through the Vinkius interface. Vinkius manages the connection so you can use it immediately in your AI client.

• 02

  Can I actually isolate a machine using this MCP?

  Yes. The contain_device capability allows your agent to trigger host containment or lift containment directly from your chat interface.

• 03

  Which AI clients can I use with this?

  Any MCP-compatible client works, including Claude, Cursor, Windsurf, and VS Code.

• 04

  Does this replace the CrowdStrike dashboard?

  It acts as a high-speed interface for the dashboard. It is designed to speed up triage and investigation through natural language rather than replacing the full platform.

• 05

  Can I filter detections by specific criteria?

  Yes. The list_detections capability supports FQL filter syntax, allowing you to filter by severity, hostname, or technique.

• 06

  What authentication does CrowdStrike use?

  CrowdStrike uses OAuth 2.0 Client Credentials. You create an API Client in the Falcon Console under Support > API Clients and Keys. The server automatically obtains and caches Bearer tokens using your Client ID and Secret.

• 07

  Which cloud regions are supported?

  All CrowdStrike commercial clouds: US-1 (api.crowdstrike.com), US-2 (api.us-2.crowdstrike.com), EU-1 (api.eu-1.crowdstrike.com), and US-GOV-1. Configure the Base URL credential to match your tenant region.

• 08

  Can it triage detections automatically?

  Yes. The list_detections capability returns severity, tactic, technique, and device context. An AI agent can use this to auto-triage low/medium detections and escalate critical ones, reducing SOC analyst workload by 60-80%.

• 

  DataDome AIコネクタ

  Equip your AI agent to monitor bot protection, track threats, and audit protected endpoints directly via the D

  表示
• 

  Trend Micro AIコネクタ

  Equip your AI agent with Vision One telemetry to investigate threats, audit endpoint activities, and manage se

  表示
• 

  Wazuh (SIEM) AIコネクタ

  Manage your Wazuh SIEM infrastructure—monitor agents, inspect security events, and manage manager configuratio

  表示
• 

  Incident.io AIコネクタ

  Manage incidents, roles, and on-call schedules via Incident.io API.

  表示

おすすめ

• 

  Incident Response Economics AIコネクタ

  Quantify the economic impact of software incidents and calculate ROI for prevention strategies.

  表示
• 

  Pipeline Emergency Response AIコネクタ

  Generates comprehensive emergency response protocols for pipeline incidents.

  表示
• 

  Collection Emergency Response Workflow AIコネクタ

  Generates structured incident response protocols for collection materials.

  表示
• 

  PagerDuty Incident Trigger AIコネクタ

  This MCP does exactly one thing: it triggers incidents in PagerDuty. That's its only function, and nothing els

  表示