Blog

Automatically open a ServiceNow ticket and notify your security channel whenever a Splunk incident fires.

Scan every inbound Outlook email for malicious URLs and attachments, delete threats, and notify Slack.

Scan incoming Gmail messages for malicious links and attachments, delete threats, and alert security.

Isolate or restore a compromised host in CrowdStrike, notify the device owner, and track it in ServiceNow.

Daily check that every Okta-enrolled employee has a CrowdStrike agent running on their device.

Validate CrowdStrike Falcon is installed on every Google Workspace user's device, reported daily.

Verify every Jamf-enrolled Mac has a working CrowdStrike Falcon sensor, daily.

Search your entire CrowdStrike fleet for a specific Indicator of Compromise and report matches to Slack.

Find and remove CrowdStrike Falcon sensors inactive for over 12 hours, with Slack approval.