From 2a011b52a36889c37fcfe4e5196c472b63c85ae5 Mon Sep 17 00:00:00 2001 From: Shreyash Naik Date: Tue, 14 Jul 2026 09:21:47 +0530 Subject: [PATCH 1/2] CSOAR-5161:Implement a Schedule Action in the CrowdStrike Falcon Intelligence integration --- .../integrations/crowdstrike-falcon-intelligence.md | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/docs/platform-services/automation-service/app-central/integrations/crowdstrike-falcon-intelligence.md b/docs/platform-services/automation-service/app-central/integrations/crowdstrike-falcon-intelligence.md index ab12a64b4d..a2e24d0473 100644 --- a/docs/platform-services/automation-service/app-central/integrations/crowdstrike-falcon-intelligence.md +++ b/docs/platform-services/automation-service/app-central/integrations/crowdstrike-falcon-intelligence.md @@ -7,8 +7,8 @@ import useBaseUrl from '@docusaurus/useBaseUrl'; CrowdStrike Falcon Intelligence icon -***Version: 1.9 -Updated: June 30, 2026*** +***Version: 2.0 +Updated: Jul 15, 2026*** CrowdStrike® Falcon Intelligence™ is an automated threat intelligence service built on the CrowdStrike Falcon Platform. It automates incident investigations and streamlines breach response so you can make faster, more confident cyber security decisions. Organizations, regardless of size or sophistication, learn from the attacks in their environment applying that knowledge to proactively prevent future attacks. Falcon Intelligence provides insight into global threats, tracked by CrowdStrike’s elite team of intelligence experts. @@ -29,6 +29,7 @@ CrowdStrike® Falcon Intelligence™ is an automated threat intelligence service * **Submission Status Polling** (*Enrichment*) - Return the state of submission, this action will poll until the File/URL analysis are finished, Once this action is completed, you will be able to get a Report or Get Summary of the Submission. * **Submit File** (*Enrichment*) - Submit a file for sandbox analysis. The time required for analysis varies but is usually less than 15 minutes, by using the **Submission Status Polling** action. * **Submit URL** (*Enrichment*) - Submit a URL for sandbox analysis. The time required for analysis varies but is usually less than 15 minutes, by using the **Submission Status Polling** action. +* **Get Submission Report Scheduled** *(Scheduled)* - Periodically polls the submission status and retrieves the sandbox report once the analysis is complete. This action checks every 1 minute and expires after 30 minutes. Use the Resource ID from the **Submit URL** or **Submit File** actions. ## Sandbox Environments @@ -102,3 +103,4 @@ For information about CrowdStrike Falcon Intelligence, see [CrowdStrike document * March 4, 2024 (v1.7) - Updated code for compatibility with Python 3.12 * March 31, 2026 (v1.8) - Upgraded the `python3_generic` Docker image (Python 3.8) to `python3_12_generic` (Python 3.12) to address Python 3.8 end-of-life and improve security and performance. * June 30, 2026 (v1.9) - Updated the available sandbox environments to align with the latest platform support. Ubuntu 16.04 has been removed, Ubuntu 20 is now deprecated, and Ubuntu 24 has been added +* July 15, 2026 (v2.0) - Improved the reliability of sandbox analysis by automatically monitoring submission progress and retrieving the final report as soon as it becomes available. From 89350e0504c4222bf72ce8bf3b29c2fcf74569bf Mon Sep 17 00:00:00 2001 From: Shreyash Naik Date: Tue, 14 Jul 2026 12:50:41 +0530 Subject: [PATCH 2/2] CSOAR-5161:version change1.10 --- .../integrations/crowdstrike-falcon-intelligence.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/docs/platform-services/automation-service/app-central/integrations/crowdstrike-falcon-intelligence.md b/docs/platform-services/automation-service/app-central/integrations/crowdstrike-falcon-intelligence.md index a2e24d0473..cb036cd835 100644 --- a/docs/platform-services/automation-service/app-central/integrations/crowdstrike-falcon-intelligence.md +++ b/docs/platform-services/automation-service/app-central/integrations/crowdstrike-falcon-intelligence.md @@ -7,7 +7,7 @@ import useBaseUrl from '@docusaurus/useBaseUrl'; CrowdStrike Falcon Intelligence icon -***Version: 2.0 +***Version: 1.10 Updated: Jul 15, 2026*** CrowdStrike® Falcon Intelligence™ is an automated threat intelligence service built on the CrowdStrike Falcon Platform. It automates incident investigations and streamlines breach response so you can make faster, more confident cyber security decisions. Organizations, regardless of size or sophistication, learn from the attacks in their environment applying that knowledge to proactively prevent future attacks. Falcon Intelligence provides insight into global threats, tracked by CrowdStrike’s elite team of intelligence experts. @@ -103,4 +103,4 @@ For information about CrowdStrike Falcon Intelligence, see [CrowdStrike document * March 4, 2024 (v1.7) - Updated code for compatibility with Python 3.12 * March 31, 2026 (v1.8) - Upgraded the `python3_generic` Docker image (Python 3.8) to `python3_12_generic` (Python 3.12) to address Python 3.8 end-of-life and improve security and performance. * June 30, 2026 (v1.9) - Updated the available sandbox environments to align with the latest platform support. Ubuntu 16.04 has been removed, Ubuntu 20 is now deprecated, and Ubuntu 24 has been added -* July 15, 2026 (v2.0) - Improved the reliability of sandbox analysis by automatically monitoring submission progress and retrieving the final report as soon as it becomes available. +* July 15, 2026 (v1.10) - Improved the reliability of sandbox analysis by automatically monitoring submission progress and retrieving the final report as soon as it becomes available.