Run a Real Time Response command in CrowdStrike

Run a Real Time Response command on a host protected by CrowdStrike. This can be a long running task, so a "job_id" will be returned when ran. That "job_id" can be checked periodically to get the current running status of the job as well job results as 'data' when the job status is either 'successful' or 'failure'. Some Real Time Response commands include: • cat • cd • eventlog • filehash • get • help • kill • Is • map • memdump • mv • ps • put • reg • rm • runscript • xmemdump

Created by

Conor Dunne