Overview

We will walk you through creating a new API Client within the CrowdStrike console, with the required read only scopes needed to bring CrowdStrike into this Fletch solution. Once provisioned, you should have a Client ID, Secret Key, and Base URL, which you will need to provide in Fletch.

Creating a new API Client with the required scope

Step 1. Log into your CrowdStrike console and click the Falcon icon.

Step 2. Under Support, select API Clients and Keys.

Step 3. In the top right corner, click on + Add new API client.

Step 4. Add the required permissions, by checking the read box for each. Then click Add.

• Detections
• Hosts
• Host groups
• Real time response
• Event streams
• User management

Once provisioned, the console will provide a Client ID, Secret Key, and Base URL. These are the tokens you need to provide in Fletch.

Note: Each Base URL should include cloud environment. When copying your Base URL, make sure it is included. Examples of possible cloud envoronments are: us-1, us-2, eu-1, us-gov-1: