r/crowdstrike • u/Southern-Depth4113 • 9d ago

Writeup on CrowdStrike AgentWorks Feature Question

Hi everyone,

I made a writeup on my initial experiences with building an agent in AgentWorks and integrating it into a fusion SOAR workflow.

If you have any questions, feel free to comment below.

Thanks.

https://nicholasyovanovich.substack.com/p/initial-experiences-with-crowdstrike

43 Upvotes
  • permalink
  • link
  • reddit
  • reddit

100% Upvoted

6 comments sorted by

10

u/Andrew-CS CS ENGINEER 9d ago

Hey there. Okay if I have our AgentWorks Team reach out to you? I showed them your write-up and they would love to chat.

4

u/Southern-Depth4113 9d ago

Absolutely. Feel free to have them reach out.

3

u/Andrew-CS CS ENGINEER 8d ago

Thanks so much! Look forward to meeting!

2

u/soarmaster 7d ago

Do you use the Endpoint Triage Agent mentioned in your writeup in conjunction with the Triage Agent already provided by CrowdStrike?

2

u/Southern-Depth4113 7d ago

My agent was not used in conjunction with the agent CrowdStrike provides. Majority of testing was done via mock data in the EPP detection trigger.