This guide covers the deployment, configuration and usage of the CrowdStrike Falcon® Data Replicator: SQS Technical Add-on (TA) for Splunk.
The CrowdStrike Falcon® Data Replicator Technical Add-on for Splunk allows CrowdStrike customers to retrieve FDR data from the CrowdStrike hosted S3 buckets via the CrowdStrike provide SQS Queue.