This guide covers the deployment, configuration and usage of the CrowdStrike Falcon® Data Replicator: SQS Technical Add-on (TA) for Splunk.
The CrowdStrike Falcon® Data Replicator Technical Add-on for Splunk allows CrowdStrike customers to retrieve FDR data from the CrowdStrike hosted S3 buckets via the CrowdStrike provide SQS Queue.
Discover More at our
Resource Center
Tech Hub
For technical information on installation, policy configuration and more, please visit the CrowdStrike Tech Hub.
Visit Tech Hub