What Changed
Updated the CrowdStrike Falcon Adversary Intelligence connector by merging improvements from PR #12692 and latest master branch updates. Key enhancements include restructured configuration management, improved error handling, and better code documentation.
Security Impact (Visibility & Fidelity)
Enhanced reliability of threat intelligence ingestion through better error handling and configuration validation. The connector now provides more robust authentication token management and improved logging for troubleshooting ingestion failures.
Affected Files
Solutions/CrowdStrike Falcon Endpoint Protection/Data Connectors/CrowdStrikeFalconAdversaryIntelligence/CrowdStrikeFalconThreatIntelConnector/__init__.py
Solutions/CrowdStrike Falcon Endpoint Protection/Data Connectors/CrowdStrikeFalconAdversaryIntelligence/CrowdStrikeFalconThreatIntelConnector/config.py
Solutions/CrowdStrike Falcon Endpoint Protection/Data Connectors/CrowdStrikeFalconAdversaryIntelligence/CrowdStrikeFalconThreatIntelConnector/utils.py
Solutions/CrowdStrike Falcon Endpoint Protection/Data Connectors/CrowdStrikeFalconAdversaryIntelligence/azure_deploy_CrowdstrikeFalconIndicatorsofCompromise.json
Solutions/CrowdStrike Falcon Endpoint Protection/Data Connectors/CrowdStrikeFalconAdversaryIntelligence/requirements.txt
(packaging artefacts: CrowdStrikeFalconThreatIntelConnector.zip, CrowdStrikeFalconAdversaryIntelligence_FunctionApp.json)