Skip to content

Commit

Permalink
Crowd Strike Falcon - increase the default look-back (#38347)
Browse files Browse the repository at this point in the history
* Increased th default look back to 2 minutes

* Added RN

* Updated the RN

* removed old RN file
  • Loading branch information
ShacharKidor authored Jan 28, 2025
1 parent c2532af commit d958fc1
Show file tree
Hide file tree
Showing 4 changed files with 9 additions and 3 deletions.
Original file line number Diff line number Diff line change
Expand Up @@ -2943,7 +2943,7 @@ def fetch_incidents():
current_fetch_ofp_detection: dict = {} if len(last_run) < 8 else last_run[7]
params = demisto.params()
fetch_incidents_or_detections = params.get('fetch_incidents_or_detections', "")
look_back = int(params.get('look_back') or 1)
look_back = int(params.get('look_back') or 2)
fetch_limit = INCIDENTS_PER_FETCH

demisto.debug(f"CrowdstrikeFalconMsg: Starting fetch incidents with {fetch_incidents_or_detections}")
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -213,7 +213,7 @@ configuration:
advanced: true
required: false
- additionalinfo: Use this parameter to determine the look-back period for searching for incidents that were created before the last run time and did not match the query when they were created.
defaultvalue: 1
defaultvalue: 2
display: 'Advanced: Time in minutes to look back when fetching incidents and detections'
name: look_back
type: 0
Expand Down
6 changes: 6 additions & 0 deletions Packs/CrowdStrikeFalcon/ReleaseNotes/2_1_10.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,6 @@

#### Integrations

##### CrowdStrike Falcon

- Updated the default **look back** parameter to 2 minutes instead of 1 minute.
2 changes: 1 addition & 1 deletion Packs/CrowdStrikeFalcon/pack_metadata.json
Original file line number Diff line number Diff line change
Expand Up @@ -2,7 +2,7 @@
"name": "CrowdStrike Falcon",
"description": "The CrowdStrike Falcon OAuth 2 API (formerly the Falcon Firehose API), enables fetching and resolving detections, searching devices, getting behaviors by ID, containing hosts, and lifting host containment.",
"support": "xsoar",
"currentVersion": "2.1.9",
"currentVersion": "2.1.10",
"author": "Cortex XSOAR",
"url": "https://www.paloaltonetworks.com/cortex",
"email": "",
Expand Down

0 comments on commit d958fc1

Please sign in to comment.