{"id":21976870,"url":"https://github.com/stuartapp/ansible-falcon","last_synced_at":"2025-03-23T00:21:19.181Z","repository":{"id":42082572,"uuid":"468270509","full_name":"StuartApp/ansible-falcon","owner":"StuartApp","description":"Ansible role to download and install CrowdStrike Falcon sensor","archived":false,"fork":false,"pushed_at":"2023-02-22T13:54:19.000Z","size":50,"stargazers_count":0,"open_issues_count":0,"forks_count":0,"subscribers_count":8,"default_branch":"main","last_synced_at":"2025-01-28T03:30:40.954Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":null,"has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"gpl-3.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/StuartApp.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":".github/CODEOWNERS","security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2022-03-10T09:14:31.000Z","updated_at":"2022-03-16T17:26:44.000Z","dependencies_parsed_at":"2025-01-28T03:29:27.685Z","dependency_job_id":"bad4c742-0ecb-415d-9ea0-e2d1fc2eace9","html_url":"https://github.com/StuartApp/ansible-falcon","commit_stats":null,"previous_names":[],"tags_count":4,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/StuartApp%2Fansible-falcon","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/StuartApp%2Fansible-falcon/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/StuartApp%2Fansible-falcon/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/StuartApp%2Fansible-falcon/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/StuartApp","download_url":"https://codeload.github.com/StuartApp/ansible-falcon/tar.gz/refs/heads/main","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":245037433,"owners_count":20550869,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":[],"created_at":"2024-11-29T16:12:30.721Z","updated_at":"2025-03-23T00:21:19.083Z","avatar_url":"https://github.com/StuartApp.png","language":null,"funding_links":[],"categories":[],"sub_categories":[],"readme":"Role Name\n=========\n\nThe purpose of this role is to download, install and configure CrowdStrike Falcon sensor it on our EC2 instances. The sensor must be downloaded from Crowdstrike Cloud using MFA.\n\nIn the first step, we will connect to the mentionced cloud environment to obtain a `Bearer token` which will be used to download the `pkg`. The distribution used is compatible with Ubuntu 16/18 and 20.\n\nAfter downloading and installing the `pkg` - the `falcon-sensor` must be configured. According to the official documentation both the Customer ID (CID) and `provisioning-token` must be provided.\n\nRequirements\n------------\n\n![Ansible](https://img.shields.io/badge/ansible-2.8.2-green)\n\nRole Variables and Secrets\n--------------\n\nSupported variables:\n\n* `falcon_cloud` - CrowdStrike API URL for downloading the Falcon sensor.\n* `falcon_install_tmp_dir` - Where should the sensor file be downloaded to on Linux\n\nSupported secrets:\n\nThis information can be found on under Falcon UI and won't be changed in the near future:\n\n* `falcon_client_id` - CrowdStrike OAUTH Client ID\n* `falcon_client_secret` - CrowdStrike OAUTH Client Secret\n* `falcon_customer_id` - CrowdStrike Customer ID\n* `falcon_provisioning_token` - Falcon Installation Token\n\nDependencies\n------------\n\nNo dependencies\n\nExample Playbook\n----------------\n\nInclude the role in `requirements.yml` as follows to test the changes depending on the branch (master of the one to be tested)\n\n```yaml\n- src: https://github.com/StuartApp/ansible-falcon.git\n  name: stuart.falcon\n  version: \u003c branch name \u003e\n```\n\nAfter adding the role to the requirements and installing we can proceed to call it from a playbook:\n\n```yaml\n    - name: myplaybook\n      hosts: servers\n      roles:\n        - {role: stuart.falcon, tags: role-falcon}\n```\n\nAuthor Information\n------------------\n\nThis role was created while working for Stuart Delivery.\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fstuartapp%2Fansible-falcon","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fstuartapp%2Fansible-falcon","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fstuartapp%2Fansible-falcon/lists"}