https://github.com/crowdstrike/foundry-tutorial-fusion-soar

Use Falcon Foundry to create a custom workflow action available in Falcon Fusion SOAR. The workflow action uses REST APIs to work with data.
https://github.com/crowdstrike/foundry-tutorial-fusion-soar

api-integration falcon-foundry jsonplaceholder-api

Last synced: 4 months ago
JSON representation

Use Falcon Foundry to create a custom workflow action available in Falcon Fusion SOAR. The workflow action uses REST APIs to work with data.

• Host: GitHub
• URL: https://github.com/crowdstrike/foundry-tutorial-fusion-soar
• Owner: CrowdStrike
• License: mit
• Created: 2025-04-15T18:22:56.000Z (about 1 year ago)
• Default Branch: main
• Last Pushed: 2025-05-25T04:14:15.000Z (about 1 year ago)
• Last Synced: 2026-01-25T00:26:18.768Z (4 months ago)
• Topics: api-integration, falcon-foundry, jsonplaceholder-api
• Homepage: https://falcon.crowdstrike.com/documentation/page/yfa47a8d/create-a-custom-fusion-soar-workflow-action
• Size: 124 KB
• Stars: 2
• Watchers: 4
• Forks: 0
• Open Issues: 0
• Metadata Files:
  • Readme: README.md
  • License: LICENSE
  • Code of conduct: CODE_OF_CONDUCT.md
  • Security: SECURITY.md

Awesome Lists containing this project

README

          
![CrowdStrike](/images/cs-logo.png#gh-light-mode-only)

![CrowdStrike](/images/cs-logo-red.png#gh-dark-mode-only)

[![CrowdStrike Subreddit](https://img.shields.io/badge/-r%2Fcrowdstrike-white?logo=reddit&labelColor=gray&link=https%3A%2F%2Freddit.com%2Fr%2Fcrowdstrike)](https://reddit.com/r/crowdstrike)


# Fusion SOAR tutorial Foundry app

> [!IMPORTANT]  

> To view this tutorial and import the app, you need access to the Falcon console.

This code is the result of doing the Falcon Foundry [Create a Custom Fusion SOAR Workflow Action](https://falcon.crowdstrike.com/documentation/page/yfa47a8d/create-a-custom-fusion-soar-workflow-action) tutorial.

## Prerequisites

- Falcon Insight XDR or Falcon Prevent (one app)

- Falcon Next-Gen SIEM or Falcon Foundry (1+ apps depending on entitlement)

## Getting Started

1. [Download this repository as a zip file](https://github.com/CrowdStrike/foundry-tutorial-fusion-soar/archive/refs/heads/main.zip).

2. [Log in to the Falcon console](https://falcon.crowdstrike.com/login?unilogin=true) and go to **Foundry** > **App manager**. 

3. Click **Import app** and select the zip file you downloaded.

4. Click **Import**.

> [!TIP]

> If you get an error that the name already exists, change the name to something unique to your CID when importing the app.

## Links

This example uses the following CrowdStrike products:

* [Falcon Platform](https://www.crowdstrike.com/platform/)

* [Falcon Foundry](https://www.crowdstrike.com/platform/next-gen-siem/falcon-foundry/)

* [Falcon Fusion SOAR](https://www.crowdstrike.com/platform/next-gen-siem/falcon-fusion/)

## Help

Please post any questions as [issues](https://github.com/CrowdStrike/foundry-tutorial-fusion-soar/issues) in this repo, ask for help in our [CrowdStrike subreddit](https://www.reddit.com/r/crowdstrike/), or post your question to our [Foundry Developer Community](https://community.crowdstrike.com/groups/foundry-developer-community-82).

## Support

The foundry-tutorial-fusion-soar repo is the resulting code from doing the Foundry Create a Custom Fusion SOAR Workflow Action tutorial. While not a formal CrowdStrike product, foundry-tutorial-fusion-soar is maintained by CrowdStrike and supported in partnership with the open source developer community.

## License

MIT, see [LICENSE](LICENSE).