
9/11/2024 · Corey Mahan, Andrew Meyer, Ayush Kumar, Michael Mcgrory, Gavin Chen
What this post added
This post details the integration of Cloudflare Email Security and Zero Trust logs with CrowdStrike Falcon Next-Gen SIEM. It explains how IoC alerts from Cloudflare Email Security can notify analysts of suspicious activity, and how Zero Trust logs from Access and Gateway can be pushed to Falcon Next-Gen SIEM for visualization, analysis, and remediation. It also outlines the technical steps for setting up an HTTP logpush job from Cloudflare to Falcon Next-Gen SIEM, including API key generation and destination configuration.