Repository: demisto/content
Pull request #39883: Ciac 13359 cs event collector in xsaim last run
Author: login: lironcohen272
Labels: name: docs-approved
name: ready-for-pipeline-running
description: Whether the pr is ready for running the whole pipeline, including testing on SAAS machines
Created: 2025-05-11T11:41:08Z | Merged: 2025-05-12T15:42:35Z

## Related Issues
fixes: https://jira-dc.paloaltonetworks.com/browse/CIAC-13712

## Description
- add last run test that ensure that fetch_events correctly accesses each index of last_run based on its data type.
- add rawjson column back to the dataset
- fix name column override


Diff:
diff --git a/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py b/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py
index e65f78ba0d6f..63dc645ede81 100644
--- a/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py
+++ b/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py
@@ -40,7 +40,7 @@
 # Should we use SSL
 USE_SSL = not PARAMS.get("insecure", False)
 # How many time before the first fetch to retrieve incidents
-FETCH_TIME = 'now' if demisto.command() == "fetch-events" else PARAMS.get("fetch_time", "3 days")
+FETCH_TIME = "now" if demisto.command() == "fetch-events" else PARAMS.get("fetch_time", "3 days")
 MAX_FETCH_SIZE = 10000
 MAX_FETCH_DETECTION_PER_API_CALL = 10000
 MAX_FETCH_INCIDENT_PER_API_CALL = 500
@@ -369,14 +369,6 @@ class IncidentType(Enum):
 
 """ HELPER FUNCTIONS """
 
-def is_fetch_events():
-    """
-    Determines whether or not the command is fetch_events.
-
-    Returns:
-        bool: True if the command is fetch-events.
-    """
-    return demisto.command() == "fetch-events"
 
 def disable_for_xsiam():
     """Validates if command is not running on an unsupported Cortex platform.
@@ -761,6 +753,24 @@ def add_mirroring_fields(incident: dict):
     incident["mirror_instance"] = INTEGRATION_INSTANCE
 
 
+def extract_response_to_dataset_raw(resp: dict, raw: dict) -> None:
+    """
+    Adds response data info to specific dataset raw.
+
+    This function processes response keys and adds them to the raw ad new column.
+    The "name" column is typically used for displaying "(fetched type) ID: (id)" format,
+    The function renames the "name" key to "_name" column to avoid conflicts.
+
+    Args:
+        resp (dict): Response dictionary to process (events/incident)
+        raw (dict): Target dataset raw to update
+    """
+    for key, val in resp.items():
+        column_name = "_name" if key == "name" else key
+        value = val if isinstance(val, str) else json.dumps(val)
+        raw[column_name] = value
+
+
 def detection_to_incident(detection, is_fetch_events: bool = False):
     """
     Creates an incident of a detection.
@@ -778,21 +788,20 @@ def detection_to_incident(detection, is_fetch_events: bool = False):
     incident = {
         "name": "Detection ID: " + str(detection_id),
         "occurred": str(detection.get("created_timestamp")),
-        "severity": severity_string_to_int(severity)
+        "severity": severity_string_to_int(severity),
+        "rawJSON": json.dumps(detection),
     }
     if is_fetch_events:
         incident["_source_log_type"] = detection.get("incident_type")
-        incident.update({key: val if isinstance(val, str) else json.dumps(val) for key, val in detection.items()})
+        extract_response_to_dataset_raw(resp=detection, raw=incident)
         # new detection
         if not detection.get("updated_timestamp") or (detection.get("updated_timestamp") == detection.get("timestamp")):
             incident["_time"] = detection.get("timestamp")
-            incident['_entry_status'] = "new"
+            incident["_entry_status"] = "new"
         # updated detection
         else:
             incident["_time"] = detection.get("updated_timestamp")
-            incident['_entry_status'] = "updated"
-    else:
-        incident["rawJSON"] = json.dumps(detection)
+            incident["_entry_status"] = "updated"
     return incident
 
 
@@ -813,21 +822,20 @@ def incident_to_incident_context(incident, is_fetch_events: bool = False):
     incident_id = str(incident.get("incident_id"))
     incident_context = {
         "name": f"Incident ID: {incident_id}",
-        "occurred": str(incident.get("start"))
+        "occurred": str(incident.get("start")),
+        "rawJSON": json.dumps(incident),
     }
     if is_fetch_events:
         incident_context["_source_log_type"] = incident.get("incident_type")
-        incident_context.update({key: val if isinstance(val, str) else json.dumps(val) for key, val in incident.items()})
+        extract_response_to_dataset_raw(resp=incident, raw=incident_context)
         # new incident
         if not incident.get("modified_timestamp") or (incident.get("modified_timestamp") == incident.get("created")):
             incident_context["_time"] = incident.get("created_timestamp")
-            incident_context['_entry_status'] = "new"
+            incident_context["_entry_status"] = "new"
         # updated detection
         else:
             incident_context["_time"] = incident.get("modified_timestamp")
-            incident_context['_entry_status'] = "updated"
-    else:
-        incident_context["rawJSON"] = json.dumps(incident)
+            incident_context["_entry_status"] = "updated"
     return incident_context
 
 
@@ -868,27 +876,25 @@ def detection_to_incident_context(detection, detection_type, start_time_key: str
         demisto.debug(f"detection_to_incident_context, {detection_type=} calling fix_time_field")
         fix_time_field(detection, start_time_key)
 
-    incident_context = {"occurred": detection.get(start_time_key)}
+    incident_context = {"occurred": detection.get(start_time_key), "rawJSON": json.dumps(detection)}
     if detection_type in (IDP_DETECTION_FETCH_TYPE, ON_DEMAND_SCANS_DETECTION_TYPE, OFP_DETECTION_TYPE):
         incident_context["name"] = f'{detection_type} ID: {detection.get("composite_id")}'
         incident_context["last_updated"] = detection.get("updated_timestamp")
     elif detection_type == MOBILE_DETECTION_FETCH_TYPE:
         incident_context["name"] = f'{detection_type} ID: {detection.get("mobile_detection_id")}'
         incident_context["severity"] = detection.get("severity")
-    
+
     if is_fetch_events:
         incident_context["_source_log_type"] = "detection"
-        incident_context.update({key: val if isinstance(val, str) else json.dumps(val) for key, val in detection.items()})
+        extract_response_to_dataset_raw(resp=detection, raw=incident_context)
         # new detection
         if not detection.get("updated_timestamp") or (detection.get("updated_timestamp") == detection.get("timestamp")):
             incident_context["_time"] = detection.get("timestamp")
-            incident_context['_entry_status'] = "new"
+            incident_context["_entry_status"] = "new"
         # updated detection
         else:
             incident_context["_time"] = detection.get("updated_timestamp")
-            incident_context['_entry_status'] = "updated"
-    else:
-        incident_context["rawJSON"] = json.dumps(detection)
+            incident_context["_entry_status"] = "updated"
     return incident_context
 
 
@@ -2885,7 +2891,7 @@ def get_mapping_fields_command() -> GetMappingFieldsResponse:
 """ COMMANDS FUNCTIONS """
 
 
-def migrate_last_run(last_run: dict[str, str] | list[dict]) -> list[dict]:
+def migrate_last_run(last_run: dict[str, str] | list[dict], is_fetch_events: bool = False) -> list[dict]:
     """This function migrated from old last run object to new last run object
 
     Args:
@@ -2909,6 +2915,8 @@ def migrate_last_run(last_run: dict[str, str] | list[dict]) -> list[dict]:
         ):
             updated_last_run_incidents["time"] = incident_time_date.strftime(DATE_FORMAT)
 
+        if is_fetch_events:
+            return [updated_last_run_detections, updated_last_run_incidents, {}, {}, {}, {}]
         return [updated_last_run_detections, updated_last_run_incidents, {}, {}, {}]
 
 
@@ -2935,9 +2943,9 @@ def fetch_incidents():
     current_fetch_on_demand_detections: dict = {} if len(last_run) < 7 else last_run[6]
     current_fetch_ofp_detection: dict = {} if len(last_run) < 8 else last_run[7]
     params = demisto.params()
-    
+
     fetch_incidents_or_detections = params.get("fetch_incidents_or_detections", "")
-        
+
     look_back = int(params.get("look_back") or 2)
     fetch_limit = INCIDENTS_PER_FETCH
 
@@ -2947,7 +2955,7 @@ def fetch_incidents():
         start_fetch_time, end_fetch_time = get_fetch_run_time_range(
             last_run=current_fetch_info_detections, first_fetch=FETCH_TIME, look_back=look_back, date_format=DETECTION_DATE_FORMAT
         )
-        
+
         fetch_limit = current_fetch_info_detections.get("limit") or INCIDENTS_PER_FETCH
 
         incident_type = "detection"
@@ -3011,7 +3019,7 @@ def fetch_incidents():
         start_fetch_time, end_fetch_time = get_fetch_run_time_range(
             last_run=current_fetch_info_incidents, first_fetch=FETCH_TIME, look_back=look_back, date_format=DATE_FORMAT
         )
-        
+
         fetch_limit = current_fetch_info_incidents.get("limit") or INCIDENTS_PER_FETCH
         incident_type = "incident"
 
@@ -3221,14 +3229,17 @@ def fetch_incidents():
             current_fetch_ofp_detection,
         ]
     )
-    return (incidents
+    return (
+        incidents
         + detections
         + idp_detections
         + iom_incidents
         + ioa_incidents
         + mobile_detections
         + on_demand_detections
-        + ofp_detections)
+        + ofp_detections
+    )
+
 
 def fetch_events():
     incidents: list = []
@@ -3240,18 +3251,18 @@ def fetch_events():
     last_run = demisto.getLastRun()
     demisto.debug(f"CrowdStrikeFalconMsg: Current last run object is {last_run}")
     if not last_run:
-        last_run = [{}, {}, {}, {}, {}, {}, {}]
-    last_run = migrate_last_run(last_run)
+        last_run = [{}, {}, {}, {}, {}, {}]
+    last_run = migrate_last_run(last_run, is_fetch_events=True)
     current_fetch_info_detections: dict = last_run[0]
     current_fetch_info_incidents: dict = last_run[1]
     current_fetch_info_idp_detections: dict = {} if len(last_run) < 3 else last_run[2]
-    current_fetch_info_mobile_detections: dict = {} if len(last_run) < 6 else last_run[5]
-    current_fetch_on_demand_detections: dict = {} if len(last_run) < 7 else last_run[6]
-    current_fetch_ofp_detection: dict = {} if len(last_run) < 8 else last_run[7]
+    current_fetch_info_mobile_detections: dict = {} if len(last_run) < 4 else last_run[3]
+    current_fetch_on_demand_detections: dict = {} if len(last_run) < 5 else last_run[4]
+    current_fetch_ofp_detection: dict = {} if len(last_run) < 6 else last_run[5]
     params = demisto.params()
-    
+
     fetch_incidents_or_detections = params.get("fetch_events_or_detections", "")
-        
+
     look_back = int(params.get("look_back_xsiam") or 2)
     fetch_limit = INCIDENTS_PER_FETCH
 
@@ -3261,7 +3272,7 @@ def fetch_events():
         start_fetch_time, end_fetch_time = get_fetch_run_time_range(
             last_run=current_fetch_info_detections, first_fetch=FETCH_TIME, look_back=look_back, date_format=DETECTION_DATE_FORMAT
         )
-        
+
         fetch_limit = current_fetch_info_detections.get("limit") or MAX_FETCH_DETECTION_PER_API_CALL
 
         incident_type = "detection"
@@ -3287,7 +3298,6 @@ def fetch_events():
         if raw_res is not None and "resources" in raw_res:
             full_detections = demisto.get(raw_res, "resources")
             for detection in full_detections:
-                
                 detection["incident_type"] = incident_type
                 # detection_id is for the old version of the API, composite_id is for the new version (Raptor)
                 detection_id = detection.get("detection_id") if LEGACY_VERSION else detection.get("composite_id")
@@ -3326,7 +3336,7 @@ def fetch_events():
         start_fetch_time, end_fetch_time = get_fetch_run_time_range(
             last_run=current_fetch_info_incidents, first_fetch=FETCH_TIME, look_back=look_back, date_format=DATE_FORMAT
         )
-        
+
         fetch_limit = current_fetch_info_incidents.get("limit") or MAX_FETCH_INCIDENT_PER_API_CALL
         incident_type = "incident"
 
@@ -3391,7 +3401,7 @@ def fetch_events():
             product_type="idp",
             detection_name_prefix=IDP_DETECTION_FETCH_TYPE,
             start_time_key="created_timestamp",
-            is_fetch_events=True
+            is_fetch_events=True,
         )
 
     if MOBILE_DETECTION_FETCH_TYPE in fetch_incidents_or_detections:
@@ -3403,7 +3413,7 @@ def fetch_events():
             product_type="mobile",
             detection_name_prefix=MOBILE_DETECTION_FETCH_TYPE,
             start_time_key="timestamp",
-            is_fetch_events=True
+            is_fetch_events=True,
         )
 
     if ON_DEMAND_SCANS_DETECTION_TYPE in fetch_incidents_or_detections:
@@ -3420,7 +3430,7 @@ def fetch_events():
             product_type="ods",
             detection_name_prefix=ON_DEMAND_SCANS_DETECTION_TYPE,
             start_time_key="created_timestamp",
-            is_fetch_events=True
+            is_fetch_events=True,
         )
 
     if OFP_DETECTION_TYPE in fetch_incidents_or_detections:
@@ -3437,29 +3447,23 @@ def fetch_events():
             product_type="ofp",
             detection_name_prefix=OFP_DETECTION_TYPE,
             start_time_key="created_timestamp",
-            is_fetch_events=True
+            is_fetch_events=True,
         )
 
     last_run = [
-            current_fetch_info_detections,
-            current_fetch_info_incidents,
-            current_fetch_info_idp_detections,
-            current_fetch_info_mobile_detections,
-            current_fetch_on_demand_detections,
-            current_fetch_ofp_detection,
-        ]
-    
-    events = (
-        incidents
-        + detections
-        + idp_detections
-        + mobile_detections
-        + on_demand_detections
-        + ofp_detections
-        )
+        current_fetch_info_detections,
+        current_fetch_info_incidents,
+        current_fetch_info_idp_detections,
+        current_fetch_info_mobile_detections,
+        current_fetch_on_demand_detections,
+        current_fetch_ofp_detection,
+    ]
+
+    events = incidents + detections + idp_detections + mobile_detections + on_demand_detections + ofp_detections
 
     return last_run, events
-        
+
+
 def fetch_detections_by_product_type(
     current_fetch_info: dict,
     look_back: int,
@@ -3468,7 +3472,7 @@ def fetch_detections_by_product_type(
     detections_type: str,
     detection_name_prefix: str,
     start_time_key: str,
-    is_fetch_events: bool = False
+    is_fetch_events: bool = False,
 ) -> tuple[List, dict]:
     """The fetch logic for idp, ods and mobile detections.
 
@@ -3493,7 +3497,7 @@ def fetch_detections_by_product_type(
         fetch_limit = current_fetch_info.get("limit") or MAX_FETCH_DETECTION_PER_API_CALL
     else:
         fetch_limit = current_fetch_info.get("limit") or INCIDENTS_PER_FETCH
-        
+
     filter = f"product:'{product_type}'+created_timestamp:>'{start_fetch_time}'"
     if product_type in {IncidentType.ON_DEMAND.value, IncidentType.OFP.value}:
         filter = filter.replace("product:", "type:")
@@ -3519,10 +3523,9 @@ def fetch_detections_by_product_type(
             full_detections = demisto.get(raw_res, "resources")
             for detection in full_detections:
                 detection["incident_type"] = detections_type
-                detection_to_context = detection_to_incident_context(detection,
-                                                                     detection_name_prefix,
-                                                                     start_time_key,
-                                                                     is_fetch_events=is_fetch_events)
+                detection_to_context = detection_to_incident_context(
+                    detection, detection_name_prefix, start_time_key, is_fetch_events=is_fetch_events
+                )
                 detections.append(detection_to_context)
         detections = (
             truncate_long_time_str(detections, "occurred")
@@ -7556,7 +7559,7 @@ def get_ioarules_command(args: dict) -> CommandResults:
     )
 
 
-def main(): # pragma: no cover
+def main():  # pragma: no cover
     command = demisto.command()
     args = demisto.args()
     demisto.debug(f"Command being called is {command}")
@@ -7812,4 +7815,4 @@ def main(): # pragma: no cover
 
 
 if __name__ in ("__main__", "builtin", "builtins"):
-    main()
\ No newline at end of file
+    main()
diff --git a/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon_test.py b/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon_test.py
index 4cd9a1b39c13..76ca95fa8c6a 100644
--- a/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon_test.py
+++ b/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon_test.py
@@ -7663,3 +7663,24 @@ def test_enrich_groups_no_resources(mocker):
     mocker.patch.object(CrowdStrikeFalcon, "http_request", return_value={"resources": None})
 
     assert CrowdStrikeFalcon.enrich_groups(group_ids) == {}
+
+
+def test_fetch_events_reads_last_run_indexes_correctly(mocker):
+    """
+    Ensure that fetch_events correctly accesses each index of last_run based on its data type.
+
+    Each index in last_run is mocked with the appropriate identifiers.
+    The test verifies that these identifiers appear in the same order in the last_run output,
+    indicating correct index usage within the function.
+    """
+    from CrowdStrikeFalcon import fetch_events
+
+    last_run_identifiers = ["Detection", "Incident", "IDP", "Mobile", "ODS", "OFP"]
+
+    mocker.patch("CrowdStrikeFalcon.demisto.getLastRun", return_value=last_run_identifiers)
+    mocker.patch("CrowdStrikeFalcon.demisto.params", return_value={})
+
+    last_run_identifiers_result, _ = fetch_events()
+
+    # Verify that fetch_events refers to the correctly indexes for each type by last_run object.
+    assert last_run_identifiers_result == last_run_identifiers
diff --git a/Packs/CrowdStrikeFalcon/ReleaseNotes/2_1_21.md b/Packs/CrowdStrikeFalcon/ReleaseNotes/2_1_21.md
new file mode 100644
index 000000000000..515f859eb04e
--- /dev/null
+++ b/Packs/CrowdStrikeFalcon/ReleaseNotes/2_1_21.md
@@ -0,0 +1,6 @@
+
+#### Integrations
+
+##### CrowdStrike Falcon
+
+Documentation and Metadata improvements.
diff --git a/Packs/CrowdStrikeFalcon/pack_metadata.json b/Packs/CrowdStrikeFalcon/pack_metadata.json
index 774666ac9076..b63e6608ab19 100644
--- a/Packs/CrowdStrikeFalcon/pack_metadata.json
+++ b/Packs/CrowdStrikeFalcon/pack_metadata.json
@@ -2,7 +2,7 @@
     "name": "CrowdStrike Falcon",
     "description": "The CrowdStrike Falcon OAuth 2 API (formerly the Falcon Firehose API), enables fetching and resolving detections, searching devices, getting behaviors by ID, containing hosts, and lifting host containment.",
     "support": "xsoar",
-    "currentVersion": "2.1.20",
+    "currentVersion": "2.1.21",
     "author": "Cortex XSOAR",
     "url": "https://www.paloaltonetworks.com/cortex",
     "email": "",


Reviews:
user: login: thefrieddan1
state: COMMENTED
author_association: CONTRIBUTOR
submitted_at: 2025-05-12T06:28:44Z
user: login: thefrieddan1
state: COMMENTED
author_association: CONTRIBUTOR
submitted_at: 2025-05-12T06:32:44Z
user: login: thefrieddan1
state: COMMENTED
author_association: CONTRIBUTOR
submitted_at: 2025-05-12T06:35:08Z
user: login: lironcohen272
state: COMMENTED
author_association: CONTRIBUTOR
submitted_at: 2025-05-12T08:00:38Z
user: login: thefrieddan1
state: COMMENTED
author_association: CONTRIBUTOR
submitted_at: 2025-05-12T12:08:16Z
user: login: thefrieddan1
state: APPROVED
author_association: CONTRIBUTOR
submitted_at: 2025-05-12T12:29:08Z

Review comments:
diff_hunk: @@ -7663,3 +7663,31 @@ def test_enrich_groups_no_resources(mocker):
     mocker.patch.object(CrowdStrikeFalcon, "http_request", return_value={"resources": None})
 
     assert CrowdStrikeFalcon.enrich_groups(group_ids) == {}
+    
+
+def test_fetch_events_reads_last_run_indexes_correctly(mocker):
+    """
+    Ensure that fetch_events correctly accesses each index of last_run based on its data type.
+
+    Each index in last_run is mocked with the appropriate identifiers.
+    The test verifies that these identifiers appear in the same order in the last_run output,
+    indicating correct index usage within the function.
+    """
+    
+    last_run_identifiers = [
+        "Detection",
+        "Incident",
+        "IDP",
+        "Mobile",
+        "ODS",
+        "OFP"
+        ]
+        
+    mocker.patch("CrowdStrikeFalcon.demisto.getLastRun", return_value=last_run_identifiers)
+    mocker.patch("CrowdStrikeFalcon.demisto.params", return_value={})
+
+    from CrowdStrikeFalcon import fetch_events
path: Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon_test.py
user: login: thefrieddan1
body: move import below docstring
created_at: 2025-05-12T06:28:43Z
author_association: CONTRIBUTOR
diff_hunk: @@ -778,11 +787,12 @@ def detection_to_incident(detection, is_fetch_events: bool = False):
     incident = {
         "name": "Detection ID: " + str(detection_id),
         "occurred": str(detection.get("created_timestamp")),
-        "severity": severity_string_to_int(severity)
+        "severity": severity_string_to_int(severity),
+        "rawJSON": json.dumps(detection)
path: Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py
user: login: thefrieddan1
body: i would add rawJSON only in case it is is_fetch_events trie
created_at: 2025-05-12T06:32:42Z
author_association: CONTRIBUTOR
diff_hunk: @@ -3240,14 +3247,14 @@ def fetch_events():
     last_run = demisto.getLastRun()
     demisto.debug(f"CrowdStrikeFalconMsg: Current last run object is {last_run}")
     if not last_run:
-        last_run = [{}, {}, {}, {}, {}, {}, {}]
-    last_run = migrate_last_run(last_run)
+        last_run = [{}, {}, {}, {}, {}, {}]
+    last_run = migrate_last_run(last_run, is_fetch_events=True)
     current_fetch_info_detections: dict = last_run[0]
     current_fetch_info_incidents: dict = last_run[1]
     current_fetch_info_idp_detections: dict = {} if len(last_run) < 3 else last_run[2]
-    current_fetch_info_mobile_detections: dict = {} if len(last_run) < 6 else last_run[5]
-    current_fetch_on_demand_detections: dict = {} if len(last_run) < 7 else last_run[6]
-    current_fetch_ofp_detection: dict = {} if len(last_run) < 8 else last_run[7]
+    current_fetch_info_mobile_detections: dict = {} if len(last_run) < 4 else last_run[3]
path: Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py
user: login: thefrieddan1
body: Risky changing the indexes, Why do we need to change?
Also can we use constants with event types instead of just numbers?
created_at: 2025-05-12T06:35:07Z
author_association: CONTRIBUTOR
diff_hunk: @@ -778,11 +787,12 @@ def detection_to_incident(detection, is_fetch_events: bool = False):
     incident = {
         "name": "Detection ID: " + str(detection_id),
         "occurred": str(detection.get("created_timestamp")),
-        "severity": severity_string_to_int(severity)
+        "severity": severity_string_to_int(severity),
+        "rawJSON": json.dumps(detection)
path: Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py
user: login: lironcohen272
body: rawJSON column appears in XSOAR for fetch_incident too.
I deleted the rawJSON for XSIAM and added condition, but now we want the rawJSON again so I deleted the condition and just returned it as it was.
created_at: 2025-05-12T08:00:38Z
author_association: CONTRIBUTOR
diff_hunk: @@ -761,6 +753,26 @@ def add_mirroring_fields(incident: dict):
     incident["mirror_instance"] = INTEGRATION_INSTANCE
 
 
+def add_response_to_dataset(resp: dict, raw: dict) -> None:
path: Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py
user: login: thefrieddan1
body: I would call the method extract_response_to_key_value(
created_at: 2025-05-12T12:08:13Z
author_association: CONTRIBUTOR

PR comments:
user: login: github-actions[bot]
created_at: 2025-05-11T11:47:57Z
body: <!-- Pytest Coverage Comment: pre-commit -->
<a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/README.md"><img alt="Coverage" src="https://img.shields.io/badge/Coverage-77%25-yellow.svg" /></a><details><summary>Coverage Report </summary><table><tr><th>File</th><th>Stmts</th><th>Miss</th><th>Cover</th><th>Missing</th></tr><tbody><tr><td colspan="5"><b>Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon</b></td></tr><tr><td>&nbsp; &nbsp;<a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py">CrowdStrikeFalcon.py</a></td><td>2942</td><td>648</td><td>77%</td><td><a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L379-L380">379&ndash;380</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L518">518</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L543">543</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L583">583</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L594">594</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L634-L635">634&ndash;635</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L637-L638">637&ndash;638</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L656">656</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L768-L771">768&ndash;771</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L795-L796">795&ndash;796</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L798-L800">798&ndash;800</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L803-L804">803&ndash;804</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L829-L830">829&ndash;830</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L832-L834">832&ndash;834</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L837-L838">837&ndash;838</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L883-L885">883&ndash;885</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L888-L889">888&ndash;889</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L891-L893">891&ndash;893</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L896-L897">896&ndash;897</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L912">912</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L915">915</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L943-L952">943&ndash;952</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L973">973</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L1047">1047</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L1080-L1081">1080&ndash;1081</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L1083-L1086">1083&ndash;1086</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L1123">1123</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L1148">1148</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L1212-L1213">1212&ndash;1213</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L1215-L1218">1215&ndash;1218</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L1232-L1237">1232&ndash;1237</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L1251-L1252">1251&ndash;1252</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L1254-L1257">1254&ndash;1257</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L1282">1282</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L1284">1284</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L1286-L1287">1286&ndash;1287</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L1297">1297</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L1299">1299</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L1301-L1302">1301&ndash;1302</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L1397">1397</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L1502">1502</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L1506">1506</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L1534">1534</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L1536">1536</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L1556-L1559">1556&ndash;1559</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L1600">1600</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L1652">1652</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L1656">1656</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L1746">1746</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L1756-L1757">1756&ndash;1757</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L1759-L1760">1759&ndash;1760</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L1763">1763</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L1765">1765</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L1767-L1768">1767&ndash;1768</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L1802">1802</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L1811">1811</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L1813">1813</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L1853">1853</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L1855">1855</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L1881-L1882">1881&ndash;1882</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L1914">1914</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L1916">1916</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L2045">2045</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L2051">2051</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L2062-L2065">2062&ndash;2065</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L2074-L2078">2074&ndash;2078</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L2129-L2132">2129&ndash;2132</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L2141-L2144">2141&ndash;2144</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L2160">2160</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L2196">2196</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L2200-L2204">2200&ndash;2204</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L2207">2207</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L2244-L2245">2244&ndash;2245</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L2248">2248</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L2252-L2254">2252&ndash;2254</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L2258-L2260">2258&ndash;2260</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L2273">2273</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L2446-L2450">2446&ndash;2450</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L2456">2456</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L2459">2459</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L2462-L2463">2462&ndash;2463</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L2468-L2470">2468&ndash;2470</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L2472">2472</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L2481">2481</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L2483">2483</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L2563-L2565">2563&ndash;2565</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L2567-L2569">2567&ndash;2569</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L2681">2681</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L2686">2686</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L2690">2690</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L2694">2694</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L2734-L2737">2734&ndash;2737</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L2740">2740</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L2743">2743</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L2745-L2746">2745&ndash;2746</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L2791-L2793">2791&ndash;2793</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L2796-L2798">2796&ndash;2798</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L2800">2800</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L2821">2821</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L2919">2919</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L2935">2935</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L2964-L2965">2964&ndash;2965</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L2973">2973</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L2977">2977</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L3029-L3030">3029&ndash;3030</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L3039">3039</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L3043">3043</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L3090">3090</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L3189-L3192">3189&ndash;3192</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L3194">3194</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L3205-L3208">3205&ndash;3208</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L3210">3210</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L3254">3254</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L3271-L3272">3271&ndash;3272</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L3276">3276</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L3278-L3282">3278&ndash;3282</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L3284-L3290">3284&ndash;3290</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L3294-L3296">3294&ndash;3296</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L3298-L3301">3298&ndash;3301</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L3303-L3304">3303&ndash;3304</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L3308-L3309">3308&ndash;3309</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L3311">3311</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L3315-L3320">3315&ndash;3320</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L3332">3332</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L3335-L3336">3335&ndash;3336</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L3340-L3341">3340&ndash;3341</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L3343">3343</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L3345-L3347">3345&ndash;3347</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L3350-L3356">3350&ndash;3356</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L3360-L3361">3360&ndash;3361</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L3363-L3370">3363&ndash;3370</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L3372">3372</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L3375-L3379">3375&ndash;3379</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L3381">3381</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L3393">3393</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L3396">3396</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L3408">3408</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L3420-L3423">3420&ndash;3423</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L3425">3425</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L3437-L3440">3437&ndash;3440</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L3442">3442</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L3497">3497</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L3503">3503</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L3506">3506</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L3513">3513</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L3517">3517</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L3708-L3709">3708&ndash;3709</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L3909">3909</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L4009-L4011">4009&ndash;4011</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L4054-L4059">4054&ndash;4059</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L4133-L4136">4133&ndash;4136</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L4209">4209</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L4216">4216</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L4254">4254</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L4357">4357</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L4392">4392</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L4411">4411</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L4425">4425</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L4439-L4442">4439&ndash;4442</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L4457-L4461">4457&ndash;4461</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L4463-L4464">4463&ndash;4464</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L4466-L4467">4466&ndash;4467</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L4479-L4482">4479&ndash;4482</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L4505">4505</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L4550">4550</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L4556">4556</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L4587-L4595">4587&ndash;4595</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L4597-L4598">4597&ndash;4598</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L4606-L4619">4606&ndash;4619</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L4621-L4622">4621&ndash;4622</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L4624-L4626">4624&ndash;4626</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L4628-L4630">4628&ndash;4630</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L4632-L4635">4632&ndash;4635</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L4637">4637</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L4639">4639</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L4641">4641</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L4651-L4659">4651&ndash;4659</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L4661-L4674">4661&ndash;4674</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L4682-L4685">4682&ndash;4685</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L4693-L4696">4693&ndash;4696</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L4732-L4735">4732&ndash;4735</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L4752-L4757">4752&ndash;4757</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L4759-L4760">4759&ndash;4760</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L4762-L4769">4762&ndash;4769</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L4781-L4783">4781&ndash;4783</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L4986-L4988">4986&ndash;4988</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L4996">4996</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L5018-L5021">5018&ndash;5021</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L5035">5035</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L5062-L5065">5062&ndash;5065</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L5086">5086</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L5116-L5119">5116&ndash;5119</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L5143-L5144">5143&ndash;5144</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L5154">5154</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L5167-L5168">5167&ndash;5168</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L5170">5170</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L5179-L5182">5179&ndash;5182</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L5223-L5224">5223&ndash;5224</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L5242-L5245">5242&ndash;5245</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L5292-L5295">5292&ndash;5295</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L5328">5328</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L5333-L5334">5333&ndash;5334</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L5376">5376</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L5378-L5379">5378&ndash;5379</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L5424-L5425">5424&ndash;5425</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L5431">5431</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L5449-L5450">5449&ndash;5450</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L5465-L5466">5465&ndash;5466</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L5485">5485</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L5498-L5500">5498&ndash;5500</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L5510-L5512">5510&ndash;5512</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L5531">5531</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L5537">5537</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L5574-L5576">5574&ndash;5576</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L5586-L5588">5586&ndash;5588</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L5593">5593</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L5622-L5631">5622&ndash;5631</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L5668">5668</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L5746-L5749">5746&ndash;5749</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L5753-L5754">5753&ndash;5754</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L5758-L5761">5758&ndash;5761</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L5765-L5766">5765&ndash;5766</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L5781-L5783">5781&ndash;5783</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L5785-L5786">5785&ndash;5786</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L5788-L5790">5788&ndash;5790</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L5801">5801</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L5815-L5819">5815&ndash;5819</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L5883-L5885">5883&ndash;5885</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L5887">5887</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L5890">5890</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L5892">5892</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L5895">5895</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L5897-L5899">5897&ndash;5899</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L5901">5901</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L5903-L5904">5903&ndash;5904</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L5908-L5912">5908&ndash;5912</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L5915">5915</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L5918-L5919">5918&ndash;5919</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L5923-L5924">5923&ndash;5924</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L5926-L5931">5926&ndash;5931</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L6010">6010</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L6137">6137</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L6470">6470</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L6510">6510</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L6523">6523</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L6601">6601</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L6603">6603</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L6612">6612</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L6618">6618</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L6679">6679</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L6685">6685</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L6689">6689</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L6691">6691</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L6703">6703</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L6709">6709</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L6714">6714</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L6716-L6717">6716&ndash;6717</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L6719-L6721">6719&ndash;6721</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L6723">6723</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L6731">6731</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L6747">6747</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L6756">6756</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L6762">6762</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L6779">6779</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L6785">6785</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L6789">6789</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L6791-L6792">6791&ndash;6792</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L6794-L6796">6794&ndash;6796</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L6798">6798</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L6806">6806</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L6834">6834</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L6840">6840</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L6844">6844</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L6846">6846</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L6855">6855</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L6861">6861</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L6866">6866</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L6868-L6869">6868&ndash;6869</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L6871-L6873">6871&ndash;6873</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L6875">6875</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L6883">6883</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L6933">6933</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L6935-L6936">6935&ndash;6936</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L6938-L6939">6938&ndash;6939</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L6941">6941</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L6982-L6983">6982&ndash;6983</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L6985-L6986">6985&ndash;6986</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L6993">6993</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L6995">6995</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L7000">7000</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L7079">7079</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L7118-L7119">7118&ndash;7119</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L7125-L7126">7125&ndash;7126</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L7130">7130</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L7207">7207</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L7269">7269</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L7322">7322</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L7454">7454</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L7541-L7542">7541&ndash;7542</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L7544">7544</a>, <a href="https://github.com/demisto/content/blob/2619b19295376d1442b3027378878bf4cd8c0506/Packs/CrowdStrikeFalcon/Integrations/CrowdStrikeFalcon/CrowdStrikeFalcon.py#L7546">7546</a></td></tr><tr><td><b>TOTAL</b></td><td><b>2942</b></td><td><b>648</b></td><td><b>77%</b></td><td>&nbsp;</td></tr></tbody></table></details>

| Tests | Skipped | Failures | Errors | Time |
| ----- | ------- | -------- | -------- | ------------------ |
| 355 | 0 :zzz: | 0 :x: | 0 :fire: | 7.029s :stopwatch: |

author_association: NONE
user: login: content-bot
created_at: 2025-05-12T13:05:12Z
body: Validate summary

Verdict: PR can be force merged from validate perspective? ✅
author_association: CONTRIBUTOR