Language:JapaneseEnglish

crowdstrike-falcon-fusion Codex Plugin

Author
CrowdStrike
Category
Developer Tools
Topics
Security, Auth & Compliance · Enterprise Business Platforms · Monitoring & Observability
Version
1.3.0
First cataloged
2026-09-03 (UTC)
Explanation last updated
2026-10-02 (UTC)
Source (GitHub) last updated
2026-10-16 (UTC) (yesterday)

The explanation below is AI-generated. Please verify it against the sources.

This plugin provides a set of skills for building, deploying, and running CrowdStrike Falcon Fusion automation workflows inside AI coding assistants such as Claude Code. According to its README, it covers discovering valid action IDs from the live Falcon API, writing and validating workflow YAML against the platform schema, importing and releasing workflow definitions to a customer tenant (CID), triggering and monitoring executions, and managing Falcon Next-Gen SIEM lookup files. It requires a CrowdStrike account with Workflow API access, configured through environment variables or a local credential profile. An orchestrator skill interprets natural-language requests and routes them to the appropriate sub-skill for authoring, deployment, or execution. A companion plugin handles cases that need a full Falcon Foundry application rather than a standalone workflow.

About the service

Falcon Fusion is the SOAR-style workflow automation capability within CrowdStrike's Falcon Next-Gen SIEM security platform, reached through CrowdStrike's cloud API using client ID and secret credentials tied to a specific tenant (CID).

What you can do with crowdstrike-falcon-fusion

  • Search the live Falcon Fusion action catalog to find real, valid action IDs for use in workflows
  • Author workflow definitions in YAML and validate them against the platform's schema before deployment
  • Check for duplicate workflows, then import and release a definition to a target CID
  • Trigger a workflow execution with a payload and monitor its status, logs, and failures
  • Create, update, or append Falcon Next-Gen SIEM lookup files used in CQL match() queries
  • Get routed to the companion crowdstrike-falcon-foundry plugin when a request needs a full app with custom UI or functions

Sources

History of crowdstrike-falcon-fusion

  • Codex Plugin Updated plugin manifest (plugin.json) of crowdstrike-falcon-fusion
  • Codex Plugin Updated version of crowdstrike-falcon-fusion (1.2.0 → 1.3.0)
  • Codex Plugin Updated version of crowdstrike-falcon-fusion (1.1.0 → 1.2.0)
  • Codex Plugin Added crowdstrike-falcon-fusion

Back to list