> ## Documentation Index
> Fetch the complete documentation index at: https://docs.leen.dev/llms.txt
> Use this file to discover all available pages before exploring further.

# CrowdStrike EDR Instructions

> Instructions on how to generate credentials for CrowdStrike's Endpoint Alerts and Response integration with the required permissions.

For Leen to authenticate with CrowdStrike, we require the following:

1. **Base URL**: The base URL that corresponds to the cloud where your integration is hosted. It has the format of `https://api[<deployment>].crowdstrike.com`. Most likely one of the following based on the region:
   * US-1: [https://api.crowdstrike.com](https://api.crowdstrike.com)
   * US-2: [https://api.us-2.crowdstrike.com](https://api.us-2.crowdstrike.com)
   * EU-1: [https://api.eu-1.crowdstrike.com](https://api.eu-1.crowdstrike.com)
   * US-GOV-1: [https://api.laggar.gcw.crowdstrike.com](https://api.laggar.gcw.crowdstrike.com)
2. **Client ID**: OAuth2 based Client ID.
3. **Client Secret**: Oauth2 based Client Secret.

Leen requires certain access permissions(scopes). These credentials are associated with the scopes.

## User setup and Permissions

Here is how you can create API keys with the minimum required permissions for the integration:

<Steps>
  <Step title="Create an API Client with scopes">
    In the CrowdStrike Falcon console, navigate to the `API Clients and Keys` page and click on `Create API client`.

    Here, enter the details to define your API client - `Client Name`(required, can be anything eg. `leen`) and `Description`(optional).

    Along with that we setup the necessary API Scopes:

    1. Alerts - Read
    2. Hosts - Read
    3. Host Groups - Read
    4. User Management - Read
    5. Prevention Policies - Read
    6. Device Control Policies - Read
    7. Response Policies - Read
    8. Sensor Update Policies - Read

    Click `Create` to save the API client and generate the `Client ID` and `Client Secret`.

    <Warning>Record your API client secret somewhere safe. After the credential window is closed, the secret is no longer visible.</Warning>

    <img src="https://mintcdn.com/leen/vQ2Rhs44KY1LGMJC/images/crowdstrike-create-api-client.png?fit=max&auto=format&n=vQ2Rhs44KY1LGMJC&q=85&s=5e7c1919c71ba451afdde7d6f8de18a4" alt="" width="2038" height="1320" data-path="images/crowdstrike-create-api-client.png" />
  </Step>

  <Step title="Enter Credentials">
    After creating the API Client credentials, Copy the Base URL, Client ID and Client Secret into the CrowdStrike EDR connector in their respective fields.
  </Step>
</Steps>