feat(crowdstrike): version bounds and relative dates on device_count (1.7.0)

Browse Source

agent_version_lt/lte/gt/gte count the sensors below or above a build. FQL
compares versions as text, so the script scrolls the matching device IDs,
reads their versions and compares number by number. first_seen / last_seen
bounds also take a duration relative to now (24h, 7d).

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01TgjV26rz6VcP262dX4vBrD

...

This commit is contained in:

Guillaume BOURGEOIS

2026-10-19 20:09:31 +00:00

parent 6d36b4e958

commit 9fbe592421

2 changed files with 100 additions and 8 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download Patch File Download Diff File Expand all files Collapse all files

integrations/crowdstrike/manifest.yaml

+10 -6

File diff suppressed because one or more lines are too long