Crowdstrike Foundry Integration

Crowdstrike has published several SOAR-like functions leveraging Recorded Future APIs for use in Crowdstrike Foundry. These have not been tested by Recorded Future.

The actions available within Crowdstrike Foundry largely center around ad-hoc enrichment of individual IOCs.

Recorded Future is pursuing enabling workflows for our customers where you can ingest our Risk Lists for correlation within Crowdstrike NG-SIEM. As of August 2025, this function is roadmapped for early access beginning by the end of the year. This page will be updated with a form for beta program signup as soon as the roadmap for early access is finalized.

This content is confidential. Do not distribute or download content in a manner that violates your Recorded Future license agreement. Sharing this content outside of licensed Recorded Future users constitutes a breach of the terms and/or agreement and shall be considered a breach by your organization.
Was this article helpful?
1 out of 2 found this helpful

Articles in this section

See more