CrowdStrike / falcon-scripts

Scripts to streamline the deployment and use of the CrowdStrike Falcon sensor
The Unlicense
130 stars 79 forks source link

Added support to pass OAuth token. #246

Closed i-shubham01 closed 5 months ago

i-shubham01 commented 6 months ago

Description

This pull request introduces token support to enhance the security of the Falcon sensor download script. Previously, organisations/user were required to pass client ID and client secret, which posed a potential security risk. Now, users can leverage a token for authentication, reducing the risk of sensitive information exposure during the download process.

Changes Made

Motivation

The motivation behind this change is to mitigate the risk associated with passing client ID and client secret directly in the script. Using tokens provides a more secure method of authentication for organisations using this script.

Usage

User can export token if token is passed client_id and client_secret is not required.

export FALCON_OAUTH_TOKEN="eyJhb****"