CrowdStrike and GitLab integration

Save yourself the work of writing custom integrations for CrowdStrike and GitLab and use n8n instead. Build adaptable and scalable Cybersecurity, and Development workflows that work with your technology stack. All within a building experience you will love.

Get started

See n8n in action

How to connect CrowdStrike and GitLab

Step 1: Create a new workflow
Step 2: Add and configure nodes
Step 3: Connect
Step 4: Customize and extend your integration
Step 5: Test and activate your workflow

Step 1: Create a new workflow and add the first step

In n8n, click the "Add workflow" button in the Workflows tab to create a new workflow. Add the starting point – a trigger on when your workflow should run: an app event, a schedule, a webhook call, another workflow, an AI chat, or a manual trigger. Sometimes, the HTTP Request node might already serve as your starting point.

CrowdStrike and GitLab integration: Create a new workflow and add the first step

Step 2: Add and configure GitLab and CrowdStrike (using the HTTP Request node)

You can find GitLab and CrowdStrike nodes in the nodes panel and drag them onto your workflow canvas. GitLab node comes with pre-built credentials and supported actions. CrowdStrike can be set up with the HTTP Request node using a pre-configured credential type. The HTTP Request node makes custom API calls to CrowdStrike. Configure GitLab and CrowdStrike nodes one by one: input data on the left, parameters in the middle, and output data on the right.

GitLab and CrowdStrike integration: Add and configure GitLab and CrowdStrike nodes

Step 3: Connect GitLab and CrowdStrike

A connection establishes a link between GitLab and CrowdStrike (or vice versa) to route data through the workflow. Data flows from the output of one node to the input of another. You can have single or multiple connections for each node.

GitLab and CrowdStrike integration: Connect GitLab and CrowdStrike

Step 4: Customize and extend your GitLab and CrowdStrike integration

Use n8n's core nodes such as If, Split Out, Merge, and others to transform and manipulate data. Write custom JavaScript or Python in the Code node and run it as a step in your workflow. Connect GitLab and CrowdStrike with any of n8n’s 1000+ integrations, and incorporate advanced AI logic into your workflows.

GitLab and CrowdStrike integration: Customize and extend your GitLab and CrowdStrike integration

Step 5: Test and activate your GitLab and CrowdStrike workflow

Save and run the workflow to see if everything works as expected. Based on your configuration, data should flow from GitLab to CrowdStrike or vice versa. Easily debug your workflow: you can check past executions to isolate and fix the mistake. Once you've tested everything, make sure to save your workflow and activate it.

GitLab and CrowdStrike integration: Test and activate your GitLab and CrowdStrike workflow

Build your own CrowdStrike and GitLab integration

Create custom CrowdStrike and GitLab workflows by choosing triggers and actions. Nodes come with global operations and settings, as well as app-specific parameters that can be configured. You can also use the HTTP Request node to query data from any app or service with a REST API.

Supported API Endpoints for CrowdStrike

Hosts
Alerts
Detection
Users

GetDeviceDetails

Retrieve device details for a specific host.

GET

/devices/entities/devices/v1

QueryDevicesByFilter

Query devices by filter.

GET

/devices/queries/devices/v1

PerformDeviceAction

Perform a device action such as 'Contain' or 'Lift Containment'.

POST

/devices/entities/devices-actions/v2

GetDeviceSnapshots

Get snapshots of device status.

GET

/devices/entities/snapshots/v1

GetDeviceDetailsById

Retrieve device details for a specific host by device ID.

GET

/devices/entities/devices/v1?ids={device_id}

To set up CrowdStrike integration, add the HTTP Request node to your workflow canvas and authenticate it using a predefined credential type. This allows you to perform custom operations, without additional authentication setup. The HTTP Request node makes custom API calls to CrowdStrike to query the data you need using the URLs you provide.

See the example here

Take a look at the CrowdStrike official documentation to get a full list of all API endpoints

GetAlerts

Retrieve a list of alerts.

GET

/alerts/queries/alerts/v1

GetAlertDetails

Retrieve details of a specific alert.

GET

/alerts/entities/alerts/v1

AcknowledgeAlert

Acknowledge a specific alert.

POST

/alerts/entities/alerts-actions/v1

UpdateAlert

Update details of a specific alert.

PATCH

/alerts/entities/alerts/v1

DeleteAlert

Delete a specific alert.

DELETE

/alerts/entities/alerts/v1

See the example here

Take a look at the CrowdStrike official documentation to get a full list of all API endpoints

QueryDetections

Retrieve detections based on provided query parameters.

GET

/detects/queries/detects/v1

GetDetectionDetails

Retrieve details for a specific detection.

GET

/detects/entities/detects/v1

UpdateDetection

Update details of a specific detection.

PATCH

/detects/entities/detects/v1

AcknowledgeDetection

Acknowledge a specific detection.

POST

/detects/entities/detects-actions/v1

DeleteDetection

Delete a specific detection.

DELETE

/detects/entities/detects/v1

See the example here

Take a look at the CrowdStrike official documentation to get a full list of all API endpoints

GetUsers

Retrieve a list of users.

GET

/users/queries/users/v1

GetUserDetails

Retrieve details of a specific user.

GET

/users/entities/users/v1

CreateUser

Create a new user.

POST

/users/entities/users/v1

UpdateUser

Update details of a specific user.

PATCH

/users/entities/users/v1

DeleteUser

Delete a specific user.

DELETE

/users/entities/users/v1

See the example here

Take a look at the CrowdStrike official documentation to get a full list of all API endpoints

GitLab supported actions

File
Issue
Release
Repository
User

Create

Create a new file in repository

Delete

Delete a file in repository

Edit

Edit a file in repository

Get

Get the data of a single file

List

List contents of a folder

Create

Create a new issue

Create Comment

Create a new comment on an issue

Edit

Edit an issue

Get

Get the data of a single issue

Lock

Lock an issue

Create

Create a new release

Delete

Delete a release

Get

Get a release

Get Many

Get many releases

Update

Update a release

Get

Get the data of a single repository

Get Issues

Returns issues of a repository

Get Repositories

Returns the repositories of a user

CrowdStrike and GitLab integration details

CrowdStrike is a cybersecurity company known for its cloud-based endpoint security platform, Falcon. It provides advanced threat detection and response solutions, leveraging artificial intelligence and machine learning to protect organizations from cyberattacks and breaches.

CrowdStrike credentials docs

Using predefined credential types

See CrowdStrike integrations

Related categories

Cybersecurity

GitLab is the best tool for teams of developers. It brings them together from planning to production to decrease cycle times, save costs, boost security, and enhance their output. It serves as an open-source code repository and collaborative software development platform for major DevOps and DevSecOps projects.

GitLab node docs + examples

GitLab credential docs

See GitLab integrations

Related categories

Development

Other integrations with GitLab