Skip to main content
CrowdStrike Falcon FileVantage Technical Add-On app icon

CrowdStrike Falcon FileVantage Technical Add-On

This technical add-on allows CrowdStrike customers to retrieve Falcon FileVantage events from the public API. Falcon FileVantage is CrowdStrike’s file integrity monitoring solution. It offers central visibility and deep-level contextual data around changes made to relevant files and systems across your organization. Security Operations teams can use defined or custom-made policies and groups to reduce alert fatigue – while keeping an eye on all movements regarding relevant files and registries through broad and detailed dashboards.Built by CrowdStrike
splunk product badge
Default Version 3.0.0

May 19, 2026

Compatibility

Splunk Enterprise, Splunk Cloud

Platform Version: 10.5, 10.4, 10.3, 10.2, 10.1, 10.0, 9.4, 9.3

CIM Version: 8.x, 6.x

Rating
0
(0)

Log in to rate this app

Support
Developer Supported

This technical add-on allows CrowdStrike customers to retrieve Falcon FileVantage events from the public API. Falcon FileVantage is CrowdStrike’s file integrity monitoring solution. It offers central visibility and deep-level contextual data around changes made to relevant files and systems across your organization. Security Operations teams can use defined or custom-made policies and groups to reduce alert fatigue – while keeping an eye on all movements regarding relevant files and registries through broad and detailed dashboards.