r/crowdstrike

I am in desperate need to surface all the activity from a recent engagement we had. I thought the fastest way, without agentworks, is to stand up a CrowdStrike MCP server, create a Copilot agent and (the unknown) give it access to the MCP to hunt based on my NLPs. I am hoping others in this forum have done this or similar setups and can give me some insights, gotchas, or other advise on how to make this work.

thanks in advance

How are you keeping track of secret expiration? We get hit by this every once in a while, no matter the documentation I'm keeping, or the documentation the admin of the tech is keeping. Does your team have an automated way of keeping up w/ secret expirations, or are you better at keeping up manually?