Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
6 changes: 3 additions & 3 deletions bash/containers/falcon-container-sensor-pull/README.md
Original file line number Diff line number Diff line change
Expand Up @@ -81,7 +81,7 @@ To check your version of cURL, run the following command: `curl --version`
## Auto-Discovery of Falcon Cloud Region

> [!IMPORTANT]
> Auto-discovery is only available for [us-1, us-2, eu-1] regions.
> Auto-discovery is only available for [us-1, us-2, us-3, eu-1] regions.

The script supports auto-discovery of the Falcon cloud region. If the cloud region is not provided, the script will attempt to auto-discover it. If you want to set the cloud region manually, or if your region does not support auto-discovery, you set the `FALCON_CLOUD` environment variable or use the `-r, --region` flag.

Expand All @@ -97,7 +97,7 @@ Required Flags:

Optional Flags:
-f, --cid <FALCON_CID> Falcon Customer ID
-r, --region <FALCON_CLOUD> Falcon Cloud Region [us-1|us-2|eu-1|us-gov-1|us-gov-2] (Default: us-1)
-r, --region <FALCON_CLOUD> Falcon Cloud Region [us-1|us-2|us-3|eu-1|us-gov-1|us-gov-2] (Default: us-1)
-c, --copy <REGISTRY/NAMESPACE> Registry to copy the image to, e.g., myregistry.com/mynamespace
By default, the image name and tag are appended. Use --copy-omit-image-name
and/or --copy-custom-tag to change that behavior.
Expand Down Expand Up @@ -146,7 +146,7 @@ Help Options:
| `-f`, `--cid <FALCON_CID>` | `$FALCON_CID` | `None` (Optional) | CrowdStrike Customer ID (CID). *If not provided, CID will be auto-detected.* |
| `-u`, `--client-id <FALCON_CLIENT_ID>` | `$FALCON_CLIENT_ID` | `None` (Required) | CrowdStrike API Client ID |
| `-s`, `--client-secret <FALCON_CLIENT_SECRET>` | `$FALCON_CLIENT_SECRET` | `None` (Required) | CrowdStrike API Client Secret |
| `-r`, `--region <FALCON_CLOUD>` | `$FALCON_CLOUD` | `us-1` (Optional) | CrowdStrike Region. <br>\**Auto-discovery is only available for [`us-1, us-2, eu-1`] regions.* |
| `-r`, `--region <FALCON_CLOUD>` | `$FALCON_CLOUD` | `us-1` (Optional) | CrowdStrike Region. <br>\**Auto-discovery is only available for [`us-1, us-2, us-3, eu-1`] regions.* |
| `-c`, `--copy <REGISTRY/NAMESPACE>` | `$COPY` | `None` (Optional) | Registry you want to copy the sensor image to. Example: `myregistry.com/mynamespace`. <br> *\*By default, the image name and tag are appended. Use `--copy-omit-image-name` and/or `--copy-custom-tag` to change that behavior.* |
| `-v`, `--version <SENSOR_VERSION>` | `$SENSOR_VERSION` | `None` (Optional) | Specify sensor version to retrieve from the registry |
| `-p`, `--platform <SENSOR_PLATFORM>` | `$SENSOR_PLATFORM` | `None` (Optional) | Specify sensor platform to retrieve from the registry |
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -18,7 +18,7 @@ Required Flags:

Optional Flags:
-f, --cid <FALCON_CID> Falcon Customer ID
-r, --region <FALCON_CLOUD> Falcon Cloud Region [us-1|us-2|eu-1|us-gov-1|us-gov-2] (Default: us-1)
-r, --region <FALCON_CLOUD> Falcon Cloud Region [us-1|us-2|us-3|eu-1|us-gov-1|us-gov-2] (Default: us-1)
-c, --copy <REGISTRY/NAMESPACE> Registry to copy the image to, e.g., myregistry.com/mynamespace
By default, the image name and tag are appended. Use --copy-omit-image-name
and/or --copy-custom-tag to change that behavior.
Expand Down Expand Up @@ -73,6 +73,7 @@ cs_cloud() {
case "${FALCON_CLOUD}" in
us-1) echo "api.crowdstrike.com" ;;
us-2) echo "api.us-2.crowdstrike.com" ;;
us-3) echo "api.us-3.crowdstrike.com" ;;
eu-1) echo "api.eu-1.crowdstrike.com" ;;
us-gov-1) echo "api.laggar.gcw.crowdstrike.com" ;;
us-gov-2) echo "api.us-gov-2.crowdstrike.mil" ;;
Expand Down
8 changes: 4 additions & 4 deletions bash/install/README.md
Original file line number Diff line number Diff line change
Expand Up @@ -68,7 +68,7 @@ export FALCON_CLIENT_SECRET="YYYYYYYYY"
#### Auto-Discovery of Falcon Cloud Region

> [!IMPORTANT]
> Auto-discovery is only available for [us-1, us-2, eu-1] regions.
> Auto-discovery is only available for [us-1, us-2, us-3, eu-1] regions.

The scripts support auto-discovery of the Falcon cloud region. If the `FALCON_CLOUD` environment variable is not set, the script will attempt to auto-discover it. If you want to set the cloud region manually, or if your region does not support auto-discovery, you can set the `FALCON_CLOUD` environment variable:

Expand Down Expand Up @@ -124,7 +124,7 @@ Authentication:
- FALCON_CLOUD (default: unset)
The cloud region where your CrowdStrike Falcon instance is hosted.
Required if using FALCON_ACCESS_TOKEN.
Accepted values are ['us-1', 'us-2', 'eu-1', 'us-gov-1', 'us-gov-2'].
Accepted values are ['us-1', 'us-2', 'us-3', 'eu-1', 'us-gov-1', 'us-gov-2'].

Other Options
- FALCON_CID (default: auto)
Expand Down Expand Up @@ -166,7 +166,7 @@ Other Options
- FALCON_SENSOR_CLOUD (default: unset)
To pin the cloud region for unified sensor installations.
This allows specifying the cloud region for unified sensors at installation time.
Accepted values are [us-1|us-2|eu-1|us-gov-1|us-gov-2].
Accepted values are [us-1|us-2|us-3|eu-1|us-gov-1|us-gov-2].

- FALCON_UNINSTALL (default: false)
To uninstall the falcon sensor.
Expand Down Expand Up @@ -279,7 +279,7 @@ Authentication:
- FALCON_CLOUD (default: unset)
The cloud region where your CrowdStrike Falcon instance is hosted.
Required if using FALCON_ACCESS_TOKEN.
Accepted values are ['us-1', 'us-2', 'eu-1', 'us-gov-1', 'us-gov-2'].
Accepted values are ['us-1', 'us-2', 'us-3', 'eu-1', 'us-gov-1', 'us-gov-2'].

Other Options:
- FALCON_MAINTENANCE_TOKEN (default: unset)
Expand Down
10 changes: 7 additions & 3 deletions bash/install/falcon-linux-install.sh
Original file line number Diff line number Diff line change
Expand Up @@ -24,7 +24,7 @@ Authentication:
- FALCON_CLOUD (default: unset)
The cloud region where your CrowdStrike Falcon instance is hosted.
Required if using FALCON_ACCESS_TOKEN.
Accepted values are ['us-1', 'us-2', 'eu-1', 'us-gov-1', 'us-gov-2'].
Accepted values are ['us-1', 'us-2', 'us-3', 'eu-1', 'us-gov-1', 'us-gov-2'].

Other Options
- FALCON_CID (default: auto)
Expand Down Expand Up @@ -66,7 +66,7 @@ Other Options
- FALCON_SENSOR_CLOUD (default: unset)
To pin the cloud region for unified sensor installations.
This allows specifying the cloud region for unified sensors at installation time.
Accepted values are [us-1|us-2|eu-1|us-gov-1|us-gov-2].
Accepted values are [us-1|us-2|us-3|eu-1|us-gov-1|us-gov-2].

- FALCON_UNINSTALL (default: false)
To uninstall the falcon sensor.
Expand Down Expand Up @@ -605,6 +605,7 @@ cs_cloud() {
case "${cs_falcon_cloud}" in
us-1) echo "api.crowdstrike.com" ;;
us-2) echo "api.us-2.crowdstrike.com" ;;
us-3) echo "api.us-3.crowdstrike.com" ;;
eu-1) echo "api.eu-1.crowdstrike.com" ;;
us-gov-1) echo "api.laggar.gcw.crowdstrike.com" ;;
us-gov-2) echo "api.us-gov-2.crowdstrike.mil" ;;
Expand Down Expand Up @@ -1073,6 +1074,9 @@ if [ -n "$FALCON_SENSOR_CLOUD" ]; then
us-2)
echo "us-2"
;;
us-3)
echo "us-3"
;;
eu-1)
echo "eu-1"
;;
Expand All @@ -1083,7 +1087,7 @@ if [ -n "$FALCON_SENSOR_CLOUD" ]; then
echo "us-gov-2"
;;
*)
die "Unrecognized SENSOR_CLOUD: ${FALCON_SENSOR_CLOUD} value must be one of : [us-1|us-2|eu-1|us-gov-1|us-gov-2]"
die "Unrecognized SENSOR_CLOUD: ${FALCON_SENSOR_CLOUD} value must be one of : [us-1|us-2|us-3|eu-1|us-gov-1|us-gov-2]"
;;
esac
)
Expand Down
3 changes: 2 additions & 1 deletion bash/install/falcon-linux-uninstall.sh
Original file line number Diff line number Diff line change
Expand Up @@ -24,7 +24,7 @@ Authentication:
- FALCON_CLOUD (default: unset)
The cloud region where your CrowdStrike Falcon instance is hosted.
Required if using FALCON_ACCESS_TOKEN.
Accepted values are ['us-1', 'us-2', 'eu-1', 'us-gov-1', 'us-gov-2'].
Accepted values are ['us-1', 'us-2', 'us-3', 'eu-1', 'us-gov-1', 'us-gov-2'].

Other Options:
- FALCON_MAINTENANCE_TOKEN (default: unset)
Expand Down Expand Up @@ -185,6 +185,7 @@ cs_cloud() {
case "${cs_falcon_cloud}" in
us-1) echo "api.crowdstrike.com" ;;
us-2) echo "api.us-2.crowdstrike.com" ;;
us-3) echo "api.us-3.crowdstrike.com" ;;
eu-1) echo "api.eu-1.crowdstrike.com" ;;
us-gov-1) echo "api.laggar.gcw.crowdstrike.com" ;;
us-gov-2) echo "api.us-gov-2.crowdstrike.mil" ;;
Expand Down
8 changes: 4 additions & 4 deletions bash/migrate/README.md
Original file line number Diff line number Diff line change
Expand Up @@ -70,7 +70,7 @@ export NEW_FALCON_CID="AAAAAAAAAAA" # Optional, will be auto-detected if not pr
#### Auto-Discovery of Falcon Cloud Region

> [!IMPORTANT]
> Auto-discovery is only available for [us-1, us-2, eu-1] regions.
> Auto-discovery is only available for [us-1, us-2, us-3, eu-1] regions.

The scripts support auto-discovery of the Falcon cloud region. If the `[OLD|NEW]FALCON_CLOUD` environment variable is not set, the script will attempt to auto-discover it. If you want to set the cloud region manually, or if your region does not support auto-discovery, you can set the `[OLD|NEW]FALCON_CLOUD` environment variable:

Expand Down Expand Up @@ -101,7 +101,7 @@ Old CID Authentication:

- OLD_FALCON_CLOUD (default: 'us-1')
The cloud region where your old CrowdStrike Falcon instance is hosted.
Accepted values are ['us-1', 'us-2', 'eu-1', 'us-gov-1', 'us-gov-2'].
Accepted values are ['us-1', 'us-2', 'us-3', 'eu-1', 'us-gov-1', 'us-gov-2'].

New CID Authentication:
- NEW_FALCON_CLIENT_ID (default: unset) [Required]
Expand All @@ -116,7 +116,7 @@ New CID Authentication:

- NEW_FALCON_CLOUD (default: 'us-1')
The cloud region where your new CrowdStrike Falcon instance is hosted.
Accepted values are ['us-1', 'us-2', 'eu-1', 'us-gov-1', 'us-gov-2'].
Accepted values are ['us-1', 'us-2', 'us-3', 'eu-1', 'us-gov-1', 'us-gov-2'].

- NEW_FALCON_CID (default: unset)
Your CrowdStrike Falcon customer ID (CID) for the new CID.
Expand Down Expand Up @@ -181,7 +181,7 @@ Other Options
- FALCON_SENSOR_CLOUD (default: unset)
To pin the cloud region for unified sensor installations.
This allows specifying the cloud region for unified sensors at installation time.
Accepted values are [us-1|us-2|eu-1|us-gov-1|us-gov-2].
Accepted values are [us-1|us-2|us-3|eu-1|us-gov-1|us-gov-2].

- ALLOW_LEGACY_CURL (default: false)
To use the legacy version of curl; version < 7.55.0.
Expand Down
12 changes: 8 additions & 4 deletions bash/migrate/falcon-linux-migrate.sh
Original file line number Diff line number Diff line change
Expand Up @@ -28,7 +28,7 @@ Old CID Authentication:

- OLD_FALCON_CLOUD (default: 'us-1')
The cloud region where your old CrowdStrike Falcon instance is hosted.
Accepted values are ['us-1', 'us-2', 'eu-1', 'us-gov-1', 'us-gov-2'].
Accepted values are ['us-1', 'us-2', 'us-3', 'eu-1', 'us-gov-1', 'us-gov-2'].

New CID Authentication:
- NEW_FALCON_CLIENT_ID (default: unset) [Required]
Expand All @@ -43,7 +43,7 @@ New CID Authentication:

- NEW_FALCON_CLOUD (default: 'us-1')
The cloud region where your new CrowdStrike Falcon instance is hosted.
Accepted values are ['us-1', 'us-2', 'eu-1', 'us-gov-1', 'us-gov-2'].
Accepted values are ['us-1', 'us-2', 'us-3', 'eu-1', 'us-gov-1', 'us-gov-2'].

- NEW_FALCON_CID (default: unset)
Your CrowdStrike Falcon customer ID (CID) for the new CID.
Expand Down Expand Up @@ -108,7 +108,7 @@ Other Options
- FALCON_SENSOR_CLOUD (default: unset)
To pin the cloud region for unified sensor installations.
This allows specifying the cloud region for unified sensors at installation time.
Accepted values are [us-1|us-2|eu-1|us-gov-1|us-gov-2].
Accepted values are [us-1|us-2|us-3|eu-1|us-gov-1|us-gov-2].

- ALLOW_LEGACY_CURL (default: false)
To use the legacy version of curl; version < 7.55.0.
Expand Down Expand Up @@ -281,6 +281,7 @@ cs_cloud() {
case "${cs_falcon_cloud}" in
us-1) echo "api.crowdstrike.com" ;;
us-2) echo "api.us-2.crowdstrike.com" ;;
us-3) echo "api.us-3.crowdstrike.com" ;;
eu-1) echo "api.eu-1.crowdstrike.com" ;;
us-gov-1) echo "api.laggar.gcw.crowdstrike.com" ;;
us-gov-2) echo "api.us-gov-2.crowdstrike.mil" ;;
Expand Down Expand Up @@ -1316,6 +1317,9 @@ if [ -n "$FALCON_SENSOR_CLOUD" ]; then
us-2)
echo "us-2"
;;
us-3)
echo "us-3"
;;
eu-1)
echo "eu-1"
;;
Expand All @@ -1326,7 +1330,7 @@ if [ -n "$FALCON_SENSOR_CLOUD" ]; then
echo "us-gov-2"
;;
*)
die "Unrecognized SENSOR_CLOUD: ${FALCON_SENSOR_CLOUD} value must be one of : [us-1|us-2|eu-1|us-gov-1|us-gov-2]"
die "Unrecognized SENSOR_CLOUD: ${FALCON_SENSOR_CLOUD} value must be one of : [us-1|us-2|us-3|eu-1|us-gov-1|us-gov-2]"
;;
esac
)
Expand Down
2 changes: 1 addition & 1 deletion powershell/install/README.md
Original file line number Diff line number Diff line change
Expand Up @@ -27,7 +27,7 @@ Ensure the following API scopes are enabled:
## Auto-Discovery of Falcon Cloud Region

> [!IMPORTANT]
> Auto-discovery is only available for [us-1, us-2, eu-1] regions.
> Auto-discovery is only available for [us-1, us-2, us-3, eu-1] regions.

The scripts support auto-discovery of the Falcon cloud region. If the `FalconCloud` parameter is not set, the script will attempt to auto-discover the cloud region. If you want to set the cloud region manually, or if your region does not support auto-discovery, you can set the `FalconCloud` parameter.

Expand Down
3 changes: 2 additions & 1 deletion powershell/install/falcon_windows_install.ps1
Original file line number Diff line number Diff line change
Expand Up @@ -76,7 +76,7 @@ Updated 2021-10-22 to include 'sensor_version' property when matching policy to
[System.Diagnostics.CodeAnalysis.SuppressMessageAttribute('PSReviewUnusedParameter', 'DeleteScript')]
param(
[Parameter(Position = 1)]
[ValidateSet('autodiscover', 'us-1', 'us-2', 'eu-1', 'us-gov-1', 'us-gov-2')]
[ValidateSet('autodiscover', 'us-1', 'us-2', 'us-3', 'eu-1', 'us-gov-1', 'us-gov-2')]
[string] $FalconCloud = 'autodiscover',

[Parameter(Position = 2)]
Expand Down Expand Up @@ -195,6 +195,7 @@ begin {
'autodiscover' { 'https://api.crowdstrike.com'; break }
'us-1' { 'https://api.crowdstrike.com'; break }
'us-2' { 'https://api.us-2.crowdstrike.com'; break }
'us-3' { 'https://api.us-3.crowdstrike.com'; break }
'eu-1' { 'https://api.eu-1.crowdstrike.com'; break }
'us-gov-1' { 'https://api.laggar.gcw.crowdstrike.com'; break }
'us-gov-2' { 'https://api.us-gov-2.crowdstrike.mil'; break }
Expand Down
3 changes: 2 additions & 1 deletion powershell/install/falcon_windows_uninstall.ps1
Original file line number Diff line number Diff line change
Expand Up @@ -85,7 +85,7 @@ param(
[switch] $RemoveHost,

[Parameter(Position = 8)]
[ValidateSet('autodiscover', 'us-1', 'us-2', 'eu-1', 'us-gov-1', 'us-gov-2')]
[ValidateSet('autodiscover', 'us-1', 'us-2', 'us-3', 'eu-1', 'us-gov-1', 'us-gov-2')]
[string] $FalconCloud = 'autodiscover',

[Parameter(Position = 9)]
Expand Down Expand Up @@ -181,6 +181,7 @@ begin {
'autodiscover' { 'https://api.crowdstrike.com'; break }
'us-1' { 'https://api.crowdstrike.com'; break }
'us-2' { 'https://api.us-2.crowdstrike.com'; break }
'us-3' { 'https://api.us-3.crowdstrike.com'; break }
'eu-1' { 'https://api.eu-1.crowdstrike.com'; break }
'us-gov-1' { 'https://api.laggar.gcw.crowdstrike.com'; break }
'us-gov-2' { 'https://api.us-gov-2.crowdstrike.mil'; break }
Expand Down
2 changes: 1 addition & 1 deletion powershell/migrate/README.md
Original file line number Diff line number Diff line change
Expand Up @@ -25,7 +25,7 @@ The following **API scopes** are required:
## Auto-Discovery of Falcon Cloud Region

> [!IMPORTANT]
> Auto-discovery is only available for [us-1, us-2, eu-1] regions.
> Auto-discovery is only available for [us-1, us-2, us-3, eu-1] regions.

The script supports auto-discovery of the Falcon cloud region. If the `[New|Old]FalconCloud` parameter is not set, the script will attempt to auto-discover the cloud region. If you want to set the cloud region manually, or if your region does not support auto-discovery, you can set the `[New|Old]FalconCloud` parameter.

Expand Down
5 changes: 3 additions & 2 deletions powershell/migrate/falcon_windows_migrate.ps1
Original file line number Diff line number Diff line change
Expand Up @@ -76,7 +76,7 @@ param(
[ValidatePattern('\w{40}')]
[string] $NewFalconClientSecret,
[Parameter(Position = 3)]
[ValidateSet('autodiscover', 'us-1', 'us-2', 'eu-1', 'us-gov-1', 'us-gov-2')]
[ValidateSet('autodiscover', 'us-1', 'us-2', 'us-3', 'eu-1', 'us-gov-1', 'us-gov-2')]
[string] $NewFalconCloud = 'autodiscover',
[Parameter(Position = 4)]
[string] $NewMemberCid,
Expand All @@ -87,7 +87,7 @@ param(
[ValidatePattern('\w{40}')]
[string] $OldFalconClientSecret,
[Parameter(Position = 7)]
[ValidateSet('autodiscover', 'us-1', 'us-2', 'eu-1', 'us-gov-1', 'us-gov-2')]
[ValidateSet('autodiscover', 'us-1', 'us-2', 'us-3', 'eu-1', 'us-gov-1', 'us-gov-2')]
[string] $OldFalconCloud = 'autodiscover',
[Parameter(Position = 8)]
[string] $OldMemberCid,
Expand Down Expand Up @@ -992,6 +992,7 @@ function Get-FalconCloud ([string] $xCsRegion) {
'autodiscover' { 'https://api.crowdstrike.com'; break }
'us-1' { 'https://api.crowdstrike.com'; break }
'us-2' { 'https://api.us-2.crowdstrike.com'; break }
'us-3' { 'https://api.us-3.crowdstrike.com'; break }
'eu-1' { 'https://api.eu-1.crowdstrike.com'; break }
'us-gov-1' { 'https://api.laggar.gcw.crowdstrike.com'; break }
'us-gov-2' { 'https://api.us-gov-2.crowdstrike.mil'; break }
Expand Down
Loading