Service Graph Connector for Crowdstrike - potential use and fatures

[mcmanney]

Hi all,

for a project under implementation, I find myself having to compare multiple assets and multiple data, belonging to crowdstrike and servicenow respectively, in order to create an automated process capable of providing information regarding certain assets on which interventions are required. To be exact, the proposed architecture I have to work on is that the systems managed by the organization are reported in their entirety in the CMDB you SN, while in the Tenant of CS are all those machines covered so far by the properly installed agent. The automaton I want to manage involves the ability to collide these two sets to evdientiate the gap in assets that represents all those systems that are mistakenly not covered by the sensor.
for achieving the goal, I was thinking of using the Service Graph Connector for Crowdstrike integration module, so that I would be able to import the complete table containing the list of hosts with CS installed, which would then be discounted against the CMDB list of total infrastructure systems contained in the SN CMDB.
Unfortunately, I cannot realize whether this import and comparison is actually achievable through the use of the integration module and SN features. Could someone, with more experience, help me understand the feasibility of this proposal?

[Amansingh]

Hi @mcmanney ,

Service Graph connector enables importing CMDB data which is tracked by agents in CS into ServiceNow. Utility contains OOTB field mappings and etl definitions with dummy mapping with some CMDB Classes. You can extend this definition with other classes of CMDB in case required. 

It's not clear in your question about what comparison you're expecting from CrowdStrike. You can fetch information of CMDBs monitored by sensors/agents into ServiceNow. For any missing cmdb information for a specific class, you will need to perform additional integration with a different source.

Kind Regards,

Amansingh

[Fevzi Yerlikaya]

You can likely use the Service Graph Connector for Crowdstrike to import the host list and compare it with ServiceNow's CMDB. Just make sure to map the data correctly.

[rajat4366740656]

Could you please elaborate more on this like in which place we can map the host list(in Device or application ..etc)