Technical requirements
See the requirements presented in Chapter 1. To complete the hands-on exercises in this chapter, you will need the following:
- Administrator-level access to a CrowdStrike Falcon Prevent tenant with a 15-day free trial using a business email. Please do not use the Falcon Go trial because the API for Custom IOA was not exposed. You can use a Falcon Prevent or Protect trial: https://www.crowdstrike.com/products/trials/try-falcon-prevent/.
- Access to an Ubuntu Desktop virtual machine with local administrative privileges and internet connectivity running a recommended 8 GB of RAM and 4 CPU cores, and we recommend using Ubuntu 22.04.x LTS: https://ubuntu.com/download/desktop/thank-you?version=22.04.3&architecture=amd64.
- Your choice of code editor, such as VSCode, with the official Python extensions installed.
- Python 3.9+ installed with internet connectivity to the official
pypi.org
repositories and local user privileges to run and modify scripts...