---
title: "CrowdStrike Exposure Management"
slug: "crowdstrike-exposure-management"
updated: 2026-10-26T14:40:45Z
published: 2026-10-26T14:40:45Z
canonical: "docs.databee.buzz/crowdstrike-exposure-management"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://docs.databee.buzz/llms.txt
> Use this file to discover all available pages before exploring further.

# CrowdStrike Exposure Management

CrowdStrike Exposure Management helps organizations identify and reduce their attack surface by providing real-time visibility into vulnerabilities and risks across environments. Refer to [official document](https://www.crowdstrike.com/en-us/platform/exposure-management/) of CrowdStrike Exposure Management.

**Integration Method:** API **Tables**: Vulnerability Finding (2002), Device Inventory Info (5001)

This integration supports the following events.

| **Event** | **Description** |
| --- | --- |
| Vulnerabilities | Get detailed information about all vulnerabilities. |
| Assets | Get detailed information about all the assets. |

This integration supports the following versions.

|  |  |
| --- | --- |
| CrowdStrike API version | v1.0 |

## Prerequisites

- The user should ensure that scopes are properly assigned to the API token for successful data retrieval.
- The user should have access to the DataBee console.

## Configuration Overview

1. Generate client credentials with the required scopes.
2. Add the [CrowdStrike Exposure Management data feed](/docs/crowdstrike-exposure-management#_Databee_Configuration) in the DataBee console with the below parameters.

| **DataBee Parameter** | **CrowdStrike Exposure Management Parameter** |
| --- | --- |
| Client Id | [Client Id](/docs/crowdstrike-exposure-management#client_id_and_client_secret) |
| Client Secret | [Secret](/docs/crowdstrike-exposure-management#client_id_and_client_secret) |
| API Base URL | [Base URL](/docs/crowdstrike-exposure-management#client_id_and_client_secret) |

## CrowdStrike Exposure ManagementConfiguration

Start by creating the API Client and get the necessary information for API authentication such as Client ID and Client Secret.

1. Log on to **CrowdStrike** Platform.
2. Navigate to the top-left **Navigation Menu** > **Support and resources** > **API clients and keys**. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/crowdstrike-exposure-management-image-y2qx0l9s.png?sv=2026-02-06&spr=https&st=2026-10-30T11%3A55%3A58Z&se=2026-10-30T12%3A55%3A58Z&sr=c&sp=r&sig=i1MY%2BEEK2Mrwy%2BQLpH%2Fm%2BKEM1OC%2BiOaDL5xVvoirJiM%3D)
3. Click on the **Create API client** button. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/crowdstrike-exposure-management-image-yzmo5tld.png?sv=2026-02-06&spr=https&st=2026-10-30T11%3A55%3A58Z&se=2026-10-30T12%3A55%3A58Z&sr=c&sp=r&sig=i1MY%2BEEK2Mrwy%2BQLpH%2Fm%2BKEM1OC%2BiOaDL5xVvoirJiM%3D)
4. Enter **Client name** to identify API clients. Also add **Description** that describes the purpose of the API client, if desired. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/crowdstrike-exposure-management-image-s9fdqyyd.png?sv=2026-02-06&spr=https&st=2026-10-30T11%3A55%3A58Z&se=2026-10-30T12%3A55%3A58Z&sr=c&sp=r&sig=i1MY%2BEEK2Mrwy%2BQLpH%2Fm%2BKEM1OC%2BiOaDL5xVvoirJiM%3D)
5. The following scope needs to be added for the endpoint to function properly:

| **Event** | **Permission** |
| --- | --- |
| Vulnerabilities | Vulnerabilities: Read |
| Assets | Assets: Read |
| 6. Select **Assets-Read** scope to collect **alert** logs. |  |
| ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/crowdstrike-exposure-management-image-2hsg71ir.png?sv=2026-02-06&spr=https&st=2026-10-30T11%3A55%3A58Z&se=2026-10-30T12%3A55%3A58Z&sr=c&sp=r&sig=i1MY%2BEEK2Mrwy%2BQLpH%2Fm%2BKEM1OC%2BiOaDL5xVvoirJiM%3D) |  |
| 7. Select **Vulnerabilities-Read** scope to collect **detection** logs. |  |
| ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/crowdstrike-exposure-management-image-kqicro0b.png?sv=2026-02-06&spr=https&st=2026-10-30T11%3A55%3A58Z&se=2026-10-30T12%3A55%3A58Z&sr=c&sp=r&sig=i1MY%2BEEK2Mrwy%2BQLpH%2Fm%2BKEM1OC%2BiOaDL5xVvoirJiM%3D) |  |
| 8. Click on the **Create** button. |  |
| ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/crowdstrike-exposure-management-image-xzpqdv9t.png?sv=2026-02-06&spr=https&st=2026-10-30T11%3A55%3A58Z&se=2026-10-30T12%3A55%3A58Z&sr=c&sp=r&sig=i1MY%2BEEK2Mrwy%2BQLpH%2Fm%2BKEM1OC%2BiOaDL5xVvoirJiM%3D) |  |
| 9. Copy the **Base URL**, **Client ID**, and **Client Secret** for later use, then click **Done**. |  |

> **Note:**
> 
> You will not be able to view this again after you complete this step. Ensure that you copy it before closing the notification.

## DataBeeConfiguration

1. Login to the DataBee UI, navigate to **Data** > **Data Feeds** and click the **Add New Data Feed** button. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/crowdstrike-exposure-management-image-ne7hc87b.png?sv=2026-02-06&spr=https&st=2026-10-30T11%3A55%3A58Z&se=2026-10-30T12%3A55%3A58Z&sr=c&sp=r&sig=i1MY%2BEEK2Mrwy%2BQLpH%2Fm%2BKEM1OC%2BiOaDL5xVvoirJiM%3D)
2. Search for **CrowdStrike Exposure Management** and click it as shown below. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/crowdstrike-exposure-management-image-ump01jqg.png?sv=2026-02-06&spr=https&st=2026-10-30T11%3A55%3A58Z&se=2026-10-30T12%3A55%3A58Z&sr=c&sp=r&sig=i1MY%2BEEK2Mrwy%2BQLpH%2Fm%2BKEM1OC%2BiOaDL5xVvoirJiM%3D)
3. Click on the **API Ingest** option for the collection method. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/crowdstrike-exposure-management-image-h3eixuc3.png?sv=2026-02-06&spr=https&st=2026-10-30T11%3A55%3A58Z&se=2026-10-30T12%3A55%3A58Z&sr=c&sp=r&sig=i1MY%2BEEK2Mrwy%2BQLpH%2Fm%2BKEM1OC%2BiOaDL5xVvoirJiM%3D)
4. Enter **feed contact information**. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/crowdstrike-exposure-management-image-v0easz6q.png?sv=2026-02-06&spr=https&st=2026-10-30T11%3A55%3A58Z&se=2026-10-30T12%3A55%3A58Z&sr=c&sp=r&sig=i1MY%2BEEK2Mrwy%2BQLpH%2Fm%2BKEM1OC%2BiOaDL5xVvoirJiM%3D)
5. In the next dialog, enter the following:
6. **Authorization Method:** OAuth2
7. **API Base URL**: Paste the [Base URL](/docs/crowdstrike-exposure-management#client_id_and_client_secret)
8. **Client Key**: Paste the [Client ID](/docs/crowdstrike-exposure-management#client_id_and_client_secret)
9. **Client Secret:** Paste the [Secret](/docs/crowdstrike-exposure-management#client_id_and_client_secret)
10. **Token URL**: Replace the with your tenant specific information obtained from the [Base URL](/docs/crowdstrike-exposure-management#client_id_and_client_secret).
11. **Event Types**: Preselected for all the event types that integration pulls. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/crowdstrike-exposure-management-image-vjxrtrxr.png?sv=2026-02-06&spr=https&st=2026-10-30T11%3A55%3A58Z&se=2026-10-30T12%3A55%3A58Z&sr=c&sp=r&sig=i1MY%2BEEK2Mrwy%2BQLpH%2Fm%2BKEM1OC%2BiOaDL5xVvoirJiM%3D)
12. **Entity Type Filter** *(optional)*: Select **Managed**, **Unmanaged**, or **Unsupported** to limit ingestion to assets of that entity type. Leave unset to ingest all entity types.
13. Click on the **Test Connection** button once details are added.

![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/crowdstrike-exposure-management-image-40rnqbgm.png?sv=2026-02-06&spr=https&st=2026-10-30T11%3A55%3A58Z&se=2026-10-30T12%3A55%3A58Z&sr=c&sp=r&sig=i1MY%2BEEK2Mrwy%2BQLpH%2Fm%2BKEM1OC%2BiOaDL5xVvoirJiM%3D) 7. Click on the **Submit** button once Test Connection is successful.

![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/Screenshot 2026-08-24 at 10.35.53 AM.png?sv=2026-02-06&spr=https&st=2026-10-30T11%3A55%3A58Z&se=2026-10-30T12%3A55%3A58Z&sr=c&sp=r&sig=i1MY%2BEEK2Mrwy%2BQLpH%2Fm%2BKEM1OC%2BiOaDL5xVvoirJiM%3D)

# 

## Troubleshooting Tips

- If you’re facing **invalid_client** or **unauthorized_client** issues, this might be possibly due to incorrect credentials.Ensure the token is pasted correctly. Since you cannot view the token after the 1st time, re-create the token, paste it on a text editor to ensure no spaces or unexpected characters are included and reconfigure the DataBee feed.
- If you are facing **403** response code, this might be possibly due to missing permissions. Check that CrowdStrike API credentials have the necessary [scope](/docs/crowdstrike-exposure-management#scope). If needed, update the API credentials scope using the CrowdStrike platform, save the changes, and retry the integration.