Rapid Response sample Foundry app

Triage with MITRE Attack sample Foundry app

Scalable RTR sample Foundry app

Functions with Python sample Foundry app

Category Blocking sample Foundry app

Threat Intel Import to NG-SIEM sample Foundry app

Falcon IdP Domain and Connector Monitoring sample Foundry app

Anomali ThreatStream sample Foundry app

A basic "Hello World" app with Foundry

Use Falcon Foundry to create a custom workflow action available in Falcon Fusion SOAR. The workflow action uses REST APIs to work with data.

Charlotte Toolkit sample Foundry app

Collections Toolkit sample Foundry app

Threat Intelligence Detections Enrichment sample Foundry app

This repo is a template for new Foundry samples on GitHub

Insider Risk SailPoint sample Foundry app

Create a threat hunting dashboard and set it as your app's home page. Schedule an email to regularly provide the security team with a list of hosts exhibiting suspicious DNS activity.

ServiceNow CMDB Ingest For Identity Protection sample Foundry app

Insider Risk Workday sample Foundry app

OpenRouter Toolkit sample Foundry app

In this tutorial, you will create a Foundry app that enriches Falcon detections with third-party data. The app uses VirusTotal to scan the IP address associated with a detection and displays the data on the Next-Gen SIEM endpoint detection details page of the Falcon console.