CrowdStrike Falcon Host integration

---
title: CrowdStrike Falcon Host integration
description: The CrowdStrike Falcon Host integration allows you to push observables in a security incident into a watchlist, making them able to generate additional alerts. This integration is an implementation of the CrowdStrike Falcon Host - Publish to Watchlist workflow.
locale: en-US
canonical_url: https://www.servicenow.com/docs/r/australia/security-management/security-incident-response/crowdstrike-falcon-host-landing-page.html
release: australia
product: Security Incident Response
classification: security-incident-response
topic_type: reference
last_updated: "2026-09-10"
reading_time_minutes: 1
breadcrumb: [Security Incident Response integrations, Security Incident Response, Enterprise security case management applications, Security Operations]
---

# CrowdStrike Falcon Host integration

The CrowdStrike Falcon Host integration allows you to push observables in a security incident into a watchlist, making them able to generate additional alerts. This integration is an implementation of the CrowdStrike Falcon Host - Publish to Watchlist workflow.

<table id="simpletable_g33_wwg_vt" class="simpletableBody"><tbody><tr><td>

Explore

 [Security Incident Response integrations](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/security-incident-response/sir_integrations.md)

</td><td>

Set up

 [Get started with the CrowdStrike Falcon Host integration](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/security-incident-response/activate-configure-crowdstrike-host.md)

</td></tr><tr><td>

Use

 [Perform lookups on observables](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/perform-lookups-on-observables.md)

</td><td>

Develop

 -   [ServiceNow Security Operations integration development guidelines](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/c_IntegrationWritingGuidelines.md)
-   [Tips for writing integrations](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/c_BestPractisesIntegrations.md)
-   [Developer training](https://developer.servicenow.com/app.do#!/training/landing)
-   [Developer documentation](https://developer.servicenow.com/app.do#!/documentation)
-   [Find components installed with an application](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/platform-administration/find-components.md)

</td></tr><tr><td>

Troubleshoot and get help

 -   [Integration troubleshooting](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/c_IntegrationTroubleshooting.md)
-   [Ask or answer questions in the Security Operations community](https://community.servicenow.com/community/security-operations)
-   [Search the Known Error Portal for known error articles](https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB0597477)
-   [Contact Customer Service and Support](https://support.servicenow.com/now?draw=case)

</td><td>

 

</td></tr></tbody>
</table>