List Detections

v1Verified

crowdstrike.list_detections

securitygeneral

Lists Falcon detections filtered by severity, status, date range, and hostname. Returns detection IDs with summary metadata.

Technical Specs

External Calls

https://api.crowdstrike.com/detects/queries/detects/v1

Data Classification

general

MFA Timeout

—

Enforcement

Rust / fail-closed

Add this snippet to your agent manifest file to enable this tool.

{
  "tools": [
    {
      "name": "crowdstrike.list_detections",
      "version": "1"
    }
  ]
}

8 agents currently use this tool

All calls are logged to the tamper evident audit chain

Ed25519 signed descriptor

Rust enforcement, fail-closed

Every call logged to tamper evident chain

—

MFA not required

Use this tool in your agent. Sign in to add it to a new or existing agent.

Via CLI

agentsight tool add \
  --name crowdstrike.list_detections \
  --version 1