Allow and Block Request List Entries
Field descriptions for Allow and Block List properties outline how each field controls the behavior of observables when they are added to Allow or Block lists within the CrowdStrike Falcon Insight integration.
| Field | Description |
|---|---|
| Category List | CrowdStrike category list to which this entry belongs. |
| Source | Integration source from which this block request originated. |
| Entry Value | Value of the indicator to be blocked or allowed. |
| Observable | Record associated with this block request |
| Observable Type | Type of observable. Options include: - SHA256 - MD5 |
| Date Added On | TimeStamp when the indicator action was updated in CrowdStrike. |
| Active | Option to Indicate whether this block request entry is currently active. |
| Status | Current status of the block request life-cycle. |
| Requested By User | User who requested the block or allow operation |
| Additional Information | Additional context or details related to the block request |