Allow List Entries
The Allow List Entries display records created through Block Requests with the Allow action. It lists allowed hash observables with a Success or Expired status and provides key details such as observable type, source, status, active state, date added, and complete activity history, including status and expiration updates from the CrowdStrike platform.
Before you begin
Role required: sn_si.analyst
Procedure
Navigate to All > CrowdStrike Falcon Insight Integration > Allow List Entries.
Select Entry Value.
For a description of the field values, see Allow and Block Request List Entries.
Select Submit.