CrowdStrike Falcon New Alert Beta to Claude Create Message (with Attachments)

CrowdStrike Falcon
Claude

How this workflow works

Step 1

New Alert Beta•CrowdStrike Falcon

Polls CrowdStrike Alerts using the created_timestamp FQL range and emits full alert entities created between since and till.

Step 2

Create Message (with Attachments)•Claude

Sends a prompt to a Claude model along with zero or more attachments — images (PNG/JPEG/GIF/WEBP), PDFs, or plain text/CSV/JSON/Markdown files — supplied as a Base64 string, a Base64 array, an attachment object, or a URL array. Attachments are normalized into Claude's Messages API content blocks automatically. Claude's API does not accept Word/Excel/PowerPoint files directly; convert these to PDF first.

CrowdStrike Falcon

New Alert Beta

CrowdStrike Falcon

Trigger
Claude

Create Message (with Attachments)

Claude

Action

Your pipeline isn't going to build itself

Deploy your first AI agent today — free, no credit card required. See results in your first session.

14-day free trial · Setup under 30 min · Cancel anytime