Skip to content

[crowdstrike] Disable relationship guessing in reports and add configurable option to enable it #4719

@romain-filigran

Description

@romain-filigran

Use case

The connector currently implements automatic relationship creation between all entities contained within a report. This "relationship guessing":

  • Automatically creates relationships between every entity found in a report
  • Is always enabled with no way to disable it and cannot be controlled by users
  • Introduces noise into the data by creating potentially inaccurate relationships based on reports.

Implement a configurable option (report_guess_relations) to control relationship guessing. Default to False.

Metadata

Metadata

Assignees

Labels

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions