Need more info on the “CrowdStrike MCP” listed in Tines

Tines 3B: Ask + Answer
1

Greetings! Working with a customer on their Tines implementation, and they were trying to do CrowdStrike Next-Gen SIEM queries using a “CrowdStrike MCP” referenced in tines - but not sure that’s using the latest CrowdStrike MCP.

Checking to see if anyone from Tines can reach out so I can investigate further (the query building tool calls seem to vary how they build queries, which makes results inconsistent).

Thank you!

2

Hi @macgyver! We’d be happy to help investigate the inconsistent CrowdStrike Next-Gen SIEM queries you’re seeing in 3B.

If you’d like to open a ticket with support, you can submit a request through our contact page so we can investigate this privately and keep sensitive information out of the public thread.

To help us investigate, please include:

  • The CrowdStrike MCP server or reference you’re using, including its version if known.
  • The names of the query-building tools being called.
  • A sanitized example of the inputs, the differing queries generated, and the expected versus actual results.

If there’s anything else I can do to help, don’t hesitate to reach back out!

3

I’ve built the FlaCon MCP Server inside of 3B and run it, then connect to it with an Agent

image
image1318×1520 353 KB