Preventing friendly fire from Claude Code's YOLO mode: an agentic CrowdStrike automation powered by Tracecat
A design pattern for proactive EDR-based guardrails. A CrowdStrike Custom IOA blocks Claude Code’s –dangerously-skip-permissions (YOLO mode) flag at the endpoint, wired into an agentic Tracecat workflow that …
Investigating compromised packages without the tab sprawl: an agentic Tracecat automation that searches code repos and endpoints for exposure using Sourcegraph and CrowdStrike MCPs
A Tracecat automation that searches for malicious-package exposure using Sourcegraph (code) and CrowdStrike Falcon (endpoints) in parallel via MCP, then outputs both results into a Tracecat case and a Slack summary.
Automating Chrome History Collection using CrowdStrike and Tracecat - Part 3: Professional Polish
Complete the automated forensic workflow with proper cleanup, session termination, and final documentation. Part 3 covers removing temporary files without destroying evidence, graceful RTR session closure, and …
Automating Chrome History Collection using CrowdStrike and Tracecat - Part 2: The Collection Engine
Build the core evidence collection engine for automated Chrome history forensics. Part 2 covers integrity hashing, file copying with validation checkpoints, evidence packaging, and upload to RTR cloud storage.
Automating Chrome History Collection using CrowdStrike and Tracecat - Part 1: Foundation & Discovery
Learn how to automate Chrome browser history collection from macOS devices using CrowdStrike RTR and Tracecat SOAR. Part 1 covers workflow foundations, device validation, and user discovery.