This tutorial describes how you can send a webhook from Crowdstike when a detection or incident has happen to iHub and iHub will create an Alert in OpsGenie and inform the one on call.

...

1. Creata an Integration

2. Select Incoming webbook as trigger

3. Add a Action: Webhook action

4. Enter the URL: https://api.opsgenie.com/v2/alerts

5. Method: POST

6. Expand headers and add Key: Authorization and Value: GenieKey {your_key}

7. Click on Variables and add the one below:
   

   Image Removed

8. In the body paste in

{
    "message": "CrowdStrike Incident {{name}}",
    "alias": "CrowdStrike Incident",
    "description":"ID: {{id}} URL:{{url}}",
    "responders":[
        {"id":"tt-xx-yy-zz-bb", "type":"team"}
    ],
    "visibleTo":[
        {"id":"tt-xx-yy-zz-bb", "type":"team"}
    ],
    "tags": ["CrowdStrike"],
    "priority":"P1"
}

Expand the instructions for Integrations Hub for Jira Data Center

Crowdstrike steps

1. Goto All apps

2. Click on Webhooks

3. Add a new webhook
   

   Image Modified

4. Enter the URL

...

iHub cloud incoming webhook url

...

1. shown in the Incoming Webhooks page

2. Add a HMAC key (wont be needed since it does not encrypt the message)

3. Click save

4. Goto Workflows

5. Add a new workflow, select the trigger to be detection or incident

6. On the then clause select Notifications → Webhook and select the webhook created above.

...