CrowdStrikeFalcon_check.py

#!/usr/bin/env python3
import os
import caracara
import sys

hosts = caracara.HostsToolbox(key=os.environ["FALCON_CLIENT_ID"],secret=os.environ["FALCON_CLIENT_SECRET"],verbose=True)

with open(sys.argv[1]) as doc:
    for _hostname in doc.readlines():
        target_aid = hosts.host.find_host_aid(hostname=_hostname.strip())
        if target_aid:
            hostname = hosts.host.get_host(target_aid)[0]["hostname"]
        else:
            print(f'{_hostname.strip()} is not in CSFalcon')