Block Request Category List

  • Versão de lançamento: Australia
  • Atualizado 12 de mar. de 2026
  • 1 min. de leitura

    • Block Request Category List classify observables in ServiceNow® based on the block or allow action selected in the CrowdStrike platform. The Category List provides options to initiate a change request for list approval. This ensures that approvals are routed and processed seamlessly as part of the Block Request capability flow.

    Antes de Iniciar

    Role required: sn_si.analyst

    Nota:
    You must configure the CrowdStrike Falcon Insight configuration tile to use the Block Request Capability for CrowdStrike. For more information on how to configure the integration, see Install and configure CrowdStrike Falcon Insight

    Por Que e Quando Desempenhar Esta Tarefa

    The Block Request Category List includes two Hash Categories.
    • Allow List Entries – Displays observables added to the Allow Hash category.
    • Block List Entries – Displays observables added to the Block Hash category.

    Procedimento

    1. Navigate to All > CrowdStrike Falcon Insight Integration > Block Request Category List.
    2. Select Allow Hash.
    3. Create a change request:
      1. Select Create Change Request.
      2. Select and hold (or right-click) the navigation bar and select Save.
      3. A change Request field is created with the Request number.
    4. Select Approvers:
      1. Select Require Approval.
      2. Select Approvers for adding observable from the search bar.
      3. Select Approvers for Removing Observable from the search bar.

        For a description of the field values, see CrowdStrike Block Request Category List.

    5. Select Update.

    Resultado

    CrowdStrike Falcon Insight block requests can be reviewed, tracked, and responded to in Security Incident Response using standard Block Request capability flow.