August 1, 2023

Table of Contents

Guidelines on Community Conduct

Managing your Community Profile

Things You Should Never Disclose

Reporting Content

Welcome to the CrowdStrike Community! The Community provides an outlet for our customers to help themselves, as well as each other.

If your question is aimed at discovering how other customers are using Falcon or CrowdStrike products, and self-solving the obstacles our community faces, then the Community is your outlet. The Community does not replace Support cases between a customer user and the Support team to solve a specific problem a specific customer is experiencing.

The CrowdStrike Community provides an outlet for our customers to help themselves, as well as each other. These Discussion Guidelines establish the rules for using the Community and are part of the CrowdStrike Customer Center Terms of Use.

Guidelines on Community Conduct

CrowdStrike considers the Community a safe space to ask questions, answer them, and to express and exchange ideas. By using the Community, you agree to the following guidelines:

1. Be respectful. Be respectful and considerate during your interactions with other members of the Community. Do not use profanity. Do not attack other members on the basis of race, ethnicity, national origin, case, sexual orientation, gender, gender identity, religious or political affiliation, age, or disability.

2. No commercial use. Do not use the Community for commercial purposes, including advertising or sale of products or services, or sending commercial messages to other members.

3. No sharing private information. Do not "out" another user's identity, including posting their contact information, company affiliation, product subscriptions, or any other information not available in their user profile.
   
4. No multiple accounts. Do not create multiple community accounts, any secondary accounts will be banned by the CrowdStrike Community Team.  

Violations of these guidelines can be brought to the Community Team’s attention by reporting the post. More details on how to report a post can be found below.

Managing your Community Profile

⚠  Your Username, Avatar image, Title and About Me will be visible to all Community members, including CrowdStrike Customers, Partners and Employees have access to the Community.

Upon accessing the CrowdStrike Community for the first time, you will be prompted to set your username. Once logged into the Community, you will have the option to update your Community profile, including your Avatar image,Title, and About Me details. Do so by navigating from your Initial in the upper righthand corner of the Community > My Profile > Edit Profile.

For security reasons, many of our customer companies do not wish to be identified as CrowdStrike customers. To maintain anonymity, avoid including personally identifiable information when setting your Username, Avatar image, Title and About Me details. For example, full name, company name, email address or company website should not be included - see full list of things never to disclose below. If you choose to set an Avatar image and wish to remain anonymous, do not include a photo of yourself.

To submit a request that your Community User Account be deleted or submit a question about Account deletion, please reach out to cs-ops@crowdstrike.com.

Things You Should Never Disclose

⚠ Posts you make in the Community will be visible to all Community members, including CrowdStrike Customers, Partners and Employees have access to the Community.

To protect your identity and the privacy of your company as a CrowdStrike customer, here is a list of things you should never disclose in your About Me, your posts, or your comments in the Community discussions. This list is not comprehensive – practice good judgment and operational security – but it does provide some solid examples:

• Your email address. This can provide a way for others to contact you directly, but more importantly the domain of your email address will identify you as a member of your company, and your company as a CrowdStrike customer to other customers.
• Your full name. For some names, it may be easy for others to cross-reference your name with other sources – with a Google or LinkedIn search, for example – and identify the company you are with. This would identify your company as a CrowdStrike customer.
• Your instance's CID or CID with Checksum (CCID) value. This value should always be treated as highly sensitive information. Anyone with this value will be able to attach sensors to your instance.
• API credentials. This value should always be treated as highly sensitive information. Anyone with your API UUIDs, users, keys, or other values, would have the ability to query your instance and gain sensitive information about your environment.
• Usernames, passwords, 2FA details. This might go without saying, but it's important to remember that Community discussion interactions are intended to be between (anonymized) customers. Topics of login issues and credential management may not be suitable for Community discussions at all. Contact Support if you are having these kinds of issues.
• Sensitive network infrastructure information. FQDNs, some IP addresses, proxy information, real hostnames, etc. These could be used to identify the company you work for as a CrowdStrike customer, as well as provide sensitive information that could be exploited.

Whenever engaging in discussions with other customers, always remember to scrub scripts, outputs, example code, or other resources of any information that might identify you or contain sensitive information.

Reporting Content

1. Click the 3 dots to the right of any post or reply
2. Click Report
3. Enter a reason
4. Click Report again

This sends an email notification to the CrowdStrike Community Team, who will edit or delete the post as needed, and work with the poster to ensure they understand why action was taken.

Here are some potential criteria where reporting content is the right thing to do:

• The post is spam, or attempting to market the products and services of the poster or their company.
• The post appears to be automated "bot" content.
• The post is abusive or overly rude or disrespectful to others.
• The post self-discloses sensitive information.

We hope you enjoy your experience interacting with our CrowdStrike Community!