CrowdStrike Outage: Bitlocker Key Retrieval Bot for Slack and Microsoft Teams

Slack Workbot implementation

Prerequisites

1. Setup Workbot for Slack: https://docs.workato.com/workbot/workbot.html
2. Install the Bitlocker connector

How it works

Introduction to Bitlocker Key Retrieval Bot

Welcome to the Bitlocker Key Retrieval bot! This Slack bot is designed to help you retrieve Bitlocker keys for your devices.

Features:

1. Retrieve via Key ID: Click on the “Retrieve via Key ID” button to fetch Bitlocker keys using the specific Key ID associated with the encrypted drive.
2. Retrieve via Device Name: Click the “Retrieve by Device” button to choose from a dropdown list of devices registered under your name. Select the device for which you need the Bitlocker key.

How it works:

• Click on the preferred option based on your available information.
• For “Retrieve by Key ID,” enter the Key ID associated with the encrypted drive.

• For “Retrieve by Device,” select the device from the dropdown list provided.

• The bot will securely fetch the Bitlocker key information and display it directly in Slack for your reference.

Let’s simplify your Bitlocker key retrieval process with our Slack bot!

 

Sample recipes

1. Bot home loader
2. Bot command – Retrieve using Key ID
3. Bot command – Retrieve using Device ID (step 1) & Retrieve using Device ID (step 2)

 

---

 

Microsoft Teams Workbot implementation

Prerequisites

1. Setup Workbot for Microsoft Teams: https://docs.workato.com/workbot-for-teams/workbot.html 
2. Install the Bitlocker connector

How it works

Introduction to Bitlocker Key Retrieval Bot

Welcome to the Bitlocker Key Retrieval bot! This Microsoft Teams bot is designed to help you retrieve Bitlocker keys for your devices.

Features:

1. Retrieve via Key ID: Select `Bitlocker_recovery_key_id` to fetch Bitlocker keys using the specific Key ID associated with the encrypted drive.
2. Retrieve via Device Name: Select “Bitlocker_recovery_key_by_device” to choose from a dropdown list of devices registered under your name. Select the device for which you need the Bitlocker key.

 

How it works:

• Enter help to display a list of bot commands. Click on the preferred option based on your available information.
• For “Bitlocker_recovery_key_id”, enter the Key ID associated with the encrypted drive.

 

• For “Bitlocker_recovery_key_by_device”, select the device from the dropdown list provided

 

• The bot will securely fetch the Bitlocker key information and display it directly in Slack for your reference.

 

Sample recipes

1. Bitlocker: Recover key by ID
2. Bitlocker: Recover key by device

 

---

Setting up your application in MS Azure Portal

1) Login to https://portal.azure.com/#home > App registrations

 

2) Select New registration > Fill up the Name, Single tenant, Redirect URI: Web and https://www.workato.com/oauth/callback > Register

3) Take down the Application (client) ID and Directory (tenant) ID > Click Add a certificate or secret

 

4) Click New Client secret > Enter a description > copy the generated value. This value will not be retrievable again after you exit this page.

5) Click Authentication > Check Access tokens under Implicit grant and hybrid flows > Save.

6) Click API permissions > Add a permission > Microsoft Graph > Delegated permissions > Scroll down and check offline_access under OpenId permissions, BitlockerKey.Read.All under BitlockerKey and Device.Read.All under Device > Add permissions. Grant admin consent if required.

7) Create a new connection using the Bitlocker connector > Fill in the Client ID, Client Secret, and Tenant ID from earlier > Log in using your Microsoft account.