Query CrowdStrike Falcon Spotlight for vulnerability exposure data via the API

Steps

1. Create an OAuth2 API client scoped for Spotlight vulnerabilities (read) in the Falcon console and obtain a bearer token from the token endpoint.
2. Use the vulnerabilities search operation with an FQL filter (e.g. filtering by cve.id, severity, or host status) to page through matching vulnerability entities.
3. Retrieve full vulnerability details, including CVE metadata and exploit/priority rating, for specific vulnerability IDs.
4. Call the remediation details operation with remediation IDs referenced on vulnerabilities to get patch or configuration guidance.
5. Paginate using the API's continuation-token pattern for large environments rather than offset-based paging to avoid missing results as data changes.