Register Firefox Collector

In the Falcon console, click the menu icon and go to

AI detection and response > Collectors .

1. On the Collectors page, click + Collector.

2. Choose Browser as the collector type, then select Firefox and click Next.

3. On the Add a Collector screen:

   • Collector Name - Enter a descriptive name for the collector to appear in dashboards and reports.
   • Logging - Select whether to log incoming (prompt) data and model responses, or only metadata submitted to AIDR.
   • Policy (optional) - Assign a policy to apply to incoming data and model responses.

   Use the assigned policy to determine which detections run on data sent to AIDR. Policies define rules for detecting malicious activity, sensitive data exposure, topic violations, and other risks in AI interactions.

   • You can select an existing policy available for this collector type or create policies on the

     Policies page.

     The selected policy name appears under the dropdown. After you save the collector registration, this label becomes a link to the corresponding policy page.

   • You can also select No Policy, Log Only. Without a policy, AIDR records activity for visibility and analysis without applying detection rules.

4. In the Sites section, configure how policy rules apply to each AI provider domain.

   note:

   You can also use Site Access rules in your browser collector policy to block, redirect, report, or ignore site visits for any domain.

   Site Access policy rules require CrowdStrike-hosted AIDR browser extension version 1.x.x.

   The Sites section lists supported AI provider websites that the extension monitors. You can set each site to one of these modes to apply or override the collector-level policy rules:

   • Use Policy (default) - Apply the collector's policy rules to this site. AIDR analyzes and logs user prompts and AI system responses. AIDR blocks or transforms user prompts according to the policy rules. To review your collector policy rules, find the assigned policy on the Policies page in the AIDR console.
   • Monitor Only - Apply the collector's policy rules to this site in report-only mode. AIDR analyzes and logs user prompts and AI system responses. The user experience isn't affected.
   • Discovery - Skip sending AI traffic to AIDR. Only record that users visited the site.
   • Disabled - Ignore this site entirely. The extension doesn't monitor or log activity on this site.

5. Click Save.

tip:

Start with one of the preconfigured policies.

• No Policy, Log Only
  • Record user activity.
  • Skip risk detection.
• Browser Monitor
  • Record user activity.
  • Detect risks in AI traffic with preconfigured detectors. Save event logs.
• Browser Protect
  • Record user activity.
  • Detect risks in AI traffic with preconfigured detectors. Save event logs.
  • Apply preconfigured policy actions to user input.

You can modify your policy configuration, or clone it to define a custom policy.

note:

Regardless of the selected policy, browser collector output rules always run in Report Only Mode and won't modify AI responses shown to users.

This opens the collector details page, where you can:

• View installation instructions for the collector type on the Install tab.
• Update the collector name, logging preference, and policy assignment.
• Click the policy link to view the policy details.
• View the collector configuration activity logs.

To return to the collector details page later, select your collector from the list on the Collectors page.