CrowdFMS is a framework developed by CrowdStrike, Inc. that automates the collection and processing of malware samples from VirusTotal using the Private API system. The framework connects to VirusTotal's notification feed to download recent samples that trigger alerts based on the user's YARA rules. It provides automated sample retrieval capabilities, allowing security researchers and analysts to collect relevant malware specimens without manual intervention. Users can configure the framework to execute specific commands based on YARA rule names, enabling customized processing workflows for different types of detected samples. This allows for automated analysis pipelines where different malware families or categories can be processed using appropriate tools and techniques. The framework integrates with VirusTotal's Private API, requiring appropriate API access credentials to function. It focuses on streamlining the sample collection process for organizations that rely on YARA-based detection and need efficient methods to gather and process malware samples for further analysis.