Falcon Intelligence
Threat intelligence and attacker profiles
Falcon Intelligence delivers actionable threat intelligence on more than 200 APT groups, eCrime campaigns, and attack techniques, based on unique data from millions of protected endpoints. The system automatically enriches alerts in the Falcon platform with adversary context, MITRE ATT&CK mapping, and campaign history. The dedicated Intelligence Portal provides access to analytical reports, IOC feeds, and custom alerts on threats targeting the customer’s industry.
Enterprise-grade protection compliant with regulatory requirements and security standards
Fast deployment with minimal resource overhead
Dedicated support from a certified partner
Easy integration with your existing infrastructure
Key features
- Profiles of more than 200 nation-state and eCrime adversaries with activity timelines and TTPs
- Real-time IOC feeds (IP, domain, hash) in STIX/TAXII format for automatic integration
- Automatic enrichment of Falcon alerts with adversary attribution and campaign context
- Custom alerts on threats targeting a specific industry and geographic region
- Sandbox and malware analysis with detonation of suspicious files and URLs
Business benefits
- 80% faster alert prioritization through automatic context
- Proactive defense through early warning of campaigns targeting the industry
- Understanding of adversary motivation and capability for strategic planning
- Reduction of dwell time through faster identification of TTPs used by known APT groups
- Elimination of the need to build an internal threat intelligence team
Why CrowdStrike?
A global leader in endpoint protection and threat intelligence. The Falcon platform uses artificial intelligence and machine learning to detect and stop threats in real time. CrowdStrike offers EDR/XDR, threat hunting, incident response, and one of the best threat intelligence teams in the world.
Need Falcon Intelligence in your organization?
As a certified CrowdStrike partner, we'll help you deploy and configure the solution.