CrowdStrike Falcon

par Crowdstrike Holdings

AI Application

Faible confiance

CrowdStrike Falcon is a cloud-managed endpoint and extended detection and response (EDR/XDR) platform that IT and security teams use to protect workstations and servers through one lightweight sensor, with modules such as Falcon Prevent (next-generation antivirus), Falcon Insight XDR and the managed service Falcon Complete. The vendor says the sensor runs on-sensor machine-learning models, while cloud-based machine learning issues 'indicators of attack' that the sensor correlates with local events; it blocks ransomware, fileless attacks and malicious scripts and quarantines files, also when the device is offline, under prevention policies the customer sets. Insight XDR adds investigation leads generated with Charlotte AI. Falcon Complete adds CrowdStrike analysts who act for the customer. In July 2024 a faulty content update for the sensor's behavioural heuristics, which CrowdStrike says are separate from its AI models, crashed Windows hosts worldwide. Hosting regions are not stated on the pages read.