With the surge in remote workforces and ever-increasing cloud adoption, modern security operation centres (SOCs) are faced with increased attack surface blind spots and an uptick in operational challenges due in part to lack of interoperability across point security solutions.
Security professionals are spending too much time and resources investigating increased alert volume impacting their productivity and efficiency in addition to compromising their security posture.
CrowdStrike claims its customers desire a strong connection between the Falcon endpoint protection platform and the network detection and response (NDR) ecosystem to boost their security efficiency and efficacy with shared contextual telemetry and indicators of compromise (IOCs).
To this end, CrowdStrike announced a series of integrations with CrowdStrike Security Cloud that correlates the CrowdStrike Falcon platform’s enriched endpoint and workload telemetry with network telemetry for greater end-to-end visibility and contextual insights to combat threats.
These integrations with leaders in NDR and network threat analytics (NTA) help mutual customers build a cohesive platform tailored to protect and defend against any threats across all enterprise software components, wherever those threats are encountered.
With CrowdStrike’s integrations with ExtraHop, Vectra, Awake Security, Corelight, Darktrace, IronNet and ThreatWarrior, mutual customers can now integrate CrowdStrike’s industry-leading next-generation antivirus (NGAV) and endpoint detection and response (EDR) with NDR solutions that monitor east-west traffic and communications within the network itself and help surface any blind spots that span across network and cloud environments.
Benefits of integration
- Concise and actionable insights based on coordination of alerts and telemetry across CrowdStrike and leading NDR solutions
- Integrated data feeds that enable enhanced response capabilities to identify and isolate risks faster with cloud-scale artificial intelligence (AI)
- Enhanced threat intelligence to pinpoint novel attack methods with identification of new attack signatures
- Customizable response actions are available for partners to execute leveraging Real-Time Response capabilities (RTR) on the Falcon platform, based on early attack behaviours observed on the network
- Open ecosystem of purpose-built integrations for cloud-delivered extensibility and flexibility
“The increased complexity in corporate networks, coupled with the heightened sophistication of cyber threats, can quickly overwhelm today’s security analysts. While many point solutions promise comprehensive security, security teams are often not only left with blind spots in their environments but also siloed tools and data in the IT stacks that put security teams at risk of missing or overlooking critical alerts,” said Amol Kulkarni, chief product officer, CrowdStrike.
