The CrowdStrike Orchestration and Automation initiative builds on CrowdStrike’s recently established Elevate Partner Program, along with the introduction of new and updated APIs via CrowdStrike Falcon Connect, making it easier for partners to seamlessly integrate their solutions with CrowdStrike’s Falcon Platform. This results in advanced capabilities that leverage all of the existing assets within a customer’s environment.
The joint solution allows customers to:
· Automate breach investigation workflows with enhanced endpoint visibility – Security administrators can quickly leverage the power of Falcon Host with historical and real-time queries into endpoint activity, as well as investigating any and all threats leveraging the rich data from Falcon Intelligence. This combination provides customers with smarter and deeper visibility when investigating potential breaches.
· Orchestrate rapid threat response – Customers can respond to breaches in an automated fashion with improved accuracy and speed. Leveraging Falcon Connect, customers can contain endpoints to only the resources necessary to remediate and protect them from further damage. Falcon Intelligence gives greater visibility throughout the entire incident response lifecycle.
· Continually reveals new threats utilising CrowdStrike threat data – Enhances customer threat detection capabilities. CrowdStrike’s Falcon Host endpoint integration allows customers to unfold potential threats more quickly and accurately by leveraging information from the CrowdStrike Threat Graph™ database. Enriching that information with CrowdStrike’s Falcon Intelligence threat feed data enables a level of protection previously not achievable.
“CrowdStrike’s partners share the same goal as we do, which is to stop breaches,” said Upesh Patel, vice president, Business and Corporate Development for CrowdStrike. “This new initiative helps our shared customers manage the entire security lifecycle more efficiently and effectively in the midst of a cyber attack.”
