The following are some useful CrowdStrike properties that can be used in an FQL expression to filter assets. An OR expression can also be leveraged with comma separated expressions. Multiple expressions can be combined for more complex filtering by adding a + between expressions. Falcon Query Languageįalcon Query Language (FQL) follows the syntax. The filter follows the Falcon Query Lanugage (FQL) syntax. runZero provides a filter option that allows you to scope the import to a subset of hosts based on foreign attributes provided by CrowdStrike. By default, the integration will import all Falcon hosts. The integration will merge existing assets with Falcon data when the MAC address or hostname matches and create new assets where there is not a match. RunZero integrates with CrowdStrike by importing data through the CrowdStrike Falcon API. Cybersecurity Maturity Model Certification (CMMC).Cybersecurity Capability Maturity Model (C2M2).CISA Binding Operational Directive (BOD) 23-01.Tracking hardware and operating system retirement.Atlassian Insight & Jira Service Management.Pricing: The company uses a subscription pricing model. Intelligence can be consumed directly into enterprise systems in real time.ĭelivery: CrowdStrike is cloud-delivered endpoint protection. Intelligence: Falcon Intelligence delivers APIs and feeds for integration with SIEM, IDS, and Threat Intelligence platforms. Security qualifications: PCI DSS, HIPAA, NIST, FFIEC, PCI Forensics, NSA-CIRA, SOC 2, CSA-START, AMTSO

Analysis is done of more than 70 adversaries, their tactics, techniques and procedures, and associated campaigns. CrowdStrike boasts top ten players among the largest global companies, as well as the top ten financial institutions, top ten healthcare providers and top ten energy companies.Īpplicable metrics: Using its cloud-native architecture, the Falcon platform collects and analyzes more than 30 billion endpoint events per day from millions of sensors deployed across 176 countries. Markets and use cases: Customers include ADP, Rackspace, Shutterstock, The Center for Strategic International Studies, Cardinal Innovation Healthcare and Telstra. It delivers and unifies IT hygiene, AV, EDR, managed threat hunting and threat intelligence. Product description: The CrowdStrike Falcon Insight platform offers cloud-delivered endpoint protection. It is privately held, with funding from the likes of Google Capital, Warburg Pincus, and Accel. Co-founders George Kurtz and Dmitri Alperovitch combined the endpoint protection with intelligence to pinpoint adversaries.

See the complete list of top Endpoint Detection and Response solutions.Ĭompany description: CrowdStrike was founded in 2011 to fix sophisticated attacks that were forcing businesses into the headlines and could not be solved with existing malware-based defenses.

Crowdstrike falcon mac