CrowdStrike Inc., the leader in cloud-delivered endpoint protection,† announced the addition of Real Time Response and Real Time Query features to its†Falcon Insight EDR solution. These new features empower incident responders with immediate access to systems across the distributed enterprise so that they can rapidly investigate incidents, take decisive action to eradicate threats with surgical precision and get back to business quickly. The new features build on the†CrowdStrike Falcon platform’s†capability to stop threats on endpoints by adding unparalleled ability to respond quickly and minimize costs associated with handling advanced cyber attacks.
When a cyber attack is discovered, Security Operations Center (SOC) teams have two urgent goals: to understand the threat quickly and then, to take action to remediate it. According to†CrowdStrike’s 2018 Global Threat Report,†the average intrusion takes less than two hours to pivot from an initial point of attack toward the ultimate objective. This “breakout time” statistic shows how little time defenders have to investigate and eject the attacker from the network, before the incident escalates into a breach. Beyond its market-leading prevention capabilities, CrowdStrike addresses this challenge by providing deep, direct access to all the systems responders need to accomplish quick and effective remediation within the “breakout time” window.
By leveraging the existing Falcon sensor, cloud and console, CrowdStrike is able to deliver Real Time Response and Real Time Query capabilities to systems anywhere in the world, with no incremental cost in terms of performance or infrastructure. CrowdStrike Falcon’s EDR capabilities ensure customers have comprehensive, real-time and historical visibility of everything that is executed in their environment. The Real Time Response feature adds powerful interactive capabilities, delivering instant visibility into the local file system, registry, network, and more. It also allows responders to close the door on threats by killing malicious processes and removing remaining traces left behind by the attacker. Real Time Query delivers the ultimate visibility and control to responders, empowering them through custom-tailored information collection and response actions.
“With the launch of this capability, CrowdStrike is empowering SOC teams to remediate security-related incidents faster, more effectively, and more efficiently than ever before,” says George Kurtz, CrowdStrike’s co-founder and chief executive officer. “CrowdStrike Falcon Insight Real Time Response and Real Time Query help customers be more strategic with their incident response efforts, take decisive remediation steps quickly to minimize damage from cyber incidents, while operating with full knowledge of what is happening in their environment.”
For more information about CrowdStrike’s Spring Platform launch, read a blog by George Kurtz, CrowdStrike’s CEO,†here.
Visit CrowdStrike during the†RSA†Conference 2018 at booth #941 Moscone South to see presentations and demos and meet with our experts.
