Falcon Insight: Endpoint Detection & Response (EDR)

Regardless of how advanced your defenses are, there’s a chance that attackers will do an “end run” on your security solution and slip through to gain access to your environment. Conventional defenses don’t know and can’t see when this happens, resulting in “silent failure.” When silent failure occurs, it can allow attackers to dwell in your environment for days, weeks or even months without raising an alarm. The solution lies in continuous and comprehensive visibility into what is happening on your endpoints in real time.

CrowdStrike® Falcon Insight™ eliminates silent failure by providing the highest level of real-time monitoring capabilities that span across detection, response and forensics. This ensures nothing is missed, leaving attackers with no place to hide. Falcon Insight provides organizations with state-of-the-art endpoint detection and response (EDR), following an approach recommended by top analyst firms such as Gartner.

The power to prevent silent failure and stop breaches

Falcon Insight relies on CrowdStrike’s revolutionary cloud-delivery architecture, providing a communications fabric unlike any other. Using an advanced graph data model, CrowdStrike Threat Graph™ collects and inspects event information in real time to prevent and detect attacks on your endpoints. As part of the Falcon endpoint protection platform, Falcon Insight records all activities of interest on an endpoint for deeper inspection — on-the-fly and after-the-fact — allowing users to quickly detect, investigate and respond to attacks — even those that evade standard prevention measures.