CrowdStrike Falcon Fusion Streamlines Security Operation Center with Automated Workflows, Drastically Reducing Threat Response Time and Remediation

Rhea-AI Summary

CrowdStrike has launched Falcon Fusion, a new framework designed to enhance efficiency in security operation centers (SOCs). This tool aims to help enterprise customers respond to cybersecurity threats faster, facilitating a breach identification in 1 minute, investigation in 10 minutes, and remediation in 60 minutes. By utilizing the CrowdStrike Security Cloud, Falcon Fusion allows for automated workflows and improved incident response. Its key features include customizable workflows, simplified operations, and cost efficiency improvements, catering to the increasing complexities of multi-cloud environments.

Positive

• Launch of Falcon Fusion aims to improve SOC efficiency, allowing faster threat response.
• Customization of workflows provides organizations with tailored security solutions.
• Increased operational cost-efficiency through no-code automation.

Negative

• None.

CrowdStrike, a leader in cloud-delivered endpoint protection and workload protection, today announced Falcon Fusion, a unified and extensible framework purpose-built on the CrowdStrike Falcon® platform to orchestrate and automate complex workflows improving security operation center (SOC) efficiency. Falcon Fusion leverages the power of the CrowdStrike Security Cloud and relevant contextual insights across endpoints, identities, and workloads, in addition to telemetry from partner applications via the CrowdStrike Store, to improve SOC and IT efficiency and agility for enterprise customers.

With CrowdStrike Falcon Fusion, enterprise customers can meet the 1-10-60 challenge - 1 minute to identify a breach, 10 minutes to investigate, and 60 minutes to remediate – by streamlining incident investigation, response and remediation capabilities with repeatable and consistent workflows, which helps security teams get the right coverage with accuracy and speed. SOC analysts can define real-time active response workflows using an intuitive graphical user interface, along with customizable triggers based on detection and incident categories. This enables SOC teams to dramatically improve the overall efficiency of their workflows, providing them the necessary context to mitigate security risks to their organizations more quickly and effectively than ever.

“Our customers are dealing with expanding attack surfaces across multi-cloud environments and distributed workforces, making it increasingly burdensome for security teams to sift through an ever-growing number of alerts and keep their business secure,” said Amol Kulkarni, chief product officer of CrowdStrike. “We built Falcon Fusion to provide our customers with rich contextual insights and valuable customization to not only meet their immediate needs but also deploy repeatable workflows at scale. Falcon Fusion combines CrowdStrike Security Cloud’s comprehensive visibility across all business entities with the powerful incident response capabilities delivered by the lightweight Falcon agent to automate and simplify complex SOC workflows.”

Key features of Falcon Fusion include:

• Orchestrate and automate complex workflows: Build consistent and customizable workflows using intuitive no-code logic or custom code options for faster active response – all without leaving the console.
• Simplify security operations: Easy-to-use automation of workflows reduces the need to switch between different security tools and tasks and improves the efficiency of security team operations, allowing them to focus on more business critical strategic tasks.
• Accelerate incident triaging and real-time response: Speed-up incident triaging and incident response by configuring custom actions and notifications based on contextual insights from managed workloads and endpoints, resulting in reduced mean time to respond and remediate threats.
• Cut costs and resources: Free up skilled resources and improve cost efficiency by building and scaling workflows on demand employing no-code automation to create repeatable and reliable processes.
• Build powerful open ecosystem: Seamlessly deploy partner applications from the CrowdStrike Store to bring in additional telemetry to enrich their detection and response logic to further enhance security and IT operations.

For more information about Falcon Fusion and CrowdStrike’s announcements at RSA 2021, visit the CrowdStrike blog, and tune in to Amol’s talk at RSA 2021: Sponsor Briefing Modernize your SOC with CrowdStrike Security Cloud.

Forward-Looking Statements

This press release contains forward-looking statements that involve risks and uncertainties, including statements regarding the performance and benefits of CrowdStrike’s Falcon Fusion product. There are a significant number of factors that could cause actual results to differ materially from statements made in this press release.

You should not rely on these forward-looking statements, as actual outcomes and results may differ materially from those anticipated or implied by these forward-looking statements as a result of such risks and uncertainties. All forward-looking statements in this press release are based on information available to us as of the date hereof, and we do not assume any obligation to update the forward-looking statements provided to reflect events that occur or circumstances that exist after the date on which they were made.

About CrowdStrike
CrowdStrike, a global cybersecurity leader, is redefining security for the cloud era with an endpoint and workload protection platform built from the ground up to stop breaches. The CrowdStrike Falcon® platform’s single lightweight-agent architecture leverages cloud-scale artificial intelligence (AI) and offers real-time protection and visibility across the enterprise, preventing attacks on endpoints and workloads on or off the network. Powered by the proprietary CrowdStrike Threat Graph®, CrowdStrike Falcon correlates over 5 trillion endpoint-related events per week in real time from across the globe, fueling one of the world’s most advanced data platforms for security.

With CrowdStrike, customers benefit from better protection, better performance and immediate time-to-value delivered by the cloud-native Falcon platform.

There’s only one thing to remember about CrowdStrike: We stop breaches.

Qualifying organizations can gain full access to Falcon Prevent™ by starting a free trial.

Learn more: https://www.crowdstrike.com/

Follow us: Blog | Twitter

© 2021 CrowdStrike, Inc. All rights reserved. CrowdStrike, the falcon logo, CrowdStrike Falcon and CrowdStrike Threat Graph are marks owned by CrowdStrike, Inc. and registered with the United States Patent and Trademark Office, and in other countries. CrowdStrike owns other trademarks and service marks, and may use the brands of third parties to identify their products and services.

View source version on businesswire.com: https://www.businesswire.com/news/home/20210517005258/en/

FAQ

What is Falcon Fusion launched by CRWD?

Falcon Fusion is a unified framework aimed at enhancing the efficiency of security operation centers by automating complex workflows.

How does Falcon Fusion help in cybersecurity for CRWD customers?

It helps enterprise customers streamline incident investigation and response, enabling quicker identification and remediation of security breaches.

What are key features of Falcon Fusion from CRWD?

Key features include customizable workflows, simplified security operations, and accelerated incident response.

How does Falcon Fusion improve incident response time for CRWD?

It allows SOC teams to identify breaches in 1 minute, investigate in 10 minutes, and remediate in 60 minutes.

What impact does Falcon Fusion have on operational costs for CRWD?

Falcon Fusion is designed to reduce operational costs by freeing up skilled resources and improving cost efficiency through automation.