At CrowdStrike Fal.Con 2023, CrowdStrike introduced a brand new Falcon Raptor launch with generative-AI capabilities and the acquisition of Bionic.
At CrowdStrike’s annual Fal.Con present in Las Vegas this week, the corporate introduced a collection of enhancements to its Falcon safety platform, together with a brand new Raptor launch with generative-AI capabilities. The corporate additionally introduced the acquisition of Bionic so as to add cloud utility safety to its portfolio.
Bounce to:
What’s new within the Falcon Raptor launch?
CrowdStrike Falcon covers endpoint safety, Prolonged Detection and Response, cloud safety, menace intelligence, id safety, safety/IT Ops and observability. The brand new Raptor launch provides petabyte-scale, quick knowledge assortment, search and storage to maintain up with generative AI-powered cybersecurity and keep forward of cybercriminals. It’s being rolled out step by step to present CrowdStrike prospects starting in September of 2023.
The important thing components of the Raptor launch are:
- Charlotte AI Investigator automates incident creation and investigation, correlates associated context right into a single incident and generates a big language mannequin incident abstract.
- CrowdStrike Endpoint Detection and Response gives prospects with entry to native XDR to speed up investigations, thereby including endpoint, id, cloud and knowledge safety telemetry from throughout the corporate’s platform.
- The XDR Incident Workbench accelerates investigation and response instances by specializing in incidents fairly than alerts.
“Raptor eliminates safety noise and reduces the time analysts take to chase down incidents,” stated Raj Rajamani, head of merchandise at CrowdStrike, once I interviewed him at Fal.Con.
In earlier variations of Falcon, knowledge existed in a number of backends, which elevated the opportunity of blind spots that might be exploited by hackers. Raptor gives a single knowledge airplane to carry the info collectively within the CrowdStrike platform.
“There isn’t a longer a necessity for safety analysts to go to completely different factors to attempt to correlate CrowdStrike and third-party knowledge, as all the things is stitched collectively by Charlotte AI to scale back the time wanted for triage and evaluation,” stated Rajamani.
That is achieved by decoupling the info from the compute energy wanted to compile, course of and analyze it. Rajamani stated this could take question response instances down from hours to seconds and bigger queries from days to some hours.
Important rivals to Falcon
As CrowdStrike Falcon consists of a number of modules that broadly handle the safety panorama, it competes on a number of fronts. On the EDR aspect, its fundamental rivals are Microsoft and SentinelOne. On cloud safety, it traces up towards the likes of Microsoft and Palo Alto Networks. For id safety, its main competitor might be Microsoft. Rajamani stated that CrowdStrike has a bonus over Microsoft and others by way of its capability to construct a unified knowledge airplane utilizing a single agent and console for all security-related knowledge.
“Others clear up elements of the safety puzzle however wrestle to carry all of it collectively with no 360-degree view,” he stated. “The sum of the elements is larger than the entire.”
Extra Falcon-related bulletins
- Falcon Foundry is a no-code app dev platform to unravel customized IT and safety workloads together with scanning for vulnerabilities. Now out there.
- Falcon Information Safety presents coverage enforcement of content material as a substitute of recordsdata to allow customers to guard knowledge because it travels throughout the enterprise and stop the unauthorized egress of sensitized data. Presently within the beta testing section.
- Falcon for IT gives real-time IT visibility into all system occasions, state and efficiency. Now out there.
- Falcon Publicity Administration provides an inside-out and outside-in view of enterprise danger. Now out there.
Bionic acquisition ought to give CrowdStrike an edge in CNAPP market
The opposite huge announcement at CrowdStrike’s Fal.Con was an settlement to amass Utility Safety Posture Administration vendor Bionic. This extends CrowdStrike’s cloud native utility safety platform to ship danger visibility and safety throughout all cloud infrastructure, purposes and providers.
The crowded cloud-native software program platform market is led by PingSafe, Aqua Safety, Palo Alto Networks, Orca and plenty of others; the addition of ASPM from Bionic ought to give CrowdStrike an edge. ASPM provides app-level visibility to infrastructure, and it solves issues reminiscent of with the ability to detect which purposes — even legacy purposes — are working throughout the enterprise and what databases and servers these apps are touching. That is achieved with out an agent.
Rajamani likened it to the distinction between an X-ray (CNAPP) and an MRI (ASPM). The addition of Bionic gives CrowdStrike with the power to detect a wider vary of potential points.
“The mixing of Bionic means we are able to significantly cut back the variety of alerts to allow analysts to zero in on those that matter,” stated Rajamani. “Because of this, CrowdStrike would be the first cybersecurity firm to ship full code-to-runtime cloud safety from one unified platform.”
