CrowdStrike Falcon Platform
Threat Intelligence
Threat Intelligence gives security teams a current view of who is attacking and how. It turns raw signals into context that guides detection and response.
What it is
Threat Intelligence is a module of the CrowdStrike Falcon Platform that tracks adversaries and their tradecraft. It follows hundreds of named threat actors and the tools, tactics, and infrastructure they rely on. The intelligence is updated in real time as new activity is observed.
Key capabilities
- Tracks hundreds of named threat actors and their tradecraft.
- Automates malware analysis to speed up investigations.
- Monitors the deep and dark web for exposed data.
- Feeds intelligence directly into detection and response.
Who it’s for
It suits security teams that need to understand the threats facing them, not just the alerts on their screen. It helps analysts prioritize the threats that matter and respond with the right context.