Falcon OverWatch (Proactive Threat Hunting)

Every security professional knows that no security technology will ever be 100% fail-proof. Adversaries test and innovate. Tactics evolve. And so does Falcon OverWatch.

CrowdStrike’s global threat hunting service operates around-the-clock to unearth advanced threats wherever they operate. Falcon OverWatch continuously innovates and evolves — ensuring that the methods, systems and tools it uses are faster and stealthier than any adversary. With the visibility and vigilance of Falcon OverWatch, your adversaries have nowhere to hide.

There’s a huge difference between triaging an alert and proactively hunting for unknown and advanced attacks. True threat hunting requires skilled experts who apply complex statistical methods, examining outliers, frequency analysis and hypothesis testing to determine where and how attackers conceal their operations.

• Diverse, highly skilled expertise. Falcon OverWatch hires and trains elite threat hunting experts from a wide range of backgrounds, including government, law enforcement, commercial enterprise, the intelligence community and defense.
• Full attack context. Before you can take action against an adversary, you need to fully understand the threat. As soon as a hands-on-keyboard intrusion is discovered, Falcon OverWatch begins to comprehensively reconstruct the attack for analysis.
• Immediate, actionable alerts. Get results in a flash. Receive alerts to novel and emerging attacks with deep context and tactical recommendations that enable you and your team to act swiftly and confidently.

• Cloud-scale telemetry. The light weight CrowdStrike Falcon® sensor covers hundreds of event types from millions of endpoints around the world. Cloud-scale data empowers Falcon OverWatch to hunt threats proactively at unprecedented speed and scale.
• Patented and proprietary tooling. All of this is underpinned by the Falcon OverWatch team’s proprietary tools and processes, which ensures every hunt is optimized for maximum efficiency.
• Unrivaled threat intelligence. Get up-to-the-minute intel on the unique behaviors of more than 180 adversary groups, including in-depth working knowledge of their current tactics, techniques and procedures (TTPs).
• Always sharp. Falcon OverWatch’s continuous, proactive operation delivers results every minute of every day. Falcon OverWatch threat hunters are always on top of their game, finely tuning their skills as they handle each new threat.