CrowdStrike Falcon Intelligence
Automatic deploy
Supported by Filigran
Adversary & Campaign Insights
Overview
Imports threat actors, indicators, reports, and YARA rules from the CrowdStrike Falcon Intelligence platform into OpenCTI via the Falcon Intel APIs.
CrowdStrike Falcon Intelligence is an integral threat intelligence module within the Falcon platform, crafted to enhance the speed and effectiveness of threat detection, investigation, and response. It equips SOC teams to work more swiftly and intelligently, leveraging automation, enrichment, and high-fidelity data to optimize their cybersecurity operations.
The OpenCTI CrowdStrike connector facilitates the import of intelligence from the CrowdStrike Falcon platform. By utilizing the Intel APIs, this connector accesses CrowdStrike's comprehensive intelligence, including data on threat actors, indicators, reports, and YARA rules, thus enhancing the threat intelligence capabilities within OpenCTI.