CrowdStrike Falcon Intelligence processes an unlimited number of Windows PE files (such as .EXEs, .DLLs, etc.) and Apple Mac Mach-0 files quarantined by Falcon Prevent. In addition, CrowdStrike Falcon Intelligence users can also submit additional files and file types. Depending on your CrowdStrike Falcon Intelligence license, you can process up to an 500 additional files per month.
The additional files types supported include: Office (.doc, .docx, .ppt, .pps, .pptx, .ppsx, .xls, .xlsx, .rtf, .pub), PDF, APK, executable JAR, Windows Script Component (.sct), Windows Shortcut (.lnk), Windows Help (.chm), HTML Application (.hta), Windows Script File (*.wsf), JavaScript (.js), Visual Basic (*.vbs, *.vbe), Shockwave Flash (.swf), PowerShell (.ps1, .psd1, .psm1), Scalable Vector Graphics (.svg), Python (.py) and Perl (.pl) scripts, Linux ELF executables, MIME RFC 822 (*.eml) and Outlook *.msg files.
You can upload archives with or without a password: ace, arj, 7z, bzip2, gzip2, iso, rar, rev, tar, wim, xz and zip. If you use a password, the typical, “infected,” password is required.