All files quarantined by Falcon Prevent are automatically investigated by CROWDSTRIKE FALCON INTELLIGENCE. This automation drives breakthrough efficiency gains for security operations teams and ensures no threats are missed. Each is rigorously investigated using the following techniques:
Malware Analysis — CrowdStrike Falcon Intelligence enables in-depth analysis of unknown and zero-day exploits that extends far beyond traditional approaches. CrowdStrike Falcon Intelligence employs a unique combination of static, dynamic and fine-grained memory analysis to quickly identify the evasive threats other solutions may miss.
Malware Search — This connects the dots between the malware found on your endpoints and related campaigns, malware families or threat actors. CrowdStrike Falcon Intelligence searches the industry's largest malware search engine for related samples. Within seconds it expands the analysis to include all files and variants, leading to a deeper understanding of the attack and an expanded set of IOCs to defend against future attacks.
Threat Intelligence — Actor attribution exposes the motivation and the tools, techniques and procedures (TTPs) of the attacker. Practical guidance is provided to prescribe proactive steps against future attacks and stop actors in their tracks.