On August 8, 2023, Crowdstrike announced its new counter operations, “CrowdStrike Falcon Intelligence” and the CrowdStrike® Falcon OverWatch” to detect and disrupt advanced cyber adversaries.
A new threat intelligence report from the Crowdstrike team shows a comprehensive look at the evolving techniques of today’s adversaries.
Falcon Overwatch is a MANAGED THREAT HUNTING SERVICE, and Falcon® Intelligence is the only solution to integrate threat intelligence into endpoint protection truly.
CrowdStrike is an American cybersecurity technology company. It provides cloud workload and endpoint security, threat intelligence, and cyber attack response services.
CrowdStrike Counter Adversary Operations will have the power to detect and stop modern breaches with the telemetry events from the AI-powered CrowdStrike Falcon platform.
As today’s adversaries are fast and elusive, CrowdStrike Counter Adversary Operations represents a new model for the security industry hence teams can disrupt adversaries faster than ever before.
2023 Threat Intelligence Report
Crowdstrike threat hunters and intelligence analysts identified a huge hit in Identity focused intrusion focused on cloud exploitation.
They observed an increase in Kerberoasting attacks, which adversaries can use to obtain valid credentials for Active Directory service accounts.
Other notable findings are adversaries using remote monitoring and management (RMM) tools to evade detection.
The report shows an increase in interactive intrusions targeting the financial sector.
Counter Adversary Operations’ First New Offering
In response to the evolving tradecraft and identity-based attacks, CrowdStrike Counter Adversary Operations is introducing its first new offering: CrowdStrike® Falcon OverWatch™ Elite Identity Threat Hunting.
“CrowdStrike® Falcon OverWatch™ Elite brings the latest intelligence on adversary motives, tactics, techniques, and procedures and combines this data with CrowdStrike Falcon® Identity Threat Protection and the elite Falcon OverWatch threat hunters.
This combination makes it possible to quickly identify and remediate compromised credentials, track lateral movement and stay ahead of adversaries with 24/7 coverage”, Said the Crowdstrike team.
Source: https://cybersecuritynews.com/crowdstrike-new-counter-operations/
