Back to Tech Center

Falcon Flight Control for Segmenting Falcon Administration

July 30, 2021

CrowdStrike Tech Center

Introduction

Falcon Flight Control makes it easy for MSSPs and enterprises to organize and manage security at scale by allowing the environment to be logically segmented.

The segmentation allows for many use cases, such as an MSSP with many customers or a company that wishes to divide the administration of CrowdStrike by subsidiaries or geography.

Video

 

Managing multiple organizational segments

When logged into the parent account or CID, here we can see all the detections across the entire estate. The filter bar still allows us to use existing criteria to filter across all the environments, for example, by severity or technique, but we can also filter by the child environment as well. Clicking on the detection details will open it up in a new tab in the context of the child CID.

Falcon Flight Control Detections

Policies can also be shared across the entire environment. Policies created at the parent level can be leveraged in the child environments, but policies created within a child CID are constrained to just that environment.

Falcon Flight Control Policies

Hunting and searching capabilities can be carried out either across all the environments or just within an individual child environment.

Falcon Flight Control Hunting

Falcon Flight Control also provides a robust set of controls that define CID groups and user groups enabling it to manage the access level that users have.

Falcon Flight Control User Groups

 

Conclusion

Falcon Flight Control provides the controls necessary to streamline workflows for MSSP and enterprise environments. In addition to an easy to use interface to manage a segmented environment, APIs and reports are also available for additional flexibility and visibility.

 

More resources

 

Related Content

TRY CROWDSTRIKE FREE FOR 15 DAYS

GET STARTED WITH A FREE TRIAL