Introduction

Falcon Flight Control makes it easy for MSSPs and enterprises to organize and manage security at scale by allowing the environment to be logically segmented.

The segmentation allows for many use cases, such as an MSSP with many customers or a company that wishes to divide the administration of CrowdStrike by subsidiaries or geography.

Video

Managing multiple organizational segments

When logged into the parent account or CID, here we can see all the detections across the entire estate. The filter bar still allows us to use existing criteria to filter across all the environments, for example, by severity or technique, but we can also filter by the child environment as well. Clicking on the detection details will open it up in a new tab in the context of the child CID.

Policies can also be shared across the entire environment. Policies created at the parent level can be leveraged in the child environments, but policies created within a child CID are constrained to just that environment.

Hunting and searching capabilities can be carried out either across all the environments or just within an individual child environment.

Falcon Flight Control also provides a robust set of controls that define CID groups and user groups enabling it to manage the access level that users have.

Conclusion

Falcon Flight Control provides the controls necessary to streamline workflows for MSSP and enterprise environments. In addition to an easy to use interface to manage a segmented environment, APIs and reports are also available for additional flexibility and visibility.

More resources

• CrowdStrike Tech Center
• Sign up for a weekly Falcon demo
• Request a 1:1 Demo
• Guide to AV Replacement
• CrowdStrike Products