Crowdstrike Certification Program

The CrowdStrike Falcon® Certification program trains professionals to detect, prevent and stop breaches using the latest endpoint detection and response (EDR) technology tools and cyber threat intelligence so they can better defend their organization against today’s sophisticated cyberattacks.

Crowdstrike Certification Program

The CrowdStrike Falcon® Certification program trains professionals to detect, prevent and stop breaches using the latest endpoint detection and response (EDR) technology tools and cyber threat intelligence so they can better defend their organization against today’s sophisticated cyberattacks.

Certification Benefits

Well-trained, certified security professionals understand how to gain the most value from the CrowdStrike Falcon® platform.

Certified
Administrators

CrowdStrike Certified Falcon Administrators effectively manage the Falcon platform based on the risk profile of your business, including:

  • Effective user management
  • Deploying and managing the Falcon sensor
  • Configuring deployment and prevention policies based on business risk
  • Configuring allowlists, blocklists, and file-path exclusions
  • Conducting administrative reporting

Certified
Responders

CrowdStrike Certified Falcon Responders investigate, analyze and respond quickly to cyber incidents and active threats, including:

  • Initial triage of detections in the Falcon console
  • Managing filtering, grouping and assignment of detections
  • Performing investigation tasks
  • Conducting basic proactive hunting for atomic indicators across enterprise event data


Certified
Hunters

CrowdStrike Certified Falcon Hunters investigate threats and security incidents by analyzing digital evidence, including:

  • Understanding all aspects of detection investigation
  • Navigating the Falcon console to perform queries and time-lining using Splunk event searching
  • Conducting search queries using Splunk Search Processing Language (SPL)




Earn Your Wings

The CrowdStrike Falcon® Certification Program covers job roles of Falcon users, from the administrator to the front-line analyst to the investigator/hunter. Learn more about our certifications by downloading the CrowdStrike Certification Exam Guides — these guides describe the exam design, what the assessment will look like, recommended training, knowledge domain areas covered and detailed exam objectives.

View Certification Guide
Single Program

CrowdStrike Certified
Falcon Administrator (CCFA)

The CCFA certification is ideal for the administrator or any analyst with access to the administrative side of the Falcon platform.

View CCFA Guide
Single Program

CrowdStrike Certified
Falcon Responder (CCFR)

The CCFR certification is ideal for the front-line analyst responding to detections or anyone performing those duties.

View CCFR Guide
Single Program

CrowdStrike Certified
Falcon Hunter (CCFH)

The CCFH certification is ideal for the investigative analyst who performs deeper detection analysis and response as well as machine timelining and event-related search queries, insider-threat-related investigations, and proactive investigations (threat hunting).

View CCFH Guide

Get Certified

The CrowdStrike® Falcon Certification Program offers CrowdStrike-trained professionals a way to validate their expertise with the CrowdStrike Falcon® platform. Maximize the likelihood of passing a CrowdStrike certification exam with a great score on your first try by following these steps:

Learn the Falcon
Platform

  • Get a CrowdStrike University subscription and training credits

  • Build your technical skills with recommended learning

  • Broaden your technical understanding with recommended documentation written by CrowdStrike

Prepare for Your
Exam

Schedule Your
Exam