CrowdStrike University is CrowdStrike's online training portal. CrowdStrike University is a Learning Management System (LMS) where all training activity records are tracked. This site offers professional training and education aimed at enhancing and expanding cybersecurity knowledge and abilities, from introductory to advanced capabilities.

CrowdStrike University provides users access to:

• Self-paced training (eLearning courses) focused on helping you implement and administer CrowdStrike Falcon®.
• A global training calendar that provides dates and times for upcoming live, instructor-led sessions.
• Certification prep resources including free practice exams, exam guides, and webinars.
• Links to CrowdStrike certification’s delivery provider Pearson VUE where candidates can register for exams.
• Transcripts of training records and certification exam records, including access to score reports from CrowdStrike exams taken at Pearson VUE.
• Digital certificates and badges to represent learning achievements.

Access our course information on the CrowdStrike University resource page, including curated learning paths to optimize your learning based on your job role or skill areas of interest.

Syllabi for our instructor-led courses can be found below:

• FALCON 200: Falcon Platform for Administrators
• FALCON 201: Intermediate Falcon Platform for Responders
• FALCON 202: Intermediate Falcon Platform for Hunters
• FALCON 240: Investigating and Mitigating Threats with Real Time Response
• FALCON 280: Investigating with Falcon Forensics
• FALCON 302: Advanced Threat Hunting with Falcon
• CLOUD 223: Identifying and Remediating Risks in your Cloud Environment with CSPM
• CLOUD 271: Securing Cloud Workloads and Containers with Falcon Cloud Security
• CQL 201: Designing and Optimizing CQL Queries
• IDP 270: Protecting Workforce Identities with Falcon Identity Protection
• LOG 200: Managing and Administering Falcon LogScale
• LOG 201: Preparing, Ingesting, and Parsing Log Data using Falcon LogScale
• LOG 202: Analyze Logs, Visualize Data, and Answer Business-Critical Questions using Falcon LogScale
• SIEM 200: Administering and Optimizing Falcon Next-Gen SIEM
• SIEM 210: Onboarding Third-Party Data and Managing Falcon Next-Gen SIEM
• SIEM 211: Incident Response and Investigation in Falcon Next-Gen SIEM

Easily access CrowdStrike University by following these steps:

1. Log into Falcon.
2. Go to Support and Resources > Support Portal (top right).
3. Select the Login with Falcon option.
4. Select CrowdStrike University from the left-hand menu.

Partners should contact their CrowdStrike Alliance Manager or email alliances_operations@crowdstrike.com to activate their CrowdStrike University account.

If you are a current CrowdStrike customer and do not have access to  the CrowdStrike Customer Center (or the Falcon platform), please contact your organization's CrowdStrike Administrator so they can assist with providing you with access.

If you’re unsure who has administrator access within your organization, please contact your CrowdStrike Account Management Team or CrowdStrike Support for further assistance.

Partners should contact their CrowdStrike Alliance Manager or email alliances_operations@crowdstrike.com for further assistance.

If you’re able to access the CrowdStrike Customer Center but are unable to access CrowdStrike University, please contact training@crowdstrike.com. 

Partners should contact their CrowdStrike Alliance Manager or email alliances_operations@crowdstrike.com for further assistance.

Updating your time zone is VERY important! All training sessions will be displayed in the time zone you have set. If you have NOT updated the time zone in your profile, you will NOT see a localized version of the class session time.

1. 1. Sign into CrowdStrike University through the CrowdStrike Customer Center.
2. 2. Click on the User Menu icon in the upper left corner.
3. 3. Click on the My Profile pencil icon next to your name. Alternatively, you can go directly to your profile by clicking this link.
4. 4. Select the Preferences option from the side menu bar.
5. 5. Select your time zone from the drop down.
6. 6. Click Save Changes.

To view certificates for active courses:

1. 1. Sign into CrowdStrike University through the CrowdStrike Customer Center.
2. 2. Click on the User Menu icon in the upper left corner.
3. 3. Select My Transcript.
4. 4. Locate the completed course and under the Certificate column click Available.

To view certificates for archived courses:

1. 1. Click on the User Menu in the upper left corner.
2. 2. Go to My Activities and select Courses.
3. 3. Chance the Enrollment Status filter to Archived Enrollments.

NOTE: Not all courses have a certificate of completion.

Training credits are used to pay for instructor-led or on-demand courses. The training credit cost varies per course; required training credits per course are detailed in the training catalog. Contact your CrowdStrike account representative or partner to obtain a quote.

Training credits are owned by an organization and not the individual. They generally expire after a year, unless specified differently in your contract.

To register for an instructor-led session:

1. Sign into CrowdStrike University through Falcon or the CrowdStrike Customer Center.
2. Select the Instructor-led training (ILT) tile from the CSU homepage.
3. Select the course you would like to take (ex: FALCON 200: Falcon Platform for Administrators).
4. View upcoming sessions for your desired course.
5. Click Enroll for your desired session.

Please note, all registration requests are reviewed by our registration team. If your company has purchased CrowdStrike training credits, you will be approved to take the training in 1-2 business days. Once your registration request is confirmed, you will receive an email confirmation with the session details.

If you are interested in purchasing additional training credits, please contact your CrowdStrike Account Manager.

You may need to adjust your settings to make sure the training schedule is displaying your preferred time zone.

1. 1. Sign into CrowdStrike University through the CrowdStrike Customer Center.
2. 2. Click on the User Menu icon in the upper left corner.
3. 3. Click on the My Profile pencil icon next to your name.
4. 4. Select the Preferences option from the side menu bar.
5. 5. Select your time zone from the drop down.
6. 6. Click Save Changes.

Please note, all registration requests are reviewed by our registration team. Once confirmed, training credits will be deducted from your account and you'll receive a confirmation email. This process can take 1-3 days.

Yes, to enroll in an instructor-led course, you must have an active CrowdStrike University account. All customers automatically have access to CrowdStrike University through the Falcon platform/CrowdStrike Customer Center.

To access CrowdStrike University, simply log into Falcon and then navigate to Support and Resources > Support Portal. Then select the Login with Falcon option to access the CrowdStrike Customer Center. There you’ll find the option for CrowdStrike University on the left-hand menu.

We offer instructor-led classes in a number of formats, including:

• Regional classroom instructor-led training with cloud-based interactive labs
• Live online instructor-led* using Zoom with cloud-based interactive labs
• Live online instructor-led* (private)** using Zoom with cloud-based interactive labs
• Onsite instructor-led (private)** delivered at organization’s site with cloud-based interactive labs

*Students participating in live online instructor-led training are encouraged to have 2 monitors and a headset for class, in addition to a reliable Internet connection.

**Private training can be scheduled by contacting training@crowdstrike.com.

We use Zoom for our live, online instructor-led training. To test that your system works with Zoom, please visit: https://zoom.us/test.

We use CloudShare for our cloud-based interactive labs. To test that your system works with CloudShare, please visit: https://use.cloudshare.com/Ent/Machine.mvc/testpage#/.

You will be notified that your course registration cannot be completed at this time.

Each instructor-led course has specified training credit cost which is noted in the course description. Contact your CrowdStrike Account Manager to purchase additional training credits.

Once you have purchased additional training credits, request access to the course again.

To find an on-demand ILT course:

1. Sign into CrowdStrike University through Falcon or the CrowdStrike Customer Center.
2. Select the Instructor-led training (ILT) tile from the CSU homepage.
3. Click on the View all on-demand ILT tile
4. Select the course you would like to take.
5. To request enrollment, scroll down to review the course description and click the Enroll button.

Please note, all registration requests are reviewed by our registration team. Once confirmed, training credits will be deducted from your account and you'll receive a confirmation email. This process can take 1-3 days.

If you are interested in purchasing additional training credits, please contact your CrowdStrike Account Manager.

Learners should begin on-demand instructor-led training at least 30 days before the expiration date of the training credits, as the course duration is 30 days. For example, if a learner’s training credits expire on April 30, the learner should Request Approval by April 1 at the latest.

Training credits applied to on-demand instructor-led courses cannot expire during the 30-day on-demand class period.

CrowdStrike certification exams validate proficiency in defined job roles and specialized skill areas that align to use of the Falcon platform.

• CrowdStrike Certified Falcon Administrator (CCFA): performs tasks related to management of the Falcon platform, including user management, sensor deployment, and policy configuration.
• CrowdStrike Certified Falcon Responder (CCFR): responds to cybersecurity alerts detected in the Falcon platform, including initial triage, basic detention, and escalation.
• CrowdStrike Certified Falcon Hunter (CCFH): performs deep detection analysis and response to incidents and events
• CrowdStrike Certified SIEM Engineer (CCSE): implements and manages CrowdStrike Falcon Next-Gen SIEM to support security operations
• CrowdStrike Certified Identity Specialist (CCIS): specializes in analyzing and responding to identity-based threats and has strong experience using the features and tools available within the Falcon platform to investigate and respond to incidents.
• CrowdStrike Certified Cloud Specialist (CCCS): specializes in managing the various components of an organization’s cloud environment and has strong experience using CrowdStrike’s cloud security posture management (CSPM) module to identify and address security risks and vulnerabilities.

Learn more about our certification exams

CrowdStrike Certification exams are delivered globally through a partnership with Pearson VUE. Visit Pearson VUE/CrowdStrike to learn more.

You may take your exam at a Pearson VUE test center or exam online using Pearson VUE OnVUE. Learn more about OnVUE.

Yes, CrowdStrike certifications can be taken online using the Pearson VUE OnVUE system. Learn more about OnVUE.

We strongly recommend candidates complete a system check prior to the day of their exam to ensure their computer meets all requirements to connect via OnVue. Many employer-supplied laptops include security features or firewalls that may not work with OnVue.

If you are taking an online exam using Pearson VUE OnVUE, you will receive a score report upon completion of your exam. If you are taking an exam at a Pearson VUE Testing Center, you may pick up your score report from the test center proctor after you complete your exam. You will be able to download your score report from the Pearson VUE website.

Successful exam results will also be uploaded to CrowdStrike University within 1-2 business days if you provided your CrowdStrike University ID and username during account creation at Pearson VUE.

While there are no training prerequisites that have to be completed before an exam attempt, CrowdStrike strongly recommends that certification candidates take recommended training and review recommended reading as outlined in the CrowdStrike certification exam guides. CrowdStrike also strongly recommends a candidate have at least 6 months of experience with CrowdStrike Falcon®

Review the exam guides to learn more about how to successfully prepare for your exam and what domains and exam objectives covered in each exam:

• CrowdStrike Certified Falcon Administrator (CCFA) Exam Guide
• CrowdStrike Certified Falcon Responder (CCFR) Exam Guide
• CrowdStrike Certified Falcon Hunter (CCFH) Exam Guide
• CrowdStrike Certified SIEM Engineer (CCSE) Exam Guide
• CrowdStrike Certified Identity Specialist (CCIS) Exam Guide
• CrowdStrike Certified Cloud Specialist (CCCS) Exam Guide

When you are ready to take your exam:

1. 1. Sign in to CrowdStrike University.
         a. If this is your first time taking a CrowdStrike certification exam, find your CrowdStrike University ID on your profile page and make note
         of it– you will need to input this when you create your exam taker account with Pearson VUE.        
2. 2. Select Prepare and Get Certified from the CrowdStrike University homepage.
3. 3. Select Schedule your certification exam, which will redirect you to the Pearson VUE/CrowdStrike website where you can create your exam taker account and register for your exam.
        a. If you encounter any scheduling issues online, you may call Pearson VUE at 866-980-0413 to schedule your exam.         
   
4. 4. When creating your exam taker account profile, be sure to add your CrowdStrike University ID.

• Keyboard navigation: Navigate through courses using only a keyboard. Use the Tab key to move through interactive elements, and press Enter to select. To go backwards, use Shift + Tab. Additional keyboard-accessible navigation is included on the Articulate website - Rise 360: Keyboard-Accessible Navigation.
• Closed captioning: Videos include closed captions. To enable captions, use the included video player controls.
• Alt text: Important images are accompanied by descriptive alt text. If you are using a screen reader, this text will be read aloud to provide context.
• Adjustable text size: Adjust the text size within your browser for better readability. Refer to your browser’s settings for text size adjustments.