Crowdstrike BLOG
  • Featured
    • Advanced Web Shell Detection and Prevention: A Deep Dive into CrowdStrike's Linux Sensor Capabilities
      Advanced Web Shell Detection and Prevention: A Deep Dive into CrowdStrike's Linux Sensor Capabilities
      Feb 05, 2026
    • What Security Teams Need to Know About OpenClaw, the AI Super Agent
      What Security Teams Need to Know About OpenClaw, the AI Super Agent
      Feb 04, 2026
    • CrowdStrike Named a Customers’ Choice in 2026 Gartner Peer Insights™ Voice of the Customer for Application Security Posture Management Tools
      CrowdStrike Named a Customers’ Choice in 2026 Gartner Peer Insights™ Voice of the Customer for Application Security Posture Management Tools
      Feb 03, 2026
    • CrowdStrike Falcon Scores Perfect 100% in SE Labs’ Most Challenging Ransomware Test
      CrowdStrike Falcon Scores Perfect 100% in SE Labs’ Most Challenging Ransomware Test
      Feb 03, 2026
  • Recent
    • Advanced Web Shell Detection and Prevention: A Deep Dive into CrowdStrike's Linux Sensor Capabilities
      Advanced Web Shell Detection and Prevention: A Deep Dive into CrowdStrike's Linux Sensor Capabilities
      Feb 05, 2026
    • What Security Teams Need to Know About OpenClaw, the AI Super Agent
      What Security Teams Need to Know About OpenClaw, the AI Super Agent
      Feb 04, 2026
    • CrowdStrike Named a Customers’ Choice in 2026 Gartner Peer Insights™ Voice of the Customer for Application Security Posture Management Tools
      CrowdStrike Named a Customers’ Choice in 2026 Gartner Peer Insights™ Voice of the Customer for Application Security Posture Management Tools
      Feb 03, 2026
    • CrowdStrike Falcon Scores Perfect 100% in SE Labs’ Most Challenging Ransomware Test
      CrowdStrike Falcon Scores Perfect 100% in SE Labs’ Most Challenging Ransomware Test
      Feb 03, 2026
  • Video
    • Video Highlights the 4 Key Steps to Successful Incident Response
      Video Highlights the 4 Key Steps to Successful Incident Response
      Dec 02, 2019
    • Helping Non-Security Stakeholders Understand ATT&CK in 10 Minutes or Less [VIDEO]
      Helping Non-Security Stakeholders Understand ATT&CK in 10 Minutes or Less [VIDEO]
      Feb 21, 2019
    • Analyzing Targeted Intrusions Through the ATT&CK Framework Lens [VIDEO]
      Analyzing Targeted Intrusions Through the ATT&CK Framework Lens [VIDEO]
      Jan 22, 2019
    • Qatar’s Commercial Bank Chooses CrowdStrike Falcon®: A Partnership Based on Trust [VIDEO]
      Qatar’s Commercial Bank Chooses CrowdStrike Falcon®: A Partnership Based on Trust [VIDEO]
      Aug 20, 2018
  • Category
    • Agentic SOC
      Agentic SOC
      CrowdStrike to Acquire SGNL to Secure Every Identity in the AI Era
      CrowdStrike to Acquire SGNL to Secure Every Identity in the AI Era
      01/08/26
      CrowdStrike’s Journey in Customizing NVIDIA Nemotron Models for Peak Accuracy and Performance
      CrowdStrike’s Journey in Customizing NVIDIA Nemotron Models for Peak Accuracy and Performance
      01/05/26
      How CrowdStrike Trains GenAI Models at Scale Using Distributed Computing
      How CrowdStrike Trains GenAI Models at Scale Using Distributed Computing
      12/22/25
      CrowdTour 2026: Securing the AI Era Together
      CrowdTour 2026: Securing the AI Era Together
      12/19/25
    • Cloud & Application Security
      Cloud & Application Security
      CrowdStrike Named a Customers’ Choice in 2026 Gartner Peer Insights™ Voice of the Customer for Application Security Posture Management Tools
      CrowdStrike Named a Customers’ Choice in 2026 Gartner Peer Insights™ Voice of the Customer for Application Security Posture Management Tools
      02/03/26
      CrowdStrike Unveils Real-Time Cloud Detection and Response Innovations
      CrowdStrike Unveils Real-Time Cloud Detection and Response Innovations
      12/01/25
      New User Experience Transforms Interaction with the Falcon Platform
      New User Experience Transforms Interaction with the Falcon Platform
      10/21/25
      How Falcon ASPM Secures GenAI Applications and Lessons from Dogfooding
      How Falcon ASPM Secures GenAI Applications and Lessons from Dogfooding
      09/30/25
    • Threat Hunting & Intel
      Threat Hunting & Intel
      LABYRINTH CHOLLIMA Evolves into Three Adversaries
      LABYRINTH CHOLLIMA Evolves into Three Adversaries
      01/29/26
      How CrowdStrike’s Malware Analysis Agent Detects Malware at Machine Speed
      How CrowdStrike’s Malware Analysis Agent Detects Malware at Machine Speed
      01/06/26
      Unveiling WARP PANDA: A New Sophisticated China-Nexus Adversary
      Unveiling WARP PANDA: A New Sophisticated China-Nexus Adversary
      12/04/25
      CrowdStrike Research: Security Flaws in DeepSeek-Generated Code Linked to Political Triggers
      CrowdStrike Research: Security Flaws in DeepSeek-Generated Code Linked to Political Triggers
      11/20/25
    • Endpoint Security & XDR
      Endpoint Security & XDR
      Advanced Web Shell Detection and Prevention: A Deep Dive into CrowdStrike's Linux Sensor Capabilities
      Advanced Web Shell Detection and Prevention: A Deep Dive into CrowdStrike's Linux Sensor Capabilities
      02/05/26
      CrowdStrike Falcon Scores Perfect 100% in SE Labs’ Most Challenging Ransomware Test
      CrowdStrike Falcon Scores Perfect 100% in SE Labs’ Most Challenging Ransomware Test
      02/03/26
      CrowdStrike Named a Customers’ Choice in 2026 Gartner® Voice of the Customer for Endpoint Protection Platforms
      CrowdStrike Named a Customers’ Choice in 2026 Gartner® Voice of the Customer for Endpoint Protection Platforms
      01/28/26
      Small Devices, Big Risk: USB Drives Threaten Enterprise Security
      Small Devices, Big Risk: USB Drives Threaten Enterprise Security
      01/21/26
    • Engineering & Tech
      Engineering & Tech
      EMBER2024: Advancing the Training of Cybersecurity ML Models Against Evasive Malware
      EMBER2024: Advancing the Training of Cybersecurity ML Models Against Evasive Malware
      09/03/25
      Falcon Platform Prevents COOKIE SPIDER’s SHAMOS Delivery on macOS
      Falcon Platform Prevents COOKIE SPIDER’s SHAMOS Delivery on macOS
      08/20/25
      CrowdStrike’s Approach to Better Machine Learning Evaluation Using Strategic Data Splitting
      CrowdStrike’s Approach to Better Machine Learning Evaluation Using Strategic Data Splitting
      08/11/25
      CrowdStrike Researchers Develop Custom XGBoost Objective to Improve ML Model Release Stability
      CrowdStrike Researchers Develop Custom XGBoost Objective to Improve ML Model Release Stability
      03/20/25
    • Executive Viewpoint
      Executive Viewpoint
      The Architecture of Agentic Defense: Inside the Falcon Platform
      The Architecture of Agentic Defense: Inside the Falcon Platform
      01/16/26
      The Dawn of the Agentic SOC: Reimagining Cybersecurity for the AI Era
      The Dawn of the Agentic SOC: Reimagining Cybersecurity for the AI Era
      09/26/25
      CrowdStrike Falcon Platform Evolves to Lead the Agentic Security Era
      CrowdStrike Falcon Platform Evolves to Lead the Agentic Security Era
      09/16/25
      CrowdStrike to Acquire Pangea to Secure Enterprise AI Use and Development
      CrowdStrike to Acquire Pangea to Secure Enterprise AI Use and Development
      09/15/25
    • From The Front Lines
      From The Front Lines
      CrowdStrike Named a Leader in 2025 IDC MarketScape for Worldwide Incident Response Services
      CrowdStrike Named a Leader in 2025 IDC MarketScape for Worldwide Incident Response Services
      08/27/25
      CrowdStrike Launches New AI Security Services to Strengthen AI Security and SOC Readiness
      CrowdStrike Launches New AI Security Services to Strengthen AI Security and SOC Readiness
      08/06/25
      CrowdStrike Detects and Blocks Initial SharePoint Zero-Day Exploitation
      CrowdStrike Detects and Blocks Initial SharePoint Zero-Day Exploitation
      07/21/25
      Prescription for Protection: Healthcare Industry Observations from CrowdStrike Investigations
      Prescription for Protection: Healthcare Industry Observations from CrowdStrike Investigations
      07/01/25
    • Next-Gen Identity Security
      Next-Gen Identity Security
      CrowdStrike to Acquire Seraphic to Secure Work in Any Browser
      CrowdStrike to Acquire Seraphic to Secure Work in Any Browser
      01/13/26
      Falcon Shield Evolves with AI Agent Visibility and Falcon Next-Gen SIEM Integration
      Falcon Shield Evolves with AI Agent Visibility and Falcon Next-Gen SIEM Integration
      12/08/25
      CrowdStrike Named Overall Leader in 2025 KuppingerCole ITDR Leadership Compass
      CrowdStrike Named Overall Leader in 2025 KuppingerCole ITDR Leadership Compass
      11/10/25
      CrowdStrike Named the Leader in 2025 Frost Radar for SaaS Security Posture Management
      CrowdStrike Named the Leader in 2025 Frost Radar for SaaS Security Posture Management
      10/27/25
    • Next-Gen SIEM & Log Management
      Next-Gen SIEM & Log Management
      Transform AWS Security Operations with Falcon Next-Gen SIEM
      Transform AWS Security Operations with Falcon Next-Gen SIEM
      12/01/25
      CrowdStrike Leads New Evolution of Security Automation with Charlotte Agentic SOAR
      CrowdStrike Leads New Evolution of Security Automation with Charlotte Agentic SOAR
      11/05/25
      CrowdStrike Named a Visionary in 2025 Gartner® Magic Quadrant™ for Security Information and Event Management
      CrowdStrike Named a Visionary in 2025 Gartner® Magic Quadrant™ for Security Information and Event Management
      10/10/25
      CrowdStrike Boosts SOC Detection Content with Correlation Rule Template Discovery Dashboard
      CrowdStrike Boosts SOC Detection Content with Correlation Rule Template Discovery Dashboard
      09/29/25
    • Public Sector
      Public Sector
      CrowdStrike Achieves FedRAMP® High Authorization
      CrowdStrike Achieves FedRAMP® High Authorization
      03/19/25
      NHS Matures Healthcare Cybersecurity with NCSC’s CAF Assurance Model
      NHS Matures Healthcare Cybersecurity with NCSC’s CAF Assurance Model
      03/13/25
      Zero Trust Strengthens Data Protection to Achieve National Cyber Strategy Goals
      Zero Trust Strengthens Data Protection to Achieve National Cyber Strategy Goals
      01/15/25
      CrowdStrike Statement on Bloomberg’s October 25, 2024 Story
      CrowdStrike Statement on Bloomberg’s October 25, 2024 Story
      10/25/24
    • Exposure Management
      Exposure Management
      January 2026 Patch Tuesday: 114 CVEs Patched Including 3 Zero-Days
      January 2026 Patch Tuesday: 114 CVEs Patched Including 3 Zero-Days
      01/13/26
      Inside the Latest Innovations Powering Falcon Exposure Management
      Inside the Latest Innovations Powering Falcon Exposure Management
      12/12/25
      December 2025 Patch Tuesday: One Critical Zero-Day, Two Publicly Disclosed Vulnerabilities Among 57 CVEs
      December 2025 Patch Tuesday: One Critical Zero-Day, Two Publicly Disclosed Vulnerabilities Among 57 CVEs
      12/09/25
      From Vulnerability Management to Exposure Management: The Platform Era Has Arrived
      From Vulnerability Management to Exposure Management: The Platform Era Has Arrived
      11/13/25
    • Data Protection
      Data Protection
      Falcon Data Protection for Cloud Extends DSPM into Runtime
      Falcon Data Protection for Cloud Extends DSPM into Runtime
      11/20/25
      CrowdStrike Stops GenAI Data Leaks with Unified Data Protection
      CrowdStrike Stops GenAI Data Leaks with Unified Data Protection
      09/18/25
      Q&A: How Mastronardi Produce Secures Innovation with CrowdStrike
      Q&A: How Mastronardi Produce Secures Innovation with CrowdStrike
      02/14/25
      Data Protection Day 2025: The Evolving Role of AI in Data Protection
      Data Protection Day 2025: The Evolving Role of AI in Data Protection
      01/28/25
    • Securing AI
      Securing AI
      What Security Teams Need to Know About OpenClaw, the AI Super Agent
      What Security Teams Need to Know About OpenClaw, the AI Super Agent
      02/04/26
      Secure AI with CrowdStrike: Real-World Stories of Protecting AI Workloads and Data
      Secure AI with CrowdStrike: Real-World Stories of Protecting AI Workloads and Data
      02/02/26
      How Agentic Tool Chain Attacks Threaten AI Agent Security
      How Agentic Tool Chain Attacks Threaten AI Agent Security
      01/30/26
      Data Protection Day 2026: From Compliance to Resilience
      Data Protection Day 2026: From Compliance to Resilience
      01/28/26
  • Start Free Trial
  • Featured
  • Recent
  • Video
  • Category
  • Start Free Trial

Falcon Adversary OverWatch

Advanced Web Shell Detection and Prevention: A Deep Dive into CrowdStrike's Linux Sensor Capabilities

Advanced Web Shell Detection and Prevention: A Deep Dive into CrowdStrike's Linux Sensor Capabilities

February 05, 2026

Falcon Adversary OverWatch Endpoint Security & XDR

Observations from the Field Falcon Adversary OverWatch has observed a number of adversaries targeting Zimbra mail servers, often with the use of web shells and other backdoors. This is consistent with[…]

    Categories
    • Agentic SOC
      46
    • Cloud & Application Security
      139
    • Data Protection
      20
    • Endpoint Security & XDR
      349
    • Engineering & Tech
      86
    • Executive Viewpoint
      177
    • Exposure Management
      113
    • From The Front Lines
      197
    • Next-Gen Identity Security
      64
    • Next-Gen SIEM & Log Management
      108
    • Public Sector
      40
    • Securing AI
      24
    • Threat Hunting & Intel
      208
    CONNECT WITH US
    background pattern
    FEATURED ARTICLES
    October 01, 2024
    CrowdStrike Named a Leader in 2024 Gartner® Magic Quadrant™ for Endpoint Protection Platforms
    September 25, 2024
    Recognizing the Resilience of the CrowdStrike Community
    September 25, 2024
    CrowdStrike Drives Cybersecurity Forward with New Innovations Spanning AI, Cloud, Next-Gen SIEM and Identity Protection
    September 18, 2024
    SUBSCRIBE

    Sign up now to receive the latest notifications and updates from CrowdStrike.

    Created with Sketch.
    See CrowdStrike Falcon® in Action

    Detect, prevent, and respond to attacks— even malware-free intrusions—at any stage, with next-generation endpoint protection.

    See Demo
    logo
    • Copyright © 2026 CrowdStrike
    • Privacy
    • Request Info
    • Blog
    • Contact Us
    • 1.888.512.8906
    • Accessibility