Getting Started with Charlotte AI

User Guide

AI-accelerated adversaries have compressed attack timelines from days to seconds—making speed your most critical advantage. CrowdStrike® Charlotte AI™ bridges human expertise and machine-speed execution across the Falcon platform.

Charlotte AI is the brain of your agentic SOC, helping teams move from insight to impact faster. This hands-on guide shows how to start using Charlotte AI credits right away, apply best practices, and track time saved as you scale.

Key insights:

• Get started fast: Understand what Charlotte AI is, how credits work, and how to apply them across core capabilities — from chat and command-line explanations to agentic workflows and mission-ready agents.
• Implement AI-powered automation: Start generating Charlotte Agentic SOAR workflows with prompts, add reasoning with the “LLM-Completion” action, and build up to deploying specialized agents that offload repetitive work while keeping analysts in control.
• Measure and scale impact: Monitor credit usage to track adoption and ROI, then expand across teams by sharing wins and standardizing repeatable use cases.

Charlotte AI is the modern security team’s force multiplier, helping teams reclaim time, restore focus and reimagine SOC efficiency.