The challenge
When a breach occurs, speed to remediation and recovery is critical to minimize the impact on business operations. Advanced persistent threats can quickly break out across your network, infecting your endpoints, moving laterally across your systems and disrupting your business.
The benefits of endpoint recovery services
Achieve active containment quickly with the power of real time response and recovery.
- Contain active threats
- Delete malicious files and processes
- Restore registry entries
- Recover endpoints with speed and precision
What CrowdStrike delivers
CrowdStrike Endpoint Recovery Services is available in 30-day increments to enable the fast recovery of endpoints across your network. In addition, CrowdStrike monitors your environment using the global security expertise of the Falcon OverWatch™ team to prevent any new or recurring attacks.
Over the next 72 to 96 hours, the CrowdStrike Services team leverages the Falcon platform to analyze attacks and actively remediate and remove any memory-resident malware, persistence and other active attack components.
The OverWatch threat hunting team monitors for attack techniques designed to bypass even the best security technology and communicates directly with the recovery team when attacker behavior is observed and remediation is required
