CrowdStrike Falcon Intelligence Premium: Cyber Threat Intelligence

CrowdStrike Falcon Intelligence® Premium enables security teams to be become intelligence-led by exposing the adversaries
and evolving tradecraft targeting your business.

Falcon Intelligence tiers

Choose the option that suits you best


CrowdStrike Falcon® Intelligence

Automatically investigate incidents and accelerate alert triage and response. Built into the Falcon platform, it is operational in seconds.

falcon-intelligence-icon-premium 1 (1)

CrowdStrike Falcon® Intelligence Premium

Premium adds threat intelligence reporting and research from CrowdStrike experts — enabling you to get ahead of nation-state, eCrime and hacktivist adversaries.


CrowdStrike Falcon® Intelligence Elite

Elite expands your team with access to an intelligence analyst to help defend against adversaries targeting your organization.
*Requires Falcon Intelligence Premium

"Falcon Intelligence Premium is the “Jewel on our Crown” in all our arsenal and where we go to first. We rely on it not just for SOC but also for our board and financial decisions."

-CISO, Technology Company

  • Endpoint Integration tooltip
  • Automated Investigations tooltip
  • Indicators of Compromise (IOCs) tooltip
  • Intelligence reports tooltip
  • Tailored intelligence tooltip
  • SNORT/YARA rules tooltip
  • Assigned intel analyst tooltip
  • Requests for information tooltip
  • Priority intelligence requirements tooltip

Falcon Intelligence

Falcon Intelligence Elite

Why choose Falcon Intelligence Premium

Know your adversaries

At the heart of every attack are human adversaries. Falcon Intelligence Premium helps you understand their tactics, techniques and procedures.

Gain relevant & actionable intel

From real-time alerts to in-depth research to C-suite intelligence reporting, you’re prepared to take action at every level.

Rely on trusted experts

CrowdStrike’s global team of nation-state and eCrime experts expose sophisticated attacks with groundbreaking research.

Falcon Intelligence Premium features

Intelligence reports

  • The CrowdStrike Security Cloud correlates trillions of events each day identifying real-time shifts in adversarial tactics.
    This visibility is unique to CrowdStrike - enabling us to deliver intelligence and reporting that no one else provide.
  • Threat alerts are sent via timely emails exposing current and emerging threat activity
  • Technical reports deliver in-depth analysis of the latest adversary tools, malware and campaigns
  • C-Suite reports provide global threat assessments for better security and risk-management decisions
  • Access to 165+ profiles on nation-state eCrime and hacktivist adversaries arm you with the latest knowledge

Automation and feeds

  • Automated investigations reduce the time and skills required to perform malware investigations
  • Real-time IOCs feed enables users to improve threat hunting, alerting and security defenses.
  • Because it’s built on the CrowdStrike Falcon® platform, there is nothing extra to deploy or maintain
Falcon intel automated analysis

Tailored intelligence

  • Automatically monitors the internet to identify adversary activity targeting your organization
  • Searches social media and Pastebin sites to uncover suspicious activity
  • Identifies distributed denial of service (DDoS) and botnet attacks against your infrastructure
Falcon intel premium social media search

Technical expertise

  • Escalate malware to a CrowdStrike expert* who will perform research or provide a second opinion
  • Access YARA and SNORT rules for better detection and categorization of network and file-based threats
  • Attend CrowdStrike Global Threat Briefings to gain an understanding of the worldwide threat landscape and emerging trends
  • Use requests for information (RFIs) for custom research that’s conducted on your behalf (available separately)
Falcon intel premium tipper