Falcon® Intelligence Recon
Stop cybercriminals in their tracks
Stop cybercriminals in their tracks
Prevent dark web threats that could compromise identities, steal sensitive data, and destroy your organization’s brand.
External threats are accelerating
112%
Increase in dark web advertisements for stolen credentials
3 of 5
Intrusions used stolen or compromised credentials
20%
Increase in adversaries conducting dark web data extortion
Why choose Falcon Intelligence Recon?
Gain visibility into cybercrime activities with real-time dark web monitoring that empowers security teams to discover and disrupt digital threats.
Detect and disrupt imminent threats
Detect and disrupt imminent threats
Safely monitor underground criminal forums, marketplaces, and social media for imminent threats. Respond instantly via real-time alerts and arm key stakeholders such as identity teams to mitigate discovered credential theft via password or MFA reset.

Safeguard your brand and reputation
Safeguard your brand and reputation
Stop adversaries from impersonating your brand by discovering fraudulent domains or phishing emails. Warn brand, marketing, or legal teams of malicious domain details to dispute ownership or take legal action against them.

Leverage CrowdStrike expertise
Leverage CrowdStrike expertise
Cybersecurity skills and resources are scarce. Save time and resources with Falcon Intelligence Recon+, a managed service, and let CrowdStrike experts protect your business from digital threats.

Falcon Intelligence Recon by the numbers
Mitigate digital threats that matter before they become a problem.
75%
Reduction in threat research time
200K+
Vulnerabilities tracked
1+ M
Unique data sources
Expose the dark web:
Expose the dark web:
Falcon Intelligence Recon key capabilities
Track adversaries beyond the perimeter
- Expose malicious activity within criminal forums, marketplaces, and underground communities.
- Discover exposed data and credentials.
- Uncover fraudulent domain registrations used to launch phishing attacks and deliver malicious content.
Quickly pinpoint the right threats
- Cut through the high noise of underground chatter.
- Leverage pre-built and custom rules for rapid analysis of relevant posts on underground forums that put your business at risk.
Situational awareness on the eCrime landscape
-
Threats activities come and go. Expand your understanding on where adversaries are active with our weekly cybercrime reports.
See trends across data leak sites, access broker activity, and vulnerability exploits to prioritize ways to reduce business risk.
Harden the threat surface more effectively
- Use Falcon Intelligence Recon to prioritize your vulnerabilities by real-life observed exploit activities.
- Get threat activity context on all publicly known CVEs. See related actors and threat research reports, and filter CVEs based upon exploit status, severity, and impacted products.
"A good partnership gives feedback in both directions. CrowdStrike is the BEST partner with the BEST, accurate, timely, and actionable Intelligence. "
Government agency
"CrowdStrike Falcon Intelligence Recon helps us to be more prepared against threat actors that leverage legitimate tools and increases efficiency of our risk mitigation efforts by over 100%."
Large enterprise financial services company
"CrowdStrike provides our team with a comprehensive and clear picture of exactly what is happening across the globe, 24/7. That’s an essential ingredient in protecting us from issues long before they become a problem."
Mercedes-AMG Petronas Formula One Team
Falcon Intelligence Recon Offerings
- Monitor Criminal Forums
- Detect Domain Abuse
- Vulnerability Intelligence
- Cybercrime Reports
- Assigned Expert
- Managed Alerts
- Threat Briefings
- Mitigation Assistance
Falcon Encounter
hands-on lab
hands-on lab
Falcon Encounter
hands-on lab
hands-on lab
Tested and proven leader


