How to Perform a Simple Machine Search with the CrowdStrike Falcon Investigate App
CrowdStrike Falcon streams endpoint activity data to the cloud in real time. This makes the data available for administrators to search at any time, even if some endpoints are powered off or offline when the search is conducted. The speed of the CrowdStrike Threat Graph gives you five second visibility across your environment for both real-time and historical events.
For technical information on installation, policy configuration and more, please visit the CrowdStrike Tech Center.Visit the Tech Center