Falcon X Recon: Digital Risk Protection
CrowdStrike Falcon X Recon™ monitors potentially malicious activity across the open, deep and dark web to enable organizations to better protect their brand, employees and sensitive data.
Attend Free Hands-on Workshop
Falcon X Recon Offerings
CHOOSE THE OPTION THAT SUITS YOU BEST
-
Falcon X Recon
Falcon X Recon enables security teams to monitor and track adversaries across the open, deep and dark web.
-
Falcon X Recon+
Includes everything in Falcon X Recon, but CrowdStrike manages it for you. Falcon X Recon+ reduces the time, skills and effort required for you to battle sophisticated adversaries.
Falcon X Recon | Falcon X Recon+ | |
---|---|---|
Access Data from the Open, Deep, and Dark Web | ||
Create Monitoring Rules | ||
Set and Manage Alerts | ||
Universal Search | ||
Actor Profiles and Indicator Feed | ||
Assigned CrowdStrike Expert | ||
Managed rule monitoring | ||
Alert triage and assessment | ||
Mitigation recommendations | ||
Updates and threat briefings | ||
Takedown Service |
Benefits
GAIN SITUATIONAL AWARENESS ACROSS THE DARK WEB AND BEYOND
-
Broad Coverage
Falcon X Recon exposes digital risk by monitoring the hidden recesses of the internet where criminal actors congregate and underground economies thrive.
-
Instant Visibility
Falcon X Recon provides real-time visibility to potential threats, reducing investigation time and improving efficiency and response.
-
Immediate Impact
Take immediate action against digital risk on Day One — Falcon X Recon is built on the cloud-native CrowdStrike Falcon® Platform so there’s nothing to install, administer or deploy.
Features
How Falcon X Recon Works
UNRIVALED COVERAGE
- Access raw intelligence from millions of hidden webpages and thousands of restricted sites on the open, deep and dark web.
- Expand visibility into IRC channels, rogue apps, phishing domains, botnet and DDoS configurations, and messaging apps like Telegram, QQ and more.
- Identify business, reputational and third-party risks emanating from leaked credentials, PII and financial data.
- View current and historical posts and chatter to track adversary activities and behavior that could pose a cyber or physical risk to your organization and personnel.
INVESTIGATE
- Customize dashboards to enable users to see, at a glance, current notifications and quickly drill into critical alerts and activity for further research.
- Easy-to-use wizards help set up monitoring of brand names, executives, domains, vulnerabilities and more.
- Investigate the threat actor’s profile and history and be alerted when new activity occurs.
- Translate posts from 18 languages using augmented translation with hacker slang dictionaries.

NOTIFY
- Set alert priority and immediately pivot from the notification to underlying raw intelligence.
- Customize notifications and set alerts to be real time, daily or weekly.
- Enable users to assign a notification to other users for review or action. Track workload related to notification assignment and status.
- Alert departments outside of security such as marketing, legal, human resources and fraud.
- Integrate notifications into third-party ticketing systems, SIEMS and SOARs with an easy to use Rest API.
- Access and view results immediately, Falcon X Recon is integrated in the Falcon Platform. No extra training or separate portals are required.
FALCON X RECON+
Includes everything in Falcon X Recon, but we manage it for you.
-
CyberCrime Monitoring
Falcon X Recon+ includes the technology required to deliver near real-time visibility across the vast cybercriminal underground and the skills to manage the system for you.
-
Deep Expertise
Falcon X Recon+ provides direct access to a CrowdStrike expert with proven effectiveness in identifying and mitigating threats across the criminal underground.
-
Rapid Takedowns
CrowdStrike helps facilitate the takedown of fraudulent accounts, phishing websites, domains, and malicious posts that can potentially harm your business.
Related Resources
LEARN MORE ABOUT CROWDSTRIKE INTELLIGENCE PRODUCTS
-
Falcon X
Automatically investigate incidents and accelerate alert triage and response. Built into the Falcon platform, it is operational in seconds.
-
Falcon X Premium
Premium adds threat intelligence reporting and research from CrowdStrike experts — enabling you to more effectively mitigate sophisticated nation-state, eCrime and hacktivist attacks.
-
Falcon X Elite
Elite is a force multiplier that expands your team’s capabilities with access to an assigned CrowdStrike Intel Analyst.
Product Validation