CrowdStrike Falcon® Intelligence Recon

CHOOSE THE OPTION THAT SUITS YOU BEST

Falcon Intelligence Recon

Falcon Intelligence Recon enables security teams to monitor and track adversaries and their activities across criminal forums, domain usage and underground communities.

See below
Falcon Intelligence Recon+

Includes everything in Falcon Intelligence Recon, but CrowdStrike manages it for you.

Falcon Intelligence Recon+ reduces the time, skills and effort required for you to battle sophisticated adversaries.

Learn more

	Falcon Intelligence Recon	Falcon Intelligence Recon+
TRACK CRIMINAL VENUES ON OPEN, DEEP AND DARK WEB
SAFELY ACCESS ECRIME POSTS AND ANONYMOUS CHATS
DISCOVER DOMAIN IMPERSONATIONS
CREATE MONITORING RULES
ASSIGN AND MANAGE ALERTS
SEARCH ACROSS FALCON INTELLIGENCE
ACTOR PROFILES AND INDICATOR FEED
ASSIGNED CROWDSTRIKE EXPERT
MANAGED RULE MONITORING
ALERT TRIAGE AND ASSESSMENT
MITIGATION RECOMMENDATIONS
UPDATES AND THREAT BRIEFINGS
TAKEDOWN SUPPORT

Broad Coverage

Falcon Intelligence Recon exposes digital risk by monitoring hidden recesses where criminal actors congregate. Discover fraudulent domain names related to brands or internal systems.
Fast and Efficient Investigation

Falcon Intelligence Recon provides real-time visibility into potential underground cyber threats and analyzes domains to identify brand impersonations.
Immediate Impact

Take immediate action against digital risk on Day One — Falcon Intelligence Recon is built on the cloud-native CrowdStrike Falcon® platform so there’s nothing to install, administer or deploy.

Safely access raw intelligence from hundreds of criminal forums, marketplaces and underground communities.
Discover domain names leading users into malicious infrastructure or phishing attempts.
Quick domain typosquatting rule creation using single word or a combination of words.
Identify reputational and third-party risks emanating from leaked credentials, PII and financial data.
View underground chatter that could pose a cyber or physical risk to your organization and personnel.

Customize event dashboards to see, at a glance, current notifications and quickly drill into critical alerts for further research.
Examine malicious domains with IP’s, Name Servers, MX records, SSL Certificates, Whois Records.
Easy-to-use wizards help set up monitoring of brand names, executives, domains, vulnerabilities and more.
Investigate the threat actor’s profile, posting history and be alerted when new activity occurs.
Convert posts from over 18 languages into English using augmented translation with hacker slang dictionaries.

Set alert priority and immediately pivot from the notification to underlying raw intelligence.
Customize notifications and set alerts to be real time, daily or weekly.
Assign notifications to other users for review or action. Track workload and status.
Alert departments outside of security such as marketing, legal, human resources and fraud.
Integrate notifications into third-party ticketing systems, SIEMs and SOARs with an easy to use REST API.
Access and view results immediately, CrowdStrike Falcon® Intelligence Recon is integrated in the Falcon platform. No extra training or separate portals are required.

CyberCrime Monitoring

Falcon Intelligence Recon+ includes the technology and skills required to identify threats to your organization across the vast cybercriminal underground.
Deep Expertise

Gain direct access to a CrowdStrike expert with a proven background in identifying and mitigating threats to organizations, brands and sensitive data.
Rapid Takedowns

CrowdStrike helps prepare and facilitate the takedown of fraudulent accounts, phishing websites, domains, and malicious posts that can potentially harm your business.

FALCON INTELLIGENCE

Automatically investigate incidents and accelerate alert triage and response. Built into the Falcon platform, it is operational in seconds.

Learn More
Falcon Intelligence Premium

Premium adds threat intelligence reporting and research from CrowdStrike experts — enabling you to more effectively mitigate sophisticated nation-state, eCrime and hacktivist attacks.

Learn More
Falcon Intelligence Elite

Elite is a force multiplier that expands your team’s capabilities with access to an assigned CrowdStrike Intel Analyst.

Learn More