CrowdStrike Falcon® Intelligence Recon: Digital Risk Protection


Monitor potentially malicious activity across criminal forums, domain registrations, and underground communities, providing security teams early warnings on emerging threats to their brand, employees and sensitive data.
Attend free Falcon Encounter Hands-on Lab

CrowdStrike Falcon® Intelligence Recon Offerings

CHOOSE THE OPTION THAT SUITS YOU BEST

  • Falcon Intelligence Recon

    Falcon Intelligence Recon

    Falcon Intelligence Recon enables security teams to monitor and track adversaries and their activities across criminal forums, domain usage and underground communities.

    See below

  • Falcon Intelligence Recon+

    Falcon Intelligence Recon+

    Includes everything in Falcon Intelligence Recon, but CrowdStrike manages it for you.

    Falcon Intelligence Recon+ reduces the time, skills and effort required for you to battle sophisticated adversaries.

    Learn more

Falcon Intelligence Recon
Falcon Intelligence Recon+
TRACK CRIMINAL VENUES ON OPEN, DEEP AND DARK WEB checkcheck
SAFELY ACCESS ECRIME POSTS AND ANONYMOUS CHATS checkcheck
DISCOVER DOMAIN IMPERSONATIONS checkcheck
CREATE MONITORING RULES checkcheck
ASSIGN AND MANAGE ALERTS checkcheck
SEARCH ACROSS FALCON INTELLIGENCE checkcheck
ACTOR PROFILES AND INDICATOR FEED checkcheck
ASSIGNED CROWDSTRIKE EXPERT check
MANAGED RULE MONITORING check
ALERT TRIAGE AND ASSESSMENT check
MITIGATION RECOMMENDATIONS check
UPDATES AND THREAT BRIEFINGS check
TAKEDOWN SUPPORT check

Benefits

GAIN SITUATIONAL AWARENESS ACROSS THE DARK WEB AND BEYOND

  • triage icon

    Broad Coverage

    Falcon Intelligence Recon exposes digital risk by monitoring hidden recesses where criminal actors congregate. Discover fraudulent domain names related to brands or internal systems.

  • Fast and Efficient Investigation

    Fast and Efficient Investigation

    Falcon Intelligence Recon provides real-time visibility into potential underground cyber threats and analyzes domains to identify brand impersonations.

  • Immediate Impact

    Immediate Impact

    Take immediate action against digital risk on Day One — Falcon Intelligence Recon is built on the cloud-native CrowdStrike Falcon® platform so there’s nothing to install, administer or deploy.

Features

How Falcon Intelligence Recon Works

UNRIVALED COVERAGE

  • Safely access raw intelligence from hundreds of criminal forums, marketplaces and underground communities.
  • Discover domain names leading users into malicious infrastructure or phishing attempts.
  • Quick domain typosquatting rule creation using single word or a combination of words.
  • Identify reputational and third-party risks emanating from leaked credentials, PII and financial data.
  • View underground chatter that could pose a cyber or physical risk to your organization and personnel.

Download Falcon Intelligence Recon data sheet

INVESTIGATE

  • Customize event dashboards to see, at a glance, current notifications and quickly drill into critical alerts for further research.
  • Examine malicious domains with IP’s, Name Servers, MX records, SSL Certificates, Whois Records.
  • Easy-to-use wizards help set up monitoring of brand names, executives, domains, vulnerabilities and more.
  • Investigate the threat actor’s profile, posting history and be alerted when new activity occurs.
  • Convert posts from over 18 languages into English using augmented translation with hacker slang dictionaries.
NOTIFY

NOTIFY

  • Set alert priority and immediately pivot from the notification to underlying raw intelligence.
  • Customize notifications and set alerts to be real time, daily or weekly.
  • Assign notifications to other users for review or action. Track workload and status.
  • Alert departments outside of security such as marketing, legal, human resources and fraud.
  • Integrate notifications into third-party ticketing systems, SIEMs and SOARs with an easy to use REST API.
  • Access and view results immediately, CrowdStrike Falcon® Intelligence Recon is integrated in the Falcon platform. No extra training or separate portals are required.

FALCON INTELLIGENCE RECON+

Includes everything in Falcon Intelligence Recon, but we manage it for you.

  • CyberCrime Monitoring

    CyberCrime Monitoring

    Falcon Intelligence Recon+ includes the technology and skills required to identify threats to your organization across the vast cybercriminal underground.

  • Deep Expertise

    Deep Expertise

    Gain direct access to a CrowdStrike expert with a proven background in identifying and mitigating threats to organizations, brands and sensitive data.

  • Rapid Takedowns

    Rapid Takedowns

    CrowdStrike helps prepare and facilitate the takedown of fraudulent accounts, phishing websites, domains, and malicious posts that can potentially harm your business.

Related Resources

LEARN MORE ABOUT CROWDSTRIKE INTELLIGENCE PRODUCTS

  • FALCON INTELLIGENCE

    FALCON INTELLIGENCE

    Automatically investigate incidents and accelerate alert triage and response. Built into the Falcon platform, it is operational in seconds.

    Learn More

  • Falcon Intelligence Premium

    Falcon Intelligence Premium

    Premium adds threat intelligence reporting and research from CrowdStrike experts — enabling you to more effectively mitigate sophisticated nation-state, eCrime and hacktivist attacks.

    Learn More

  • Falcon Intelligence Elite

    Falcon Intelligence Elite

    Elite is a force multiplier that expands your team’s capabilities with access to an assigned CrowdStrike Intel Analyst.

    Learn More

Product Validation

CUSTOMERS THAT TRUST CROWDSTRIKE

GET ANSWERS TO FREQUENTLY ASKED QUESTIONS

View Falcon Intelligence Recon FAQ