November 2022 Summaries

CrowdStrike's blog post explores its strategic use of Log-Structured Merge (LSM) tree-based databases to effectively manage and process the vast scale of data within its Threat Graph, which now handles trillions of events per day and stores over 40 petabytes of data. The LSM tree structure optimizes for high write throughput, crucial for CrowdStrike's needs, as six out of every seven operations are writes. This is achieved through an append-only approach, avoiding costly delete operations by using time-to-live (TTL) mechanisms during background compaction processes. The sorted nature of LSM tree databases aids in efficient read operations by leveraging data locality, enabling related data to be stored closely together. CrowdStrike's adoption of LSM trees, including contributions to the Apache Cassandra project, has allowed the company to scale its systems while ensuring efficient data processing and customer protection in the cybersecurity domain.

CrowdStrike's blog highlights its advancements in cybersecurity, particularly in the realm of AI and cloud security, through various strategic initiatives and recognitions. The company has been named a leader in multiple industry reports, including the Frost Radar and Forrester Wave, and has introduced several innovations in identity security, cloud workload protection, and AI threat intelligence. CrowdStrike's Falcon platform, renowned for its cloud-native capabilities, plays a crucial role in its collaborations, such as the strategic alliance with Deloitte to offer an integrated suite of managed security services. This partnership aims to enhance threat detection, response capabilities, and overall cybersecurity posture for organizations, leveraging CrowdStrike's technologies and Deloitte's advisory services. Additionally, CrowdStrike continues to expand its offerings and strategic alliances with major tech companies to bolster its multi-layered defense solutions for various sectors.

CrowdStrike's Falcon LogScale is designed to provide rapid and flexible log management solutions that outperform traditional platforms by utilizing index-free technology, allowing for the efficient ingestion and searching of log data at petabyte scale with minimal latency. This speed is achieved through data compression, tagging, and the use of Bloom filters, which streamline the search process by narrowing down the segments of data to be examined, ultimately enhancing productivity and threat response capabilities. Falcon LogScale's flexible search capabilities enable users to refine searches on the fly, facilitating quicker investigations and minimizing the time spent on data queries. The solution supports extensive data volumes without the high costs or resource demands associated with legacy platforms, offering a consistent and scalable option for modern security operations, and is backed by the CrowdStrike Falcon platform's cloud-native architecture.

CrowdStrike has been actively involved in enhancing cybersecurity measures and frameworks, particularly in the context of Infrastructure as a Service (IaaS) environments. As a research partner with the MITRE Engenuity Center for Threat-Informed Defense, CrowdStrike contributed to the development of an updated ATT&CK framework tailored for IaaS, identifying 510 adversarial techniques and releasing tool updates to aid in defense strategies. The collaboration resulted in a refined methodology and the creation of a Defending IaaS Matrix, which allows organizations to focus on relevant attack vectors across cloud, container, and Linux platforms. This initiative underscores CrowdStrike's commitment to cybersecurity leadership, as demonstrated by their ongoing partnership with MITRE and their high detection coverage in the MITRE ATT&CK Evaluations for Security Service Providers.

CrowdStrike's blog post provides an in-depth analysis of how eCrime, financially motivated cybercriminal activities, fluctuates throughout the year, particularly during the holiday season when users' defenses are typically lowered. It introduces the CrowdStrike eCrime Index (ECX), a tool launched in 2021 to assess the health of the digital underground economy by monitoring various factors such as ransom demands, cryptocurrency trends, and vulnerabilities. The post highlights two significant peaks in eCrime activity over the past year, correlating these with global events like the Russian invasion of Ukraine and the holiday season. It emphasizes the persistence of command-and-control servers and the prevalence of big game hunting, including ransomware, as major threats. Additionally, it discusses the human susceptibility to spam and phishing scams, especially during high shopping periods like Black Friday and Cyber Monday, and outlines common scams targeting both consumers and retailers. The article underscores the importance of threat intelligence and digital risk monitoring in staying ahead of cyber threats, leveraging the ECX and CrowdStrike's ongoing analysis to provide early warnings and insights into cybercriminal behavior.

CrowdStrike, a leading cybersecurity company, has been recognized for its innovation and growth in the cloud security sector, as highlighted by its accolades in the 2022 Frost Radar for Cloud-Native Application Protection Platform (CNAPP) and the CRN Tech Innovator Awards. The company's Falcon platform provides a comprehensive approach to cloud security through agent-based and agentless solutions, addressing modern threats with features such as cloud workload protection, security posture management, and container security. These solutions emphasize automation, visibility, and threat intelligence to protect against sophisticated cyber threats. CrowdStrike's continuous innovation, including new capabilities in software composition analysis and cloud infrastructure entitlement management, positions it as a strong performer in the market, with a sustainable growth pipeline and a robust customer base. The company's proactive cloud security measures are designed to meet evolving customer needs and enhance enterprise defense against an expanding attack surface.

CrowdStrike, a leader in cybersecurity solutions, is actively enhancing its offerings across various domains, including AI, cloud security, and identity protection. The company is focusing on preventing data leaks and addressing vulnerabilities through innovations like the Falcon Cloud Security and Threat AI, an advanced threat intelligence system. With strategic acquisitions, such as Pangea and Onum, CrowdStrike aims to secure AI development and improve security operations. The firm also emphasizes collaboration with partners like AWS to provide robust security measures for cloud environments, showcasing these efforts at events like AWS re:Invent. Moreover, CrowdStrike is recognized as a leader by several industry analysts for its comprehensive protection strategies, such as endpoint security and SIEM, to address the ever-evolving threat landscape.

CrowdStrike's recent announcements highlight its advancements in cybersecurity, focusing on the integration of AI and cloud-native application protection through its Falcon platform. The company has introduced several innovations such as Threat AI, the first agentic threat intelligence system, and improved identity security with three key innovations. Additionally, CrowdStrike aims to prevent GenAI data leaks with unified data protection and enhance security in cloud environments by tracing attack paths to sensitive data. The company emphasizes the importance of developer-focused security strategies, advocating for a shift-left approach to integrate security into the CI/CD pipeline, thus enabling organizations to address security risks before they escalate. Through collaborations with AI leaders and strategic acquisitions, CrowdStrike is positioning itself as a leader in the next-gen cybersecurity landscape, striving to secure AI and cloud resources across various environments.

CrowdStrike's recent initiatives highlight its leadership in cybersecurity, emphasizing advancements in AI, exposure management, and identity security. The company has been recognized as a leader in several industry reports, including the IDC MarketScape for Worldwide Incident Response Services and Exposure Management, as well as the Gartner® Magic Quadrant™ for Endpoint Protection Platforms. CrowdStrike's acquisition of Onum aims to transform data utilization within the Agentic SOC, while its Falcon Intelligence Recon now detects domain impersonations, enhancing the ability to anticipate and mitigate threats like typosquatting. These developments are part of CrowdStrike's broader strategy to integrate AI-driven solutions and improve cybersecurity resilience across various sectors, including small businesses and the public sector.

Cloud storage misconfigurations, particularly in services like Azure Blob Storage, present significant security risks as they can expose valuable data to unauthorized access. A recent incident involving Microsoft highlighted the dangers of such misconfigurations when a storage bucket was inadvertently made publicly accessible, though it was quickly secured without any customer data compromise. Threat actors exploit these vulnerabilities through reconnaissance, enumeration, and data exfiltration, targeting unencrypted data stored in publicly accessible blobs. To mitigate these risks, companies are encouraged to implement security measures such as access control lists, network firewalls, encryption, and continuous monitoring of configurations. CrowdStrike's Falcon Cloud Security offers solutions for detecting and rectifying these vulnerabilities by alerting on misconfigurations and ensuring data protection through encryption and secure access settings.

The blog highlights CrowdStrike's recent advancements and leadership in cybersecurity, emphasizing its innovative approaches to cloud workload protection, AI development security, identity security, and vulnerability management. Notably, CrowdStrike has been recognized as a leader in several key areas, including cloud workload protection platforms and managed detection and response services. The company is advancing next-generation identity security with new innovations and has been actively involved in securing AI across enterprises. Additionally, it discusses the evolving threat landscape, underscoring the importance of strategic data protection and the need for robust security measures to adapt to emerging cyber threats. The narrative also touches on the company's achievements, like being named a leader in the 2025 IDC MarketScape for exposure management, and its proactive efforts in incident response and patch management, as seen in the detailed breakdown of vulnerabilities addressed in recent Patch Tuesday updates.

CrowdStrike has been recognized as a leader in multiple cybersecurity sectors, including Managed Detection and Response Services and Worldwide Incident Response Services, according to The Forrester Wave™ and IDC MarketScape reports for 2025. The company has developed advanced technologies like Falcon Long Term Repository (Falcon LTR) and Falcon LogScale to enhance threat detection and response by enabling the correlation of diverse security telemetry data. These innovations facilitate economical long-term storage and rapid search capabilities, addressing the limitations of traditional SIEM tools. CrowdStrike's advancements in AI and machine learning aim to protect against evolving cyber threats, while strategic partnerships and acquisitions, such as the acquisition of Onum, strengthen its capabilities in the cybersecurity landscape. The company continues to focus on cloud and application security, endpoint security, threat hunting, and identity protection, positioning itself as a leader in the cybersecurity industry.

CrowdStrike has achieved significant recognition and advancements in cybersecurity, particularly with its Falcon platform, which excelled in the MITRE ATT&CK Evaluations for Security Service Providers by detecting 75 of 76 adversary techniques, showcasing its integration of advanced technology and human expertise. The evaluations emphasized the platform's ability to identify and contextualize unknown threats in real-world scenarios without prior knowledge, highlighting its effectiveness in rapid threat detection and response. CrowdStrike's continuous innovation in areas like AI, cloud security, and identity protection underscores its commitment to addressing the growing sophistication of cyber threats, as well as bridging the cybersecurity skills gap through managed detection and response services. The company's efforts are also evidenced by its leadership positions in various industry assessments and its strategic acquisitions aimed at enhancing enterprise AI security.

CrowdStrike has been recognized for its advancements in cybersecurity, particularly in areas such as AI, cloud security, identity protection, and Zero Trust architecture. The company's strategic partnership with Okta has been pivotal, earning them the Okta Workforce Identity Cloud Technology Partner of the Year Award. This collaboration enhances security by integrating solutions that provide comprehensive visibility into user and device context, facilitating informed access decisions and improving enterprise security posture. CrowdStrike's Falcon platform, along with the CrowdXDR Alliance, focuses on extending detection and response capabilities, enabling organizations to leverage their existing security investments. The partnership underscores the importance of a multi-layered security approach to address the evolving threat landscape, with a focus on providing seamless security experiences without compromising compliance or user productivity.

CrowdStrike's blog highlights the company's advancements in cybersecurity, focusing on innovative solutions to protect against modern threats. It emphasizes their proactive approach to threat hunting, particularly through the Falcon OverWatch team, which utilizes behavioral detections and human analysis to identify and address potential vulnerabilities in web applications. The blog discusses the use of Out-of-Band Application Security Testing (OAST) to detect blind vulnerabilities and how adversaries might exploit these to gain unauthorized access. CrowdStrike's solutions, including the Falcon platform, aim to enhance threat detection and response capabilities, with a strong emphasis on AI and cloud security. The company is recognized for its leadership in various cybersecurity domains, including endpoint protection and incident response services, and continues to drive innovations in areas such as AI security and next-gen identity protection.

CrowdStrike has solidified its position as a leader in the cybersecurity landscape through its innovative approach and comprehensive offerings, notably with its pioneering endpoint detection and response (EDR) technology and the evolution into extended detection and response (XDR). The company emphasizes the importance of integrating security with IT operations to enhance data utilization, improve security posture, and operational performance, which is facilitated by their cloud-native CrowdStrike Falcon platform. This platform's ability to correlate security and observability data provides customers with insights into both security and IT issues, enabling proactive risk assessment and mitigation. CrowdStrike's focus on innovation is also reflected in its advancements in AI security, identity protection, and cloud security, as well as its strategic acquisitions aimed at enhancing enterprise AI use and data management. The company's commitment to leading the industry forward is driven by its mission to protect its customers against modern threats like ransomware, ensuring they remain resilient and productive.