CrowdStrike Agent Graph Shows How Agents Act on the Endpoint

CrowdStrike describes Agent Graph as the relational foundation of its Falcon Guardian product for monitoring and securing AI agents on endpoints at runtime. Built on the existing Falcon sensor, it links prompts, users, hosts, models, tools, MCP servers, processes, files, network connections, and detections into causal records of agent activity. Falcon Guardian uses this information for an agent inventory that identifies sanctioned and shadow agents, session graphs that trace activity from prompt to resulting system actions, and threat scores intended to prioritize risk investigation. For supported tools including Claude Code, OpenAI Codex, GitHub Copilot, OpenCode, and Cursor, agent hooks can capture prompt, tool-call, and output details and apply policies to block risky actions before execution.

Use this post, company, and trend context to find content marketing opportunities, perform competitive analysis, or address product feature gaps via the Plushcap MCP server or the Plushcap API.