MDR in action: Analyzing CrowdStrike’s approach to protecting the digital frontier
As enterprises battle relentlessly against constant cyber threats, CrowdStrike Inc.’s multifaceted services have been positioned to safeguard businesses from growing threats by erecting perimeters along the digital frontier.
“Our job in services is to focus on two things,” said Tom Etheridge (pictured), chief global professional services officer of CrowdStrike. “One is the customer. Our job is to ensure we’re helping the customer stop breaches from happening in their environment, whether we do that through effective incident response and forensics investigatory work or through advisory and assessment and delivering some of the cybersecurity consultative experiences to help customers get better at both detecting and responding to incidents that they have in their environment.”
Etheridge spoke with theCUBE Research’s Dave Vellante and Rebecca Knight at Fal.Con, during an exclusive broadcast on theCUBE, SiliconANGLE Media’s livestreaming studio. They discussed new threats to the digital frontier, including insider attacks and revamped business email compromise schemes. (* Disclosure below.)
Managed Detection and Response evolves to secure the digital frontier
CrowdStrike pioneered Managed Detection and Response, a service rooted in the need for proactive defense against cyberattacks. The ethos behind MDR’s creation was the need for continuous, 24/7 monitoring. Thus, the MDR service was born, aimed at stopping attacks in their tracks through rapid detection and remediation, particularly focusing on identity, endpoints and cloud environments, according to Etheridge.
“On the MDR side in particular, we’ve been leveraging Charlotte AI and a lot of the tooling that we’ve built internally to take advantage of speed, increasing the speed in which we’re able to triage incidents, to contextualize incidents with the intelligence that the company produces and to build and automate some of the runbooks that the team has built around remediation in particular,” he said.
This service allows CrowdStrike to act swiftly when incidents arise, with response times often within 62 minutes, according to Etheridge. Through continuous monitoring, CrowdStrike helps companies detect and thwart cyber threats before they escalate.
“On the consulting side, we are taking full advantage of what we’ve built into the product and what we’ve announced this week in terms of incident workbench capabilities that exist in the product today to make the analysts doing this investigatory work much more efficient,” he said.
Here’s the complete video interview, part of SiliconANGLE’s and theCUBE Research’s coverage of Fal.Con:
(* Disclosure: CrowdStrike Inc. sponsored this segment of theCUBE.)
Photo: SiliconANGLE
A message from John Furrier, co-founder of SiliconANGLE:
Your vote of support is important to us and it helps us keep the content FREE.
One click below supports our mission to provide free, deep, and relevant content.
Join our community on YouTube
Join the community that includes more than 15,000 #CubeAlumni experts, including Amazon.com CEO Andy Jassy, Dell Technologies founder and CEO Michael Dell, Intel CEO Pat Gelsinger, and many more luminaries and experts.
THANK YOU