CrowdStrike a leader in cloud-delivered protection of endpoints, cloud workloads, identity and data, today introduced new innovations to its Security and IT Operations product suite. This includes a new module (Falcon Discover for IoT) to provide organizations with breakthrough visibility for Internet of Things (IoT) and operational technology (OT) environments, and new capabilities for the Falcon Discover (Security Hygiene) module to help IT and security leaders holistically understand and minimize an organization’s attack surface to reduce the risk of a potential breach.
Falcon Discover for IoT: Visibility and Risk Reduction Across ICS Environments
Critical infrastructure systems continue to be vulnerable to cyber attacks by adversaries and organizations now recognize the security of their Industrial Control System (ICS) assets as fundamental to their business. Yet according to a 2021 SANS Institute report1, “asset inventories continue to challenge most organizations, with only 58.2% having a formal process.” To address this challenge, CrowdStrike is extending the approach it pioneered with Falcon Discover and extending security hygiene across ICS, IT and OT environments with Falcon Discover for IoT. New capabilities include:
Minimize risk with asset inventory: Accelerate the IT/OT convergence with a centralized and up-to-date inventory of all IT, OT and IoT assets, combined with advanced behavioral analytics that helps identify and mitigate potential risks associated with connected devices and networks.
Comprehensive visibility: Eliminate blind spots associated with unmanaged or unsupported legacy systems and quickly uncover hidden threats with deep, contextual visibility and analysis across IT and OT environments.
Continuous real-time asset monitoring: Leverage CrowdStrike Asset Graph to provide contextual endpoint and network asset data to pinpoint unsupported and unmanaged devices that could lead to a breach.
Powerful context enrichment with third-party integrations: Integrate seamlessly with third-party IoT security vendors like Claroty to enrich asset and network visibility and achieve comprehensive understanding of all IT and OT managed and unmanaged devices, sessions and processes across ICS/OT environments.
“Gaining visibility and being able to manage both known and unknown assets is critical for us to maintain proper security hygiene. The introduction of Falcon Discover for IoT will provide a deeper understanding of the interconnected relationships between IT, OT and IoT assets – across every system – and enable us to better proactively secure our environment. I am excited to see what else is possible with CrowdStrike, because it has so much information and delivers incredible visibility,” said Serge Groven, senior corporate IT manager at StepStone.
“As organizations continue to modernize their OT environments by embracing new IoT devices and other highly connected cyber-physical systems, securing this modern OT landscape requires full, in-depth visibility as well as deploying protective and monitoring controls that cannot be achieved solely through traditional methods such as passive monitoring,” said Stephan Goldberg, VP, Technology Alliances at Claroty. “Unlike the status quo, Claroty and CrowdStrike have deepened their partnership to identify and trigger a response to potential threats. The result is holistic security that further extends to OT.”
Falcon Discover Enhancements: The Path to Proactive Security Posture Management
Stopping modern attacks requires real-time visibility across managed and unmanaged assets no matter where they reside. Before organizations can be more proactive in managing security posture and risk, they need to understand the interconnected relationships between assets, cloud environments, identities and configurations – across every system. CrowdStrike is introducing new enhancements for Falcon Discover to help organizations shift from legacy asset inventory to a real-time, continuous view into their attack surface and provide insight into complete system and organizational health. New capabilities include:
Proactively shutdown potential attack paths with holistic asset visibility: The newly enhanced Asset Dashboard unifies visibility into assets (managed and unmanaged) across the CrowdStrike Falcon platform to view key asset data and gain proactive recommendations to stop potential entry points into an environment.
See how every asset is related across your enterprise to reduce risk: With Asset Graph, the all-new relationship mapping tool provides a comprehensive visual map of how assets are connected to each other, including how many steps an internet-exposed device is from business critical assets to trace and shutdown potential adversary paths before they can be used.
“While visibility in an organization’s environment is important, just defining what's present doesn’t solve the problem, Organizations need a security platform that can provide deep visibility into cross-domain data and an understanding of their attack surface in order to make the most informed, risk-based decisions – resulting in a more predictive and proactive security posture. With CrowdStrike driving the convergence of security and observability with the Falcon platform, organizations can do more with their data and bridge the gap between OT and IT environments as well as IT and security operations.”
Amol Kulkarni, chief product and engineering officer at CrowdStrike
Falcon Discover enhancements are generally available for customers. Falcon Discover for IoT is currently in beta and will be generally available for customers in October.
About CrowdStrike
CrowdStrike a global cybersecurity leader, has redefined modern security with one of the world’s most advanced cloud-native platforms for protecting critical areas of enterprise risk – endpoints and cloud workloads, identity and data.
Powered by the CrowdStrike Security Cloud and world-class AI, the CrowdStrike Falcon® platform leverages real-time indicators of attack, threat intelligence, evolving adversary tradecraft and enriched telemetry from across the enterprise to deliver hyper-accurate detections, automated protection and remediation, elite threat hunting and prioritized observability of vulnerabilities.
Purpose-built in the cloud with a single lightweight-agent architecture, the Falcon platform delivers rapid and scalable deployment, superior protection and performance, reduced complexity and immediate time-to-value.