Falcon Zero Trust

What is Falcon Zero Trust?

CrowdStrike Falcon Zero Trust enables frictionless Zero Trust security with real-time threat prevention and IT policy enforcement using identity, behavior, and risk analysis.

BENEFITS

ZERO AND FRICTIONLESS TRUST FOR WORKFORCE IDENTITIES EVERYWHERE

GAIN VISIBILITY OF WORKFORCE IDENTITIES IN MULTI-DIRECTORY ENVIRONMENTS

Falcon Zero Trust enables unified visibility and control of user access to applications, resources, and identity stores, with actionable insights into user behavior and risks, eliminating security blind spots in hybrid environments.

REDUCE THREAT DETECTION AND RESPONSE TIMES WITHOUT USING LOGS

Falcon Zero Trust reduces false positives, decreases average time to detect and resolve incidents, eliminating the need for complex, error-prone log analysis, and improves the efficiency of SOC analysts by reducing alert fatigue.

APPLY ZERO TRUST SECURITY WITH ZERO FRICTION

Falcon Zero Trust enforces consistent risk-based policies to automatically block, allow, audit, or enhance authentication for each identity, while ensuring a frictionless sign-in experience for genuine users.

SPECIFICATIONS

HOW DOES FALCON ZERO TRUST HELP?

SEGMENT WORKFORCE IDENTITIES

• Provides continuous multi-directory visibility into the scope and impact of identity access privileges on Microsoft Active Directory (AD), Azure AD, and single sign-on (SSO) solutions in the cloud.
• Automatically sorts identities into hybrids (identities that are on-premises and in AD in the cloud) and only in the cloud (identities that reside only in Azure AD).
• Segments accounts into human, service, shared, and privileged accounts.
• Provides a customizable attack surface overview with insights into user risk and behavior changes over time, such as an increase in account locks, high-risk endpoints, compromised passwords.

AUTOMATE THREAT DETECTION AND RESPONSE

• Enables hybrid identity storage protection with continuous inspection of live authentication traffic, including encrypted protocols such as LDAP/S.
• Provides continuous security assessment and identity threat-related incidents without requiring complex log or analysis ingestion.
• Discover recognition (e.g., LDAP, BloodHound, SharpHound, credential compromise attacks), lateral movement (e.g., RDP, Mimikatz tool, unusual endpoint usage, unusual service logins), and persistence (e.g., Golden Ticket attack) with advanced analytics and patented machine learning technology.
• Accelerates security investigations by using intuitive threat hunting, with predefined search criteria such as, but not limited to, authentication events, unencrypted protocols, user roles, IP reputation, and risk scores.

VERIFY IDNTITIES WITH ZERO FRICTION

• Sets and enforces real-time policies based on authentication standards, behavior baselines, and individual risk scores to verify identities using progressive authentication, such as multi-factor authentication (.eg MFA).
• Automatically protects access to identity stores and applications with enhanced user experience by triggering identity verification only when the risk increases or if there is a deviation from normal behavior.
• Reduces the attack surface by extending MFA to any feature or application, including legacy/proprietary systems and tools - for example, desktops that are not covered by cloud-based MFA solutions and tools such as PowerShell and protocols such as RDP over NTLM.
• Automatically resolves security incidents that the user approves using identity verification methods, such as 2FA/MFA, without involving security analysts and help desk tickets.

System requirements:

CPU: 1.8 GHz dual core processor

RAM: 2 GB

HDD / SSD: 50 GB of free space on the main drive

Operating system: Microsoft Windows 10, Microsoft Windows 8 32-bit, Microsoft Windows 7 32-bit and Microsoft Windows Vista 32-bit

Resolution: 1024×768

Supported operating systems

Mac OS X 10.5 x (Leopard), Mac OS X 10.6 (Snow Leopard), Mac OS X 10.7 (Lion), Mac OS X 10.7 (Mountain Lion), OS X 10.9 (Mavericks) and Mac OS X 10.10 (Yosemite)

Hardware requirements

Memory - 1 GB of RAM and more

Free disk space - 50 MB

System type - 32-bit and 64-bit OS