CrowdStrike Falcon X

Falcon X was CrowdStrike's threat intelligence offering, designed to help security teams investigate threats with automated analysis and supporting intelligence. Its role was to add context to suspicious activity, including information about malicious files and indicators associated with attacks. The offering combined machine-led analysis with research from CrowdStrike's intelligence team, giving analysts evidence to use when assessing a detection and deciding how to respond. This makes it relevant to enterprise security operations teams that need more than an isolated alert.

Threat intelligence can help explain what an observed threat does and where related activity may appear. Falcon X should not be described as the whole Falcon endpoint-protection platform or as a SIEM product. Those are different security functions. The historical product name also warrants care when comparing it with CrowdStrike's current catalog, since a legacy label does not establish present availability.