Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

See how CrowdStrike Falcon Next-Gen SIEM Federated Search extends investigations to security data stored in Snowflake without requiring the entire dataset to be ingested into the SIEM. In this demo, an analyst pivots from suspicious endpoint activity in Falcon to Corelight network telemetry retained in Snowflake. Using remoteTable(), the analyst searches the remote data directly from Advanced Event Search, retrieving only the context needed to investigate the affected host and understand the broader scope of the incident.

Watch Joey Melo, Principal Security Researcher at CrowdStrike, take on AI Unlocked: Agents of Chaos and see how he approaches the challenges, manipulates autonomous AI agents and works his way through the game. Now it’s your turn. All three acts are open, with increasingly difficult challenges waiting. Put your skills to the test, climb the global leaderboard and compete for a share of up to $100,000 in cash prizes.*

Steve Schmidt, SVP and CSO at Amazon, sees firsthand how both defenders and adversaries are using AI to their advantage. In this episode, he joins Adam and Cristian to discuss modern AI models, evolving adversary behavior, and how Amazon is responding to shifts in the threat landscape. “The big change we’ve seen recently is the ability of models to chain things together to produce something interesting,” Steve says. As AI models grow more adept at automatically chaining and acting, he adds, the time to respond has dramatically decreased.

CrowdStrike Falcon Guardian secures AI agents where they execute, delivering runtime visibility, governance and protection through the CrowdStrike Falcon platform. Falcon Guardian continuously discovers AI agents, connects AI activity to downstream endpoint execution for prompt-to-impact visibility, helps security teams investigate threats and determine blast radius, and enables response before threats spread. It also builds on proven AI security capabilities for Shadow AI discovery, AI governance, sensitive data protection and defense against AI-specific attacks.

CrowdStrike delivers the next evolution of the agentic SOC on the Falcon platform: coordinated teams of expert agents that investigate endpoint, identity, SaaS, cloud, and network domains simultaneously, converging on a single, evidence-backed verdict your team can trust.

A critical alert shouldn’t come with a scavenger hunt. But answering the obvious questions can still send analysts bouncing between threat reports, adversary profiles, underground activity, vulnerability data, and hunting tools. See how CrowdStrike’s Threat Intelligence Agent, powered by Charlotte AI, brings those answers together and helps turn them into action, from hunting queries and dark web monitoring to vulnerability checks and automated workflows. The analyst stays in control. The busywork doesn’t.

See how CrowdStrike combines intelligent telemetry control with Falcon Next-Gen SIEM Federated Search to optimize data costs without sacrificing investigative depth. Learn how Falcon Onum filters, enriches, masks, and routes telemetry in motion before ingestion.

Breaches don’t always start with malware. Increasingly, adversaries simply log in with valid credentials and when those credentials come with standing privileges, attackers inherit that access instantly. In this Lightboard Lab, learn how CrowdStrike is rethinking traditional privileged access with Modern Privileged Access. See how continuous evaluation of identity, device trust, security risk and business context can eliminate standing privileges and help ensure the right person gets the right access, in the right context, right when they need it.

In this Demo Drill Down, learn how Manual Sensor Scan enables teams to create targeted Python-based checks for pre-CVE vulnerabilities, supply chain risks, proprietary software, and other environment-specific conditions. See how built-in helper functions simplify custom detection logic and how identified findings are brought directly into Falcon Exposure Management for investigation, prioritization, and remediation.

AI has moved beyond the browser. It now runs in the terminal, the IDE, and desktop apps with your users' full privileges, where most security tools can't see it. In the AI era, the endpoint is where AI executes. This video shows how CrowdStrike Falcon AI Detection and Response (AIDR) extends the Falcon sensor you already run to the AI interaction layer. One sensor and one browser extension deliver visibility and control over every AI interaction on the endpoint and in the browser, from the Falcon console you already use.