Project Goals
CrowdStrike has built over time an extensive and comprehensive set of publicly available material to support customers, prospects and partner education. This "public library" is composed of documents, videos, datasheets, whitepapers and much more and the contents are spread across different locations (CrowdStrike Website, Youtube, etc.).
The goal of this document is to organize all the material to simplify access to the resources and provide an easy reference to the contents.
Content Library
The resources specified in this section link to different public resources that have been organized by relevant topics and can help customers, prospects and partners to get introduced to CrowdStrilke and acquire more insights about how Crowdstrike Falcon platform works, gets deployed and operated. Resources related to features, solutions or modules like Falcon Spotlight, Falcon Horizon, Falcon Discover and many more are also available.
On top of that, Free Community Tools, Datasheets, Whitepapers and a number of resources that highlights the versatility and capabilities of the CrowdStrike Falcon Platform are provided
Falcon Platform Introduction
|
Topic
| Resource Type | Link |
|:-|:-|:-|
| Welcome to CrowdStrike | YouTube | https://www.youtube.com/watch?v=oIWxJzPfpyY&list=PLtojL19AteZv3oYq8
jD0J5vNvxdGDDs&index=91 |
| Welcome to CrowdStrike Falcon | CrowdStrike Tech Center Article/Blog | https://www.crowdstrike.com/blog/tech-center/welcome-to-crowdstrike-falcon/ |
| Introduction to CrowdStrike Falcon Endpoint Security Platform | YouTube |
- https://www.youtube.com/watch?v=tgryLPiVGLE
- https://www.youtube.com/watch?v=mRT9Ab36PIc
|
| Falcon Console Introduction | YouTube | https://www.youtube.com/watch?v=oAGUHgtf7c8&list=PLtojL19AteZv3oYq8
jD0J5vNvxdGDDs&index=46 |
| CrowdStrike Corporate Demo | YouTube | https://www.youtube.com/watch?v=oAGUHgtf7c8&list=PLtojL19AteZv3oYq8
jD0J5vNvxdGDDs&index=46 |
| Visibility with Falcon Insight | YouTube | https://www.youtube.com/watch?v=i6T7P7d970A&list=PLtojL19AteZv3oYq8
jD0J5vNvxdGDDs&index=30
| CrowdStrike Store | YouTube | https://www.youtube.com/watch?v=5qLe0RMpc1U&list=PLtojL19AteZv3oYq8
jD0J5vNvxdGDDs&index=26 |
| Offline Protection for Remote Systems | YouTube | https://www.youtube.com/watch?v=1zLh57AG8Z8&list=PLtojL19AteZv3oYq8
jD0J5vNvxdGDDs&index=40 |
| Better Protection with Falcon Prevent | YouTube | https://www.youtube.com/watch?v=82xtYtEnSzE&list=PLtojL19AteZv3oYq8
jD0J5vNvxdGDDs&index=77 |
| How to Prevent Malware with CrowdStrike Falcon | YouTube | https://www.youtube.com/watch?v=SdsGf40LNKs&list=PLtojL19AteZv3oYq8
jD0J5vNvxdGDDs&index=110 |
| How Fast Response and Remediation Prevents Breaches | YouTube | https://www.youtube.com/watch?v=zG3VgC5OtBk&list=PLtojL19AteZv3oYq8
jD0J5vNvxdGDDs&index=96 |
Deployment and Operation
|
Topic
| Resource Type | Link |
|:-|:-|:-|
| How to Install Falcon Sensor for Linux | YouTube | https://www.youtube.com/watch?v=DNA4SKIaa98&list=PLtojL19AteZv3oYq8
jD0J5vNvxdGDDs&index=86 |
| How to Install Falcon Sensor Mac | YouTube | https://www.youtube.com/watch?v=ofqdrqJ0m30 |
| How to Install Falcon Sensor Windows | CrowdStrike Tech Center | https://www.crowdstrike.com/blog/tech-center/install-falcon-sensor/ |
| How to Manage Policies | CrowdStrike Tech Center | https://www.crowdstrike.com/blog/tech-center/how-to-manage-policies-in-falcon/ |
| Guide to deploy Falcon Sensor on AWS Spaces | CrowdStrike Tech Center | https://www.crowdstrike.com/resources/guides/how-to-deploy-crowdstrike-falcon-sensor-on-aws/ |
| Notification Workflows | YouTube | https://www.youtube.com/watch?v=gcx4mR9JXhs&list=PLtojL19AteZv3oYq8
jD0J5vNvxdGDDs&index=17 |
| CrowdStrike Dashboards | YouTube | https://www.youtube.com/watch?v=0GQ27tUItbM&list=PLtojL19AteZv3oYq8
jD0J5vNvxdGDDs&index=10 |
| Context Enrichment | YouTube | https://www.youtube.com/watch?v=i6T7P7d970A&list=PLtojL19AteZv3oYq8
jD0J5vNvxdGDDs&index=30 |
| Reduce surface attack with custom IOAs | YouTube | https://www.youtube.com/watch?v=KB3PTa6xeKw&list=PLtojL19AteZv3oYq8
jD0J5vNvxdGDDs&index=44 |
| Create custom IOAs Rules | YouTube | https://www.youtube.com/watch?v=75E
edpAmp4&list=PLtojL19AteZv3oYq8jD
0J5vNvxdGDDs&index=69 |
| Visibility enables PowerShell Threat Hunting | YouTube | https://www.youtube.com/watch?v=VkbH9YDe37E&list=PLtojL19AteZv3oYq8jD
0J5vNvxdGDDs&index=42 |
| Flexible Policy Management for remote system | YouTube | https://www.youtube.com/watch?v=MeCE0iFkk6A&list=PLtojL19AteZv3oYq8jD
0J5vNvxdGDDs&index=49&t=7s |
| Firewall Remote Protection for remote workforce | YouTube | https://www.youtube.com/watch?v=ZkmNp6ElRsc&list=PLtojL19AteZv3oYq8jD
0J5vNvxdGDDs&index=60 |
| Protect Linux Hosts | YouTube | https://www.youtube.com/watch?v=aI2Wt4nnK4U&list=PLtojL19AteZv3oYq8jD
0J5vNvxdGDDs&index=61 |
| How to Manage Firewall | YouTube | https://www.youtube.com/watch?v=7u9K-lJbeuE&list=PLtojL19AteZv3oYq8jD
0J5vNvxdGDDs&index=68 |
| Custom Malware Blacklisting | YouTube | https://www.youtube.com/watch?v=pTzsDz7QbSY&list=PLtojL19AteZv3oYq8jD
0J5vNvxdGDDs&index=71 |
| Accessing Crowdstrike API | YouTube | https://www.youtube.com/watch?v=9vOQlIzNuWU&list=PLtojL19AteZv3oYq8jD
0J5vNvxdGDDs&index=79 |
| Falcon for Security operators | YouTube | https://www.youtube.com/watch?v=mZG8HYjlcM&list=PLtojL19AteZv3oYq8
jD0J5vNvxdGDDs&index=94 |
| Falcon Agent for Cloud Workload Protection | Guide | https://www.crowdstrike.com/resources/guides/how-to-deploy-falcon-sensor-across-gcp-workloads/ |
| Falcon Agent on Amazon Workspaces | Guide | https://www.crowdstrike.com/resources/guides/how-to-deploy-crowdstrike-falcon-sensor-on-aws/ |
Demo & Use Cases
|
Topic
| Resource Type | Link |
|:-|:-|:-|
| Use Case: True Endpoint Visibility | YouTube | https://www.youtube.com/watch?v=pHxb6EyjhPw |
| Use Case: Going Beyond Malware | YouTube | https://www.youtube.com/watch?v=UeLmrQg9wrU |
| Use Case: Hunting for threats | YouTube | https://www.youtube.com/watch?v=UeLmrQg9wrU |
| Use Case: Get Ahead of Adversaries | YouTube | https://www.youtube.com/watch?v=I23THcLJn
4 |
| Demo Falcon Endpoint Protection pro | Resource Center | https://www.crowdstrike.com/resources/demos/demonstration-of-falcon-endpoint-protection-pro/ |
| Demo Falcon Endpoint Protection Enterprise | Resource Center | https://www.crowdstrike.com/resources/demos/demonstration-of-falcon-endpoint-protection-enterprise/
| Demo Falcon Endpoint Protection Complete | Resource Center | https://www.crowdstrike.com/resources/demos/demonstration-of-falcon-endpoint-protection-complete/ |
| How to generate your first detection | YouTube | https://www.youtube.com/watch?v=YKYG3sWZ8UY&list=PLtojL19AteZv3oYq8jD_0J5vNvxdGDDs&index=90 |
How To's
|
Topic
| Resource Type | Link |
|:-|:-|:-|
| How to hunt for Indicators of Compromise | YouTube | https://www.youtube.com/watch?v=
t7n9i-cugg |
| How to Stop Wannacry Ransomware | YouTube | https://www.youtube.com/watch?v=-l0OkFk8Vo |
| How to Block Zero Day and Known Exploits | YouTube | https://www.youtube.com/watch?v=A
2QVLtuRFE |
| How to Contain an Infected System | YouTube | https://www.youtube.com/watch?v=9cM3TsHI56A&list=PLtojL19AteZv3oYq8jD
0J5vNvxdGDDs&index=128 |
| How to monitor Intel through custom Dashboards | YouTube | https://www.youtube.com/watch?v=FuJq7BxYMiw&list=PLtojL19AteZv3oYq8jD
0J5vNvxdGDDs&index=3 |
| How to Enable Kernel Prevention | YouTube | https://www.youtube.com/watch?v=WieI3X6BME&list=PLtojL19AteZv3oYq8
jD0J5vNvxdGDDs&index=37 |
| How to remote remediate incident with a remote workforce | YouTube | https://www.youtube.com/watch?v=SWziH3-VJS8&list=PLtojL19AteZv3oYq8
jD0J5vNvxdGDDs&index=56 |
| How CrowdScore Increases Efficiency | YouTube | https://www.youtube.com/watch?v=SWziH3-VJS8&list=PLtojL19AteZv3oYq8
jD0J5vNvxdGDDs&index=56 |
| How to Use the Remote Remediation Features of Real Time Response | YouTube | https://www.youtube.com/watch?v=eAQ3P11sfg4&list=PLtojL19AteZv3oYq8
jD0J5vNvxdGDDs&index=83 |
| How to configure Falcon Device Control | YouTube | https://www.youtube.com/watch?v=CYnZdztL21k&list=PLtojL19AteZv3oYq8
jD0J5vNvxdGDDs&index=86 |
| How to automate Threat Intelligence with Falcon X | YouTube | https://www.youtube.com/watch?v=ObpnASvsCDw&list=PLtojL19AteZv3oYq8
jD0J5vNvxdGDDs&index=95 |
| How to block malicious PowerShell activity | YouTube | https://www.youtube.com/watch?v=fGBCYqslTY0&list=PLtojL19AteZv3oYq8
jD0J5vNvxdGDDs&index=111 |
Free Community Tools
Free tools are available to help customers and partners to get more value from the Falcon platform and help them to solve possible use cases that can be presented when deploying or operating Falcon. This section offers a reference at the ones that could more useful and interesting for the vast majority of use cases:
|
Tool
| Description | Link |
|:-|:-|:-|
| PSFalcon | The CrowdStrike Falcon SDK for PowerShell | https://github.com/crowdstrike/psfalcon (
Documentation) |
| FalconPy | The CrowdStrike Falcon SDK for Python | https://github.com/crowdstrike/falconpy (
Documentation) |
| goFalcon | The CrowdStrike Falcon SDK for Go | https://github.com/crowdstrike/gofalcon (
Documentation) |
| Rusty Falcon | The CrowdStrike Falcon SDK for Rust | https://github.com/crowdstrike/rusty-falcon (
Documentation) |
| FalconJS | The CrowdStrike Falcon SDK for Javascript | https://github.com/crowdstrike/falconjs |
| Falcon Orchestrator | Automated workflow and response capabilities | https://github.com/CrowdStrike/falcon-orchestrator |
| CrowdInspect | https://www.crowdstrike.com/blog/free-community-tool-crowdinspect/ | https://www.crowdstrike.com/resources/community-tools/crowdinspect-tool/ |
| CrowdResponse | https://www.crowdstrike.com/blog/crowdresponse-release-new-tasks-modules/ | https://www.crowdstrike.com/resources/community-tools/crowdresponse/ |
| Falcon Linux Bash | Bash script to install Falcon Sensor, through the Falcon APIs, on a Linux endpoint | https://github.com/CrowdStrike/falcon-linux-install-bash |
| CrowdFMS | CrowdFMS is a framework for automating collection and processing of samples from VirusTotal, by leveraging the Private API system. This framework automatically downloads recent samples, which triggered an alert on the users YARA notification feed. | https://github.com/CrowdStrike/CrowdFMS |
| CrowdScrape | Chrome Plugin designed to allow you to be able to scrape indicators from various websites and in-browser documents such as PDF reports while matching the data up against CrowdStrike Intelligence | https://chrome.google.com/webstore/detail/crowdscrape/jjplaeklnlddpkbbdbnogmppffokemej?hl=en |
| MISP Import | Import CrowdStrike Threat Intel (Actors, Indicators and Reports) to your MISP Instance | https://github.com/crowdstrike/misp-import |
Data Sheets
This section includes references to the most relevant data sheets of the different products and services of CrowdStrike Falcon Platform.
|
Product
| Link |
|:-|:-|
| CrowdStrike Brochure | https://www.crowdstrike.com/resources/data-sheets/crowdstrike-brochure/ |
| Falcon Prevent | https://www.crowdstrike.com/resources/data-sheets/falcon-prevent/ |
| Falcon Insight | https://www.crowdstrike.com/resources/data-sheets/falcon-insight/ |
| Falcon Spotlight | https://www.crowdstrike.com/resources/data-sheets/falcon-spotlight/ |
| Falcon X Premium | https://www.crowdstrike.com/resources/data-sheets/falcon-x-premium/ |
| Falcon for Mobile | https://www.crowdstrike.com/resources/data-sheets/falcon-for-mobile/ |
| Falcon Sandbox | https://www.crowdstrike.com/resources/data-sheets/falcon-sandbox/ |
| Falcon Horizon | https://www.crowdstrike.com/resources/data-sheets/falcon-horizon-cspm/ |
| Falcon Firewall Management | https://www.crowdstrike.com/resources/data-sheets/falcon-firewall-management/ |
| Falcon Device Control | https://www.crowdstrike.com/resources/data-sheets/falcon-device-control |
| Falcon Discover | https://www.crowdstrike.com/resources/data-sheets/falcon-discover/ |
| Threat Graph | https://www.crowdstrike.com/resources/data-sheets/threat-graph/ |
| Falcon Premium | https://www.crowdstrike.com/resources/data-sheets/falcon-premium/ |
| Falcon Enterprise | https://www.crowdstrike.com/resources/data-sheets/falcon-enterprise/ |
| Falcon Complete | https://www.crowdstrike.com/resources/data-sheets/falcon-complete/ |
| Falcon Connect | https://www.crowdstrike.com/resources/data-sheets/falcon-connect/ |
| Falcon Cloud Security | https://www.crowdstrike.com/resources/data-sheets/cloud-security-solution-brief/ |
White Papers
|
Topic
| Link |
|:-|:-|
| Actionable Threat Intelligence is the next step in SOC evolution | https://www.crowdstrike.com/resources/reports/falcon-x-intelligence-automation/ |
| Cybersecurity’s Best Kept Secret: Threat Intelligence | https://www.crowdstrike.com/resources/white-papers/threat-intelligence-cybersecuritys-best-kept-secret/ |
| Endpoint Detection and Response | https://www.crowdstrike.com/resources/white-papers/endpoint-detection-and-response/ |
| Beyond Malware: Detecting the undetectable | https://www.crowdstrike.com/resources/white-papers/beyond-malware-detecting-the-undetectable/ |
| Indicators of Attack vs Indicators of Compromise | https://www.crowdstrike.com/resources/white-papers/indicators-attack-vs-indicators-compromise/ |
| Faster Response with CrowdStrike and MITRE ATT&CK | https://www.crowdstrike.com/resources/white-papers/faster-response-with-crowdstrike-and-mitre-attack/ |
| Securing your devices with Falcon Device Control | https://www.crowdstrike.com/resources/white-papers/securing-your-devices-with-falcon-device-control/ |
Appendix I: Discover More at CrowdStrike Resource Center
At CrowdStrike resource center you can find more information in different digital formats that could be at the interest of customers and partners. Below different repositories publicly available:
|
Topic
| Link |
|:-|:-|
| Case Studies | https://www.crowdstrike.com/resources/case-studies/ |
| Guides | https://www.crowdstrike.com/resources/guides/ |
| Community Tools | https://www.crowdstrike.com/resources/community-tools/ |
| Infographics | https://www.crowdstrike.com/resources/infographics/ |
| Reports | https://www.crowdstrike.com/resources/reports/ |
| Whitepapers | https://www.crowdstrike.com/resources/white-papers/ |
| Demos | https://www.crowdstrike.com/resources/demos/ |
| Videos | https://www.crowdstrike.com/resources/videos/ |
| Data Sheets | https://www.crowdstrike.com/resources/data-sheets/ |
| Crowdcasts | https://www.crowdstrike.com/resources/crowdcasts/ |
Appendix II: Additional Resource Sites
All the references specified on the sections above have been selected from different general public resources available that all customers and partners can access. So If more deep dive is needed or wanted, the following sites are available containing more valuable information:
- https://www.reddit.com/r/crowdstrike/
- https://www.youtube.com/user/CrowdStrike
- https://github.com/CrowdStrike
- https://www.crowdstrike.com/resources/