CrowdStrike SOC now targets cyber threats with AI security agents

CrowdStrike is expanding its Agentic SOC with coordinated, multi-agent investigations that simultaneously analyze endpoint, identity, SaaS, cloud, and network activity, according to a recent report by Channel Insider.

This new approach replaces sequential AI investigations with specialized agents that share context and collaborate towards a common verdict. This allows security analysts to evaluate threats more rapidly as attacks traverse multiple environments at machine speed. The system targets threats associated with enterprise AI adoption, including prompt injection and model abuse, by utilizing certified data pipelines that filter noise for more efficient processing. CrowdStrike's Falcon platform provides the foundational data, processing nearly four trillion events daily, to enable these coordinated investigations. Human analysts remain central to the strategy, providing expertise on investigation workflows and evidence correlation. This advancement aims to reduce manual correlation efforts for MSPs and MSSPs, enabling them to handle more complex environments and AI-related threats without proportionally increasing analyst workload.

Source: Channel Insider