Story image

CrowdStrike and Secureworks partner to integrate UEBA and endpoint protection platform

18 Sep 2018

CrowdStrike and Secureworks have announced that they will bring a new endpoint threat detection to the marketplace by teaming up to apply Secureworks’ Red Cloak behavioural analytics and intelligence to CrowdStrike’s Falcon platform data.

The joint offering delivers an endpoint detection and response (EDR) solution with applied analytics and intelligence to accelerate investigations and provides guided remediation steps for more confident response to real threats. 

The announcement follows the launch of the Secureworks Red Cloak Partner Program which allows the company to make its high-fidelity detection and incident investigation capabilities available more broadly in the marketplace while also giving clients the freedom to choose endpoint security solutions.

CrowdStrike global sales and field operations president Mike Carpenter, “We are excited to team up with Secureworks to enable them to apply their well-regarded expertise in threat intelligence and analysis to CrowdStrike’s Threat Graph telemetry data generated by the Falcon endpoint protection platform.”

Secureworks brings experience detecting adversaries across its global client base, and CrowdStrike will bring its endpoint protection and EDR products to deliver the high-fidelity telemetry that makes it possible for Secureworks to apply its analytics and deliver the best possible context for validating and remediating true threats.

“This joint solution simplifies the buying process for companies that are looking to invest in both an endpoint technology solution and a leader in the MSSP and MDR markets,” says Secureworks business and product strategy senior vice president Wendy Thomas.

When the joint offering becomes generally available, both Secureworks and CrowdStrike customers will have access from additional countermeasures driven by the integration.

Powered by the CrowdStrike Threat Graph, the CrowdStrike Falcon platform leverages industry-leading threat telemetry and is now processing over one trillion security events per week.

Veeam releases v3 of its MS Office backup solution
One of Veeam’s most popular solutions, Backup for Office 365, has been upgraded again with greater speed, security and analytics.
Too many 'critical' vulnerabilities to patch? Tenable opts for a different approach
Tenable is hedging all of its security bets on the power of predictive, as the company announced general available of its Predictive Prioritisation solution within Tenable.io.
Industrial control component vulnerabilities up 30%
Positive Technologies says exploitation of these vulnerabilities could disturb operations by disrupting command transfer between components.
McAfee announces Google Cloud Platform support
McAfee MVISION Cloud now integrates with GCP Cloud SCC to help security professionals gain visibility and control over their cloud resources.
Scammers targeting more countries in sextortion scam - ESET
The attacker in the email claims they have hacked the intended victim's device, and have recorded the person while watching pornographic content.
Cryptojacking and failure to patch still major threats - Ixia
Compromised enterprise networks from unpatched vulnerabilities and bad security hygiene continued to be fertile ground for hackers in 2018.
Princeton study wants to know if you have a smart home - or a spy home
The IoT research team at Princeton University wants to know how your IoT devices send and receive data not only to each other, but also to any other third parties that may be involved.
Organisations not testing incident response plans – IBM Security
Failure to test can leave organisations less prepared to effectively manage the complex processes and coordination that must take place in the wake of an attack.