Cloud-based endpoint security firm CrowdStrike announced on Tuesday that it has expanded the capabilities of its Falcon platform by adding a powerful search engine.
The search engine is powered by Falcon MalQuery, which CrowdStrike claims is more than 250 times faster than other malware search tools. MalQuery uses a patent-pending indexing technology and it allows users to filter results so that they are provided only the most relevant information.
CrowdStrike says its threat database has indexed more than 700 million files totaling over 560 TB of malware, and it ingests over 51 billion security events every day. String- and YARA-based searches can be conducted via a single console and results are displayed as schematized, readily consumable snapshots.
The results of the search, which analyzes both a file’s metadata and content, are augmented with CrowdStrike intelligence to provide security operations center (SOC) personnel information on context and severity.
The security firm pointed out that faster and more accurate search results help streamline security operations, which ultimately leads to improved protection against new threats.
“Today’s threat landscape demands speed and precision – some of the best minds in cybersecurity are hampered by slow search tools and limited data sets. We believe that real-time data access is how cybersecurity professionals can get ahead of modern-day threats, and we’ve built the fastest AI-enabled platform that makes this possible,” said George Kurtz, CrowdStrike co-founder and CEO.
“With today’s launch, we are fundamentally changing the game by empowering threat researchers to outpace the adversary with this solution. CrowdStrike Falcon Search Engine enables the next-gen SOC to be more productive and acts as a powerful force multiplier for security teams,” Kurtz added.
Earlier this month, CrowdStrike announced that it teamed up with Dragos to provide cybersecurity services for industrial control systems (ICS).