MDR360 integrations · Endpoint (EDR/XDR)
DIAMATIX MDR for CrowdStrike
CrowdStrike Falcon detections are collected into SHIELD SIEM/XDR for 24/7 investigation and correlation.
Technical details pending DIAMATIX confirmation
Technical overview
Integration specifications
- Category
- Endpoint (EDR/XDR)
- Availability
- Production Supported
- Ingestion method
- Vendor cloud API
- Capabilities
- Telemetry Ingestion, Detection & Investigation
- Active response
- Awaiting technical confirmation
Telemetry collected
- Security alerts and detections
- Endpoint process and threat context
- Device and agent health
Onboarding prerequisites
- Active vendor licence covering EDR/XDR features
- API credentials with read access for alert collection
- Agreed response permissions, if active response is in scope
How it works
How DIAMATIX SecOps works with it
- 01
Collect
CrowdStrike signals are brought into SHIELD SIEM/XDR.
- 02
Investigate
DIAMATIX analysts triage, correlate and filter alerts 24/7.
- 03
Respond
Agreed containment or guided response follows your runbook and MDR360 tier.
Scope, capabilities and response actions are confirmed for your environment during scoping.
Back to all integrationsRunning CrowdStrike?
Tell us about your environment and we will confirm coverage for MDR360.