Falcon Identity Threat Protection is CrowdStrike’s ITDR module designed to stop identity-based breaches in real time by extending visibility and control across endpoints, workloads, data, and identity stores. It provides continuous multi-directory insights into Active Directory and Entra ID, auto-classifies accounts, and monitors risk indicators like compromised passwords or high-risk endpoints. Using machine learning and behavioral analytics, it detects reconnaissance, lateral movement, and persistence techniques while enabling zero-friction conditional access with MFA. It supports over 50 integrations, broad MFA coverage, and honeytoken accounts, reducing mean time to respond and improving SOC efficiency.

Join for free to read