CrowdStrike

Enhanced, integrated multilayered threat protection

API 2.0 Compatible

By integrating Mimecast with CrowdStrike, organizations are protected against cyberattacks through an integrated threat sharing solution that provides email, web and endpoint device protection. By sharing intelligence between the two platforms, joint customers can be confident that their organization will be secured from zero-day threats detected by Mimecast and CrowdStrike’s Falcon® Platforms.

Solution Overview

1. As inbound emails are received by Mimecast on behalf of the organization, they are subject to analysis by the Mimecast inspection funnel, where a series of email hygiene and advanced security scanning techniques are applied, to ensure that emails are safe before they are delivered to the recipient.
2. Any infected messages detected are not delivered to the intended recipient, protecting the organization immediately.
3. Key threat identifiers detected by Attachment Protection inspection funnel are shared with the CrowdStrike Falcon® platform.
4. CrowdStrike uses this information in the threat detection service to alert the administrators and/or prevent the threat from executing on the managed Endpoint devices.
5. Key threat identifiers from the CrowdStrike Falcon® platform are shared with Mimecast to provide consistent protection from threats, and automatically block future matching indicators.
6. Mimecast uses the indicators from the CrowdStrike Falcon® platform to scan the mail boxes and automatically remove the affected emails from the recipients.