API 2.0 Overview API 1.0 to 2.0 Migration Guide What's New
Action Usecase Alerting Usecase Analysis and Response API's Building Search Queries Configuration Backup Restore and Export APIs Enrichment Usecase Groups Usecase Mimecast API In Power BI Secure Email Gateway SIEM Tutorial CG SIEM Tutorial CI SIEM Batch CG Guidelines SIEM Batch CI Guidelines
API 2.0 Reference API 1.0 Reference
Alliance Partners
Become a Partner

CrowdStrike Falcon EDR

Developed by CrowdStrike 

How the integration works

When Incydr detects unusual and high-severity activity, it surfaces it for investigation and potential escalation to business stakeholders. It also equips you with controls to correct and contain risk. You can prevent the user from taking further risky action while you investigate by isolating their device using CrowdStrike. This allows you to prevent further exfiltration during insider threat investigations.

Developer: Code42, now a Mimecast company
Contact: View
Documentation: CrowdStrike
Release Date: August 2023
Version: 1.0

Key features

  • Exfiltration detection: Incydr detects and prioritizes risk to data and triggers response via CrowdStrike
  • Network quarantine: CrowdStrike ensures the user’s endpoint is no longer able to communicate with the internet
  • No-code automation: Code42’s Incydr Flow service can be used to deploy and manage the integration
GettyImages-1331101157-1200px.jpg

Key benefits

01.

Detect insider threat

Effectively surface the insider threat events that require investigation.

02.

Contain data risk

Prevent the user from taking further risky action while you investigate.

03.

No-code automation

The Incydr Flow service can be used to deploy and manage the integration.

Data Security Assessment

Is your sensitive data walking out the door? Find out for free.

Get a Free Assessment
Back to Top