CrowdStrike announced it has expanded the CrowdXDR Alliance to include key strategic partners across web and email security (Menlo Security), identity and access management (Ping Identity) and network detection and response (Vectra AI). CrowdStrike also introduced new capabilities for the Falcon XDR (Extended Detection and Response) module to speed up detections for security teams, including integration with ServiceNow, an existing CrowdXDR Alliance partner, to dramatically simplify security operations workflows with automated ticket creation. Falcon Fusion workflows based on XDR detections: Natively integrated with Falcon XDR, Falcon Fusion (CrowdStrike's SOAR framework) now automates numerous workflows directly from a Falcon XDR detection including: Ticket creation through ServiceNow, a CrowdXDR Alliance partner.

Notifications through email, Slack or webhook. Incident details from status changes to team assignments and comments. XDR detections event timeline: Speed triage and investigation with a timeline view that displays key events of a detection in chronological order to easily understand how activity progressed.

Graph visualization of custom XDR detections: Create custom XDR detections from queries written to hunt for threats in the environment. Falcon XDR graph explorer visualizes how the events and entities in a custom XDR detection are related, enabling security analysts to rapidly orient and explore connections in cross-domain data.