See how Corelight Open NDR integration can drive your SOC transformation

Corelight transforms all network and cloud activity into ground-truth evidence. This integration enables Corelight to ingest real-time host and identity data from Falcon Next-Gen Identity Security directly into your Corelight Investigator detections dashboard. Analysts triaging a source IP can now immediately see the specific user details, such as login ID, display name, login history, related alerts, as well as the user’s overall risk score as defined by Falcon NextGen Identity Security.

• Unified visibility
  Rich Corelight multi-layered detections enriched with contextual real-time host and identity data
• Risk prioritization
  Accelerate investigations by correlating network evidence with CrowdStrike Next-Gen Identity Security risk scores
• Faster remediation
  Improve mean time to detect and respond to threats without leaving Corelight Investigator detections interface