Bring the security data you need into CrowdStrike Falcon Next-Gen SIEM

Cribl collects, processes, enriches, and routes third-party security telemetry into Falcon, helping your team centralize the data needed for detection, investigation, and response. You can also use Falcon Next-Gen SIEM as a destination for security data already managed in Cribl, giving you a flexible integration across your security operations stack.

• Bring third-party telemetry into Falcon
  Collect and route security logs, events, and alerts from across your environment into Falcon Next-Gen SIEM.
• Improve data before it arrives
  Filter, enrich, normalize, and format data in Cribl to support more useful searches, investigations, and detections.
• Use a flexible integration
  Configure Falcon Next-Gen SIEM as a destination for data processed by Cribl, while keeping your broader data-routing options open.
• Modernize at your pace
  Use Cribl alongside your current tools to improve data quality and control without a disruptive security-stack replacement

Additional Resources

• How to configure a Next-Gen SIEM Destination