Intelligence Launch Intern

Smarter security with new integrations from Cato Networks and CrowdStrike. Table of contents. Wondering where to begin your SASE journey? | Listen to post: | This audio player requires that "Preferences" cookies be accepted | Today, Cato Networks announced a collaboration with CrowdStrike to integrate the Cato SASE Platform with the CrowdStrike Falcon(R) platform. Together, the companies are helping security teams unify network and endpoint visibility, streamline investigations, and accelerate threat detection and response. If there's one frustration that unites IT and security professionals, it's this: too many tools that don't talk to each other. Cato Networks Ltd. all know the challenge: too many security tools that don't work seamlessly together. Enterprises typically use 45 different security products,[1] creating operational complexity and forcing analysts to pivot across multiple consoles during investigations. By integrating the Cato SASE Platform with the CrowdStrike Falcon platform, organizations can investigate threats more efficiently, improve detection fidelity and respond faster through a unified security operations workflow. That's because no alert or attack exists in a vacuum. Signals surface across multiple tools, and only when they're connected do they reveal the full picture. By unifying these data points, security analysts gain clearer insight into what's happening so they can respond and remediate faster. If those signals remain siloed, it's easy to miss what's really happening: * Slow investigations that can mean time lost reconciling alert threads * Missed attack chains when relationships across domains are hidden * Operational fatigue with too many consoles and dashboards * Blind spots when devices roam or traffic is encrypted That's why Cato and CrowdStrike together break down those silos by bringing shared endpoint, network, and device context into one workflow so security teams see a unified narrative with improved context and can deliver more decisive responses. How the Cato SASE Platform and CrowdStrike Falcon platform work together. The collaboration spans three primary security operations use cases designed to help organizations investigate threats more efficiently and improve visibility across network and endpoint environments: * Accelerate investigations: Cato XOps and CrowdStrike Falcon Discover correlate endpoint detections with network telemetry, improving threat visibility and accelerating investigations. * Strengthen asset visibility and posture: Cato Asset Security and Falcon Discover enrich asset intelligence with endpoint context, providing a more complete view of managed assets. * Enhance threat hunting and detection: The Cato SASE Cloud Platform streams network telemetry into CrowdStrike Falcon Next-Gen SIEM, enabling analysts to hunt threats, build detections and investigate activity using a broader set of security signals. Together, these integrations help security teams accelerate investigations, strengthen asset visibility and enhance threat hunting across a unified security operations workflow. How Cato and CrowdStrike fit together. Let's run through an example scenario that highlights how CrowdStrike integrates with Cato. Imagine: A remote user clicks a malicious link. The CrowdStrike Falcon platform issues a detection: perhaps an anomalous script execution. Alone, this is an endpoint alert: useful, but only part of the story. However, with the Cato and CrowdStrike integration: * That detection is ingested into Cato XOps and built into a story that correlates endpoint evidence from the Falcon platform with networking and security context such as DNS, user and device data, and flow telemetry. * At the same time, Cato's network analytics may flag lateral movement attempts, or unusual egress traffic related to the same device. * Cato's engine links those network anomalies with the endpoint alert in a single, guided story that reveals the full kill chain. * Analysts open the Stories Workbench in Cato, where that story is visible with all supporting data and insights. * The story includes automated mitigation recommendations for them to take, such as isolating the device, blocking network flows, or quarantining sessions. * Because the connectors run via API, no sensor duplication is required. The end result? The detection is no longer siloed. Analysts don't have to pivot, manually correlate, or hunt blind. A unified story surfaces quickly, ensuring the IT team can act decisively across both domains. What makes the Cato approach different. You might ask: "Isn't this just another cybersecurity integration?" Here's why this elevates the effectiveness of SASE and EDR together: * Native convergence of network + security operations: Cato XOps is built to unify network telemetry with security signals for a single narrative of attack chains, now further enhanced with CrowdStrike. * Story-based correlation model: Cato stories tie together related detections across domains, so analysts see the big picture in a single console, going beyond simple alert summaries and tool hopping. * Minimal sensor overhead and API-based integration: Cato's connector uses APIs to pull in CrowdStrike detection data and device facts, without complexity or custom scripts. * Accelerate to Zero Trust with device security: CrowdStrike enriches Cato's device inventory, delivering more accurate identification and classification of managed endpoints to support attribute-based, least-privilege access policies. * Unified console, unified insights: Once connected, IT teams can all lean on a unified console, reducing friction, blind spots, and context gaps, with insights from trusted sources. Cato Networks and CrowdStrike: better together. By bringing together network and endpoint telemetry through the Cato SASE Platform and CrowdStrike Falcon platform, organizations can streamline investigations, improve threat visibility and accelerate response. As organizations adopt AI and security operations continue to evolve, richer, connected security data helps analysts detect and stop threats faster. Availability. The Cato and CrowdStrike technical integrations are generally available for customers globally through the CrowdStrike Marketplace and the Cato CMA. Resources.

Analyst1 releases Version 2.15.0 with powerful new filtering, CrowdStrike integration, and enhanced security. New release delivers intuitive intelligence filtering, expanded EDR integration capabilities, and critical security updates for cyber threat intelligence teams. RESTON, VA, UNITED STATES, June 25, 2026 /EINPresswire.com/ - Analyst1, a leading cyber threat intelligence platform, today announced the general availability of version 2.15.0, bringing significant advances in intelligence filtering, a new CrowdStrike Endpoint Security integration, and a range of analyst experience improvements designed to help security teams work faster and more precisely. The centerpiece of the 2.15.0 release is Precise Filters, a reimagined intelligence search and filtering experience built to match the complexity of real-world analyst workflows. Precise Filters allow teams to start with a simple filter set and expand it into highly targeted, multi-layered collection requirements - without requiring any query language knowledge. Existing filters and saved views carry forward automatically. The feature is available across intelligence collections, dashboards, publication drafts and templates, API keys, and users, making it a platform-wide upgrade to how analysts interact with intelligence data and find what matters most. New CrowdStrike EDR Integration Expands Detection and Response Workflows Analyst1 2.15.0 introduces a native integration with CrowdStrike Endpoint Security, enabling security teams to automatically export indicators, manage IOC actions, and ingest CrowdStrike alert activity as indicator hit statistics. Key capabilities include: - Export SHA256 file hash, domain, IPv4, and IPv6 indicators directly to CrowdStrike - Configure CrowdStrike actions, host groups, severities, and platform targeting - Remove indicators in CrowdStrike IOC Management previously created by Analyst1 - Support for Commercial, EU, and GovCloud CrowdStrike environments Data Expiration Controls Now Active The Data Expiration Timeframe (Days) setting is now fully functional for supported indicator feeds and Custom Indicator API Sources. This feature helps organizations maintain cleaner, more relevant indicator collections by automatically removing reporting sources that have not updated or referenced an indicator within a configurable timeframe. "With 2.15.0, we're giving analysts the tools they need to work at the speed of the threat," said Michael Wenger, Director of Product at Analyst1. "Precise Filters and the CrowdStrike integration reflect our ongoing commitment to building a platform that removes friction and delivers intelligence where it matters most." Additional Platform Improvements Version 2.15.0 also includes a range of enhancements across the platform: - API v2 now includes sensor endpoints, expanding support for sensor-related workflows - Dashboard cards can now be created with precise filters through an updated chart selection workflow - Administrators can manage when indicators are marked as active or inactive - Security updates include PostgreSQL upgraded to 18.3 and Chromium updated to address multiple CVEs Availability Analyst1 version 2.15.0 is available now. Existing customers can access full release notes and documentation at docs.analyst1.com. For questions, contact your account manager or reach out to [email protected]. About Analyst1 Threat intelligence often gets stuck between insight and action. Analyst1 is the Operationalized Threat Intelligence Platform built to close that gap. It automatically structures data, links it to assets and vulnerabilities, and tailors views for each role. Integrated with SIEM, ticketing, and vulnerability systems, Analyst1 orchestrates workflows and automates trusted actions, helping organizations reduce response time from days to minutes. Analyst1 Platform Legal Disclaimer: EIN Presswire provides this news content "as is" without warranty of any kind. Energy News do not accept any responsibility or liability for the accuracy, content, images, videos, licenses, completeness, legality, or reliability of the information contained in this article. If you have any complaints or copyright issues related to this article, kindly contact the author above.