CrowdStrike Falcon® Forensics

Digital forensics made easy

Quickly respond and recover with automated forensics data collection, enrichment, and correlation.

Start free trial

Streamline forensic data collection and analysis

Quickly conduct large-scale investigations across your organization.

  • Reduce complexity, simplify forensics

    Automate point-in-time and historic forensic data collection across your endpoint fleet.

  • Unified platform for investigations

    Maximize efficiency with integrated threat intelligence, adding rich context to forensics data.

  • Maximize your investment with diverse use cases

    Threat hunting capabilities, periodic compromise assessments, asset risk analysis, and more

    Extended visibility

    Intuitive dashboards surface activities and trends across historical and real-time data, revealing misconfigurations and artifact insights along a visual timeline.

    Simplify workflows

    Automate data collection, enrichment and correlation with threat intelligence, further enhancing and accelerating investigation workflows for analysts of all skill levels.

    Streamlined data collection

    Wide-aperture collection supports investigations across varying data types and across Windows, macOS, and Linux operating systems.

    Vālenz Health: Protecting healthcare data with CrowdStrike

    Featured resources

    Data Sheet

    Falcon Forensics

    Read blog

    CS101

    Digital Forensics and Incident Response

    Learn more

    CS101

    Compromise Assessments Explained

    Learn more

    Video

    Falcon Real-Time Response Demo

    Learn more

    Report

    Gartner® Magic Quadrant™ for Endpoint Protection Platforms

    Learn more

    FAQ

    Supported Operating System Versions

    Learn more

    Try CrowdStrike free for 15 days

    Total protection has never been easier. Enjoy a free trial of the Falcon platform in just a few clicks.

    Start free trial