CrowdStrike
Named by 27 kept items in this workspace.
14 items name it under classification.technologies, 7 under tools, 5 under classification.key entities and 1 under affected products.
Search every workspace for CrowdStrike. It matches the name as written, so it can find other things that share it.
The items that name it 27
hired through legal counsel for the investigation
Cited as an example of a threat intelligence company that could be granted permission to hack computers of a tracked APT group under the new program.
Security research team that, alongside Huntress, split the victim list and contacted organizations to warn them of the Exchange compromise
Security vendor; took down Glassworm attack infrastructure.
Added to v2 AV/EDR scan list; retained as core target in v3.
EDR tool watching for anomalous process behavior, suspicious file system changes, and C2 callbacks
Used to take down Glassworm malware infrastructure
EDR event ingestion and noise suppression
All technologies in this workspace.