CrowdStrike Falcon Exposure Management

No entries match these filters. Clear filters

1. undated-41a947f6 · issue 023

   Falcon Exposure Management adds KEVKEVCISA's Known Exploited Vulnerabilities catalog, a list of vulnerabilities with evidence of exploitation in real attacks. It helps teams prioritize fixes for problems attackers already use.-native prioritization, automated exploit detection, attack pathattack pathA possible sequence of steps an attacker could take to reach a valuable target. It connects weaknesses, permissions and reachable systems rather than treating each finding separately. analysis, and an AI Exposure Analyst Agent for BOD 26-04 compliance.

   • Adds continuous 24/7 discovery and risk scoring of internet-facing assets, shadow IT, and cloud workloads via external attack surfaceattack surfaceThe exposed systems, interfaces and access points an attacker could try to use. It includes internet-facing services as well as identities, software and other reachable resources. management (EASMEASMExternal Attack Surface Management: a discipline and category of tooling that continuously discovers and monitors an organization's internet-facing assets to identify exposures before attackers do.).
   • Integrates the CISA KEVCISA KEVA catalog maintained by the US Cybersecurity and Infrastructure Security Agency listing vulnerabilities confirmed to be actively exploited in the wild, giving cyber tools a vetted, authoritative prioritization signal. catalog natively with endpoint telemetry, automatically flagging affected hosts with remediation guidance and zero-config KEV visibility.
   • Adds Network Vulnerability Assessment (NVA) leveraging existing Falcon sensors to assess unmanaged devices without dedicated scanning appliances.
   • Adds Secure Configuration Assessment (SCASCASoftware composition analysis, identifying third-party dependencies and checking them for known vulnerabilities and license issues. It covers software a team uses rather than writes itself.) that continuously evaluates systems against CISCISA nonprofit that publishes consensus-based configuration benchmarks and controls for hardening operating systems, cloud environments, and software; cyber tools use it as a ready-made compliance baseline. and other benchmarks while ingesting third-party vulnerability data for unified exposure visibility.
   • Adds Exploit Automatability Detection using behavioral AI and indicators of attack (IOAs) to detect automated exploitation attempts in real time across endpoints, cloud, and identity.

   +3 more show less

   • Introduces the Exposure Prioritization Agent (Exposure Analyst Agent), which combines asset context, adversary intelligence, attack path analysis, and exploit likelihood to explain exposures in plain language and deliver prioritized remediation guidance.
   • Adds Attack Path Analysis to enrich vulnerability prioritization with asset criticality, internet exposure, and environmental context beyond CVSSCVSSCommon Vulnerability Scoring System, a method for describing a vulnerability's characteristics and severity. Its score is not the probability that attackers will exploit it. scoring.
   • Provides real-time dashboards and Falcon Platform API integration for automated tagging and reporting of exposed assets to support agency compliance reporting.

   8 details in Everything