InfoNews
CrowdStrike Extends the Agentic SOC to Detect and Stop Agent Insider Threats
- Published
- Record updated
Summary
CrowdStrike is extending its agentic SOC on the Falcon platform with Agent Insider Threat Detection (Q4), which learns normal behavior for each AI agent and its owner and flags deviations even when no policy is violated. Dynamic Risk Scoring (Q4) feeds agent risk into the 0 to 100 score Falcon Next-Gen SIEM builds for the agent's owner and host. AI Ecosystem Detections (Q4) add detection logic for attacks on LLM APIs, coding assistants, MCP servers and agent frameworks.