CrowdStrike Falcon Identity Protection for Security Operations
Triage Identity Protection Incidents
Install Trend
View Install Data
| Date | Install Count | Change |
|---|---|---|
| 2026-09-09 | 0 | - |
| 134 days of no change | ||
| 2026-04-27 | 15 | -15 |
| 19 days of no change | ||
| 2026-04-07 | 16 | -1 |
| 66 days of no change | ||
| 2026-01-30 | 17 | -1 |
| 52 days of no change | ||
| 2025-12-08 | 18 | -1 |
| 16 days of no change | ||
| 2025-11-21 | 17 | +1 |
| 16 days of no change | ||
| 2025-11-04 | 16 | +1 |
| 11 days of no change | ||
| 2025-10-23 | 14 | +2 |
| 8 days of no change | ||
| 2025-10-14 | 13 | +1 |
| 41 days of no change | ||
| 2025-09-02 | 12 | +1 |
| 110 days of no change | ||
| 2025-05-14 | 10 | +2 |
| 41 days of no change | ||
| 2025-04-02 | 9 | +1 |
| 16 days of no change | ||
| 2025-03-16 | 8 | +1 |
| 17 days of no change | ||
| 2025-02-26 | 7 | +1 |
| 118 days of no change | ||
| 2024-10-30 | 6 | +1 |
About
Identity Protection from CrowdStrike allows your team to realize deeper visibility for identity-based attacks and anomalies in real-time without requiring the ingestion of log files. Ideal for organizations that want only identity-based threat incident alerts and threat hunting, but not analytics or automated prevention of threats.
This Integration uses a series of API calls to import Identity Incidents, Alert Events, and Related Events from the Falcon Platform. This data is stored locally in ServiceNow and ITSM or SIR Incidents are created for teams to respond and track Identity Based Events.
Key Features
CrowdStrike Falcon® Identity Threat Detection (ITD) offers Active Directory Security visibility into all account types with insights and analytics, and detects identity-based attacks or anomalies by comparing live authentication traffic against baseline behaviors and attack patterns. SIR Incdeints are created in the ServiceNow Platform which correspond to Identity Based Incidents from CrowdStrike.