CrowdStrike Falcon Sandbox

Falcon Sandbox performs deep analysis of evasive and unknown threats, enriches the results with threat intelligence and delivers actionable indicators of compromise (IOCs), enabling your security team to better understand sophisticated malware attacks and strengthen their defenses.
Company
This is some text inside of a div block.
Category
This is some text inside of a div block.
Date
This is some text inside of a div block.

The world's most powerful malware sandbox.

WHY FALCON SANDBOX?  

ACHIEVE COMPLETE VISIBILITY

Uncover the full attack lifecycle with insight into all file, network, memory and process activity.

DETECT UNKNOWN THREATS

Unique hybrid analysis technology detects unknown and zero-day threats while defeating evasive malware.

RESPOND FASTER

Save time and make all security teams more effective with easy-to-understand reports, actionable IOCs and seamless integration.

VISIBILITY INTO UNKNOWN AND ADVANCED THREATS

The most sophisticated analysis is required to uncover today's evasive and advanced malware. Falcon Sandbox's Hybrid Analysis technology exposes hidden behavior, defeats evasive malware and delivers more IOCs, to improve the effectiveness of the entire security infrastructure.


ANALYSIS IS EXPANDED TO INCLUDE THE ENTIRE THREAT

Gain insight on who might be targeting you and how to defend against them. Instantly know if malware is related to a larger campaign, malware family or threat actor and automatically expand analysis to include all related malware.


SECURITY TEAMS ARE EMPOWERED

Falcon Sandbox analysis reports provide a new level of visibility into real-world threats, enabling teams to make faster, better decisions, elevating the capability of all members.

FLEXIBLE DEPLOYMENT FINDS THE RIGHT BALANCE

Be fully operational in seconds - no need for costly infrastructure or setup with Falcon Sandbox Cloud - or choose complete control (including customized images) and deploy exclusively within your environment with the on-premises option.

EASILY INTEGRATE INTO YOUR WORKFLOW

Easily integrate into SIEMs, TIPs and orchestration systems with an easy-to-use REST API, pre-built integrations, and support for indicator sharing formats including STIX, OpenIOC, MAEC, MISP, and XML/JSON.

crowdstrike_sandbox_additional-text.png