CrowdStrike Falcon data is used to identify and block potential threats, and malicious activities and alert IT Security if further action is needed. CrowdStrike Falcon may use anonymized information to improve detection capabilities to improve its capability.
No, CrowdStrike Falcon does not scan the content of the files. CrowdStrike Falcon analyzes executable files and scripts and how they are used.
CrowdStrike Falcon data access is limited to only a selected few of the LBNL IT team; the LBNL IT CrowdStrike team has taken privacy training to ensure the highest privacy practice and is trusted with the data. The data will only be accessed and used to do work for LBNL.
CrowdStrike Falcon data is stored by Crowdstrike on their secure cloud servers. LBNL retains ownership of the data.
CrowdStrike will have access to the same data as the LBNL IT CrowdStrike team does. This allows them to continue improving Falcon and provide the necessary analysis to stop harm to LBNL systems.
CrowdStrike Falcon data is not shared with anyone without approval from the IT Policy team and stakeholders.
See the following pages:
To learn more about CrowdStrike's privacy policy, see CrowdStrike's Privacy Notice.