CrowdStrike launches Falcon Next-Gen SIEM with third-party intelligence management

CrowdStrike has introduced a new feature for its Falcon Next-Gen SIEM called Third-Party IOC Management. This feature is designed to help security teams incorporate their own intelligence directly into detection and investigation workflows.

By centralizing the ingestion, curation, and lifecycle management of third-party indicators of compromise (IOCs), the tool aims to reduce the operational overhead caused by manually managing indicators across disconnected spreadsheets, ticketing tools, and threat intelligence platforms. The system allows organizations to operationalize intelligence from various sources, including commercial providers, government sources, and industry information sharing and analysis centers (ISACs), alongside CrowdStrike’s own adversary intelligence and telemetry.