# ExtraHop Extends XDR Partnership with CrowdStrike, Introduces Native Push-Button Response for Precision Threat Quarantine
Published: 2022-07-13
Category: Technology
Category URL: https://palmbayherald.com/category/technology/
Meta Title: ExtraHop Reveal(x) & CrowdStrike Falcon Integration for
Meta Description: Maximize threat containment and investigation capabilities with the new push-button response feature, enhancing security analysts' ability to respond with
URL: https://palmbayherald.com/extrahop-extends-xdr-partnership-with-crowdstrike-introduces-native-push-button-response-for-precision-threat-quarantine/

![undefined](https://prod.superblogcdn.com/site_cuid_cm5qsn97w0023wirgsdl4dy79/images/istock-1254718662-1-1736747900388-compressed.jpg)

New capabilities build on existing detection, investigation, and response integrations between ExtraHop Reveal(x) and CrowdStrike Falcon platform, adding highly-targeted, intelligence-backed response to CrowdXDR alliance

SEATTLE, JULY 12, 2022 – ExtraHop, the leader in cloud-native [network](https://palmbayherald.com/network-tester-market-2019-scope-of-current-and-future-industry-2027/) intelligence, today announced an integration with CrowdStrike, a leader in cloud-delivered protection of endpoints, cloud workloads, identity, and data, that takes security analysts from detection to threat containment to investigation with a single click. The new push-button response integration expands the best-of-breed extended detection and response (XDR) partnership between the two companies, enabling users to quarantine individual assets from a detection directly within Reveal(x) and then pivot seamlessly into an investigation workflow. Armed with this capability, defenders can act with speed and precision, accelerating response times and minimizing the impact to the business.

The new native push-button response feature within [ExtraHop](https://palmbayherald.com/extrahop-names-industry-veteran-karl-werner-as-area-vice-president-of-the-central-southern-europe-region/) Reveal(x) gives defenders the tools they need to dramatically accelerate containment while minimizing disruption to the organization. Unlike automated response offerings, push-button response gives security analysts the ability to control how and when assets are quarantined based on high-fidelity detections and enriched intelligence that extends from the [network](https://palmbayherald.com/network-tester-market-2019-scope-of-current-and-future-industry-2027/) to the endpoint.

“Over the past five years, the security pendulum has started to swing more meaningfully towards a detect-and-respond model that assumes even the best perimeter defenses will eventually be breached,” said Jesse Rothstein, co-founder and CTO, ExtraHop. “But many organizations remain reluctant to invest more in this approach due to the complexity of playbook-driven response. With our new native push-button response, we’re continuing to build on our partnership with CrowdStrike and existing [response](https://palmbayherald.com/security-operations-teams-get-relief-from-alert-overload-with-the-trend-micro-vision-one-platform/) integration capabilities to give defenders the ability to rapidly and precisely quarantine compromised devices without causing massive disruption to the organization.”

“This new capability enables faster remediation and faster time to respond, letting teams focus on critical assets and resources,” said Chris Kissel, research director, security and trust, IDC. “The focus on streamlining the work of the overburdened SOC analyst adds real value for defenders.”

The push-button response [integration](https://palmbayherald.com/alveo-integrates-data-services-from-ultumus-to-help-customers-more-quickly-integrate-index-and-etf-information/) builds upon ExtraHop’s existing partnership with CrowdStrike which offers integrations throughout the CrowdStrike Falcon platform, including Falcon X, Threat Graph, Falcon Insight (with Real Time Response integration), Humio, and Falcon XDR, to deliver best-of-breed XDR to their joint customers around the world.

– Unified Threat Intelligence: Reveal(x) 360 correlates indicators of compromise (IOCs) from CrowdStrike Falcon X and security telemetry from the CrowdStrike Falcon platform with network details and behavioral insights to deliver complete coverage. The data is correlated and contextualized in the Reveal(x) console.

– Real-time Detection: With the [integration](https://palmbayherald.com/alveo-integrates-data-services-from-ultumus-to-help-customers-more-quickly-integrate-index-and-etf-information/) of Reveal(x) 360 and the CrowdStrike Falcon platform, security teams can rapidly detect threats observed on the network such as network privilege escalation, lateral movement, suspicious remote access connections, and data exfiltration. They also can thwart attack techniques occurring on the endpoint, including ransomware, local file enumeration, process spawning, and code execution. This provides complete coverage across the entire attack surface.

– Instant Response: With the new push-button [response](https://palmbayherald.com/security-operations-teams-get-relief-from-alert-overload-with-the-trend-micro-vision-one-platform/) offering, security analysts can use the network containment capability of the CrowdStrike Falcon platform to instantly quarantine a device with a single click within the Reveal(x) platform. This approach cuts off attacker access to network resources and endpoints, stopping an attack in progress without disrupting business or slowing an analyst’s investigation workflow.

– Continuous Endpoint Visibility: With automatic device discovery and classification, Reveal(x) continuously updates and maintains a list of devices impacted by threats, even on devices where the CrowdStrike Falcon agent is not yet present. This alerts CrowdStrike customers to newly connected and potentially compromised devices that need instrumentation for device-level visibility. It also extends edge visibility to include IoT, bring your own device (BYOD), and devices incompatible with agents.

[Learn more about the power of ExtraHop + CrowdStrike](https://www.extrahop.com/partners/tech-partners/crowdstrike/)“With new advanced and evolving threats challenging organizations daily, security teams must act with impeccable speed and accuracy to safeguard the business from a breach,” said Geoff Swaine, vice president of global programs, store, and alliances at CrowdStrike. “Our tight partnership and breadth of integration with ExtraHop helps to unify security telemetry across network and endpoints, providing customers with enhanced detection and response capabilities to stop advanced threats faster. This new capability offered in the [ExtraHop](https://palmbayherald.com/extrahop-names-industry-veteran-karl-werner-as-area-vice-president-of-the-central-southern-europe-region/) platform helps deepen our integration, enabling security teams to quickly and precisely take action for more effective threat detection, investigation, and response across IT environments.”

ExtraHop is also a launch partner of the CrowdXDR alliance, joining forces to establish common XDR language for data sharing between security tools and processes to enrich detections and threat hunting capabilities. A recent joint [webinar](https://www.brighttalk.com/webcast/14671/549523) explains how to make XDR a reality.


---
This blog is powered by Superblog. Visit https://superblog.ai to know more.
---