EL7.AI
StocksMedium•23 March 2026•
1 min read

CrowdStrike Expands Falcon SIEM to Support Microsoft Defender Data

Key Facts

1CrowdStrike announced that Falcon Next-Gen SIEM now ingests and correlates Microsoft Defender for Endpoint telemetry.
2The integration allows Microsoft customers to modernize security operations without deploying additional sensors.
3The company also unveiled Falcon Onum real-time data pipelines and federated search across third-party data stores.

CrowdStrike (NASDAQ: CRWD) has announced a significant expansion of its Falcon Next-Gen SIEM platform to support Microsoft Defender for Endpoint telemetry. This integration allows enterprise customers to ingest and correlate security data from Microsoft environments directly within the CrowdStrike ecosystem. By leveraging existing data, organizations can modernize their security operations centers (SOC) without the need to deploy additional sensors. Additionally, the company introduced Falcon Onum real-time data pipelines and new federated search capabilities across third-party data stores. These advancements aim to provide a more unified and open security architecture for global enterprises. The move is expected to strengthen CrowdStrike's competitive position in the SIEM market by tapping into the extensive Microsoft user base.