CrowdStrike Expands Falcon SIEM to Support Microsoft Defender Data

CrowdStrike (NASDAQ: CRWD) has announced a significant expansion of its Falcon Next-Gen SIEM platform to support Microsoft Defender for Endpoint telemetry. This integration allows enterprise customers to ingest and correlate security data from Microsoft environments directly within the CrowdStrike ecosystem. By leveraging existing data, organizations can modernize their security operations centers (SOC) without the need to deploy additional sensors. Additionally, the company introduced Falcon Onum real-time data pipelines and new federated search capabilities across third-party data stores. These advancements aim to provide a more unified and open security architecture for global enterprises. The move is expected to strengthen CrowdStrike's competitive position in the SIEM market by tapping into the extensive Microsoft user base.