Overview
Explore
Expertise
Ecosystem
What's popular
CrowdStrike Proving Ground Lab
WWT's ATC CrowdStrike Proving Ground Lab exists to showcase the CrowdStrike Falcon platform's web UI and ability to alert on, and prevent, breaches using cloud data and machine learning.
Mastering Threat Detection and Incident Response
It was a quiet Friday night when the alerts hit—rogue Kerberos tickets spiking from a Pass-the-Hash attack. With 14 years in the SOC trenches, I, Shoaib Mohammed Shahapuri, saw my Tier 1 analyst, Morgan, catch the first anomaly, but it was Riley, our red teamer, who nearly owned the domain—stopped just in time. That close call inspired this Intermediate Threat Detection & Incident Response Learning Path—a 13-hour journey designed to elevate your career from Tier 1 to Tier 2/3. You'll master early-stage detection with Falcon XDR and Security Onion to catch initial access like hash captures; escalate alerts with Morgan and Alex using SOAR; track APT29-style campaigns with Alex and Taylor through Falcon Intelligence; defend Active Directory from Kerberoasting with Falcon ITDR; and fine-tune noisy detections from fileless malware using XDR and network-based tools. Each hands-on lab simulates Riley's full attack chain—credential theft, privilege escalation, lateral movement—so you can build the skills that lead to promotions and high-paying roles. Ready to outsmart Riley and level up your SOC career? Let's dive in.
CrowdStrike EDR
Learn about CrowdStrike Falcon Insight, CrowdStrike's Endpoint Detection and Response (EDR) technology. Falcon Insight ensures customers have comprehensive, real-time visibility into everything that is happening on their endpoints as well as helps you respond to and remediate threats effectively, getting you back to business quickly. In this Learning Path, you will explore the architecture on which CrowdStrike Falcon Insights runs, as well as the deployment of CrowdStrike Falcon agents and configuration of policies. You will also learn about the detection and response capabilities that are provided by CrowdStrike Falcon Insight.
End User Computing Nerd vs the Great Firewall of China
Traveling to China for the holidays, I circumvented the Great Firewall of China to stay connected to the West. What worked and what didn't? While personal VPNs failed, using international roaming, VDI and an enterprise browser proved effective. This journey highlighted the challenges and solutions for maintaining internet access to the West in a highly restricted environment.
CrowdStrike and Zscaler Private Access Integrated Lab
WWT's ATC CrowdStrike and Zscaler Integrated lab exists to showcase the integration between CrowdStrike's Falcon Platform, Zscaler Private Access and Zscaler Client Connector through relevant use cases.
What's new
CrowdStrike CTF: Falcon
CrowdStrike delivers a unified platform approach to modern security so you can protect and build your future. This game incorporates several new features of CrowdStrike, offering a unique opportunity to test your skills against the latest in cybersecurity technology.
Tools utilized within the game:
🔷Crowdstrike Falcon (EDR tool, end point protection and analysis)
🔷Crowdstrike Logscale (History and logging)
🔷CrowdStrike Cloud Security
🔷CrowdStrike Identity Threat Protection
This is a mixed capture the flag style event that will require you and your team to zero in on malicious actors inside of a network, identify vulnerable or outdated services, and brace yourself for a real-time series of cyber attacks. Points will be awarded for finding those exploits, remediating them to the best of your ability and defending Iron Guardian's network.
CrowdStrike and Zscaler Private Access Integrated Lab
WWT's ATC CrowdStrike and Zscaler Integrated lab exists to showcase the integration between CrowdStrike's Falcon Platform, Zscaler Private Access and Zscaler Client Connector through relevant use cases.
Beyond Alerts: The Next Generation of Managed Detection and Response
Next-generation managed detection and response (NGMDR) revolutionizes cybersecurity by integrating AI with human expertise, shifting from reactive to proactive defense. This hybrid model enhances threat detection, reduces response times and anticipates attacks, transforming security from a burden to a strategic enabler of resilience and innovation.
Beyond Identity Foundations Lab
This lab features Beyond Identity which is an authentication solution that uses device-bound credentials for zero-friction passwordless authentication. Beyond Identity is a cloud-native platform that uses Authenticators downloaded on endpoints which registers a users credentials and collects signals on the endpoint to capture device security posture for authentication.
Zscaler Internet Access, CrowdStrike, and Okta Integration Lab
This lab exists to provide hands-on experience with the integration between ZIA, CrowdStrike Falcon, and Okta through relevant use cases. First, this lab can be used to see how the integration between CrowdStrike Falcon and ZIA can ensure administrators have end-to-end insight into the threat landscape to minimize attack surface and deliver rapid threat detection and response. On top of this, the lab allows users to see how Okta can integrate with both CrowdStrike and Zscaler to strengthen a company's Zero Trust profile, enhance threat detection during authentication and monitor the intersection of security and access management.
Cloud Security: Announcements from Fal.con 2025
Crowdstrike continues to add new features to their platform, making Falcon Cloud Security a top contender when enterprises consider how they are going to secure their cloud investment, including AI applications in the cloud.
Partner POV | CrowdStrike + NVIDIA: Redefining Cybersecurity for the Generative AI Era
In a rapidly evolving cyber landscape, legacy security methods falter against sophisticated threats. CrowdStrike and NVIDIA's collaboration harnesses AI to revolutionize threat detection, offering swift, AI-assisted protection. By merging advanced analytics with accelerated computing, they empower organizations to outpace adversaries, transforming enterprise data into actionable security insights for a safer digital future.
Onum, Pangea and the Path to the Agentic SOC: Highlights from Fal.Con 2025
AI is revolutionizing cybersecurity, transforming both attackers and defenders. At Fal.Con 2025, CrowdStrike unveiled its vision of an agentic SOC powered by intelligent agents and streaming pipelines. This shift towards AI-native security platforms aims to enhance collaboration, autonomy and governance, heralding a new era of intelligent, proactive security operations.
Partner POV | Fortinet and CrowdStrike Joint Solution
Delivering AI-powered protection, adaptive zero-trust access, and accelerated threat detection and response across your entire digital infrastructure
CrowdStrike CTF: Falcon
CrowdStrike delivers a unified platform approach to modern security so you can protect and build your future. This game incorporates several new features of CrowdStrike, offering a unique opportunity to test your skills against the latest in cybersecurity technology.
Tools utilized within the game:
🔷Crowdstrike Falcon (EDR tool, end point protection and analysis)
🔷Crowdstrike Logscale (History and logging)
🔷CrowdStrike Cloud Security
🔷CrowdStrike Identity Threat Protection
This is a mixed capture the flag style event that will require you and your team to zero in on malicious actors inside of a network, identify vulnerable or outdated services, and brace yourself for a real-time series of cyber attacks. Points will be awarded for finding those exploits, remediating them to the best of your ability and defending Iron Guardian's network.
Partner POV | CrowdStrike Launches New Services to Strengthen AI Security and SOC Readiness
AI is reshaping business and security landscapes, introducing risks like shadow AI and misconfigurations. CrowdStrike's AI Security Services, including AI Systems Security Assessment and AI for SecOps Readiness, help organizations secure AI systems and integrate AI into operations, countering AI-savvy adversaries with strategic, threat-informed solutions.
The State of Cloud Security: As Told by CrowdStrike
In 2025, CrowdStrike's Global Threat Report reveals cyber adversaries adopting business-like efficiency, especially in cloud environments. Scattered Spider, a notorious group, inspires others, leading to a surge in cloud intrusions. CrowdStrike's Falcon Cloud Security offers robust solutions, integrating threat detection and proactive measures to combat these evolving threats.
CrowdStrike and ExtraHop Integrated Lab
WWT's ATC ExtraHop & Crowdstrike Integration Proving Ground Lab exists to provide a unified solution built around relevant use cases. It will showcase ExtraHop and CrowdStrike's integration to stop breaches before they can cause damage.
Mastering Threat Detection and Incident Response
It was a quiet Friday night when the alerts hit—rogue Kerberos tickets spiking from a Pass-the-Hash attack. With 14 years in the SOC trenches, I, Shoaib Mohammed Shahapuri, saw my Tier 1 analyst, Morgan, catch the first anomaly, but it was Riley, our red teamer, who nearly owned the domain—stopped just in time. That close call inspired this Intermediate Threat Detection & Incident Response Learning Path—a 13-hour journey designed to elevate your career from Tier 1 to Tier 2/3. You'll master early-stage detection with Falcon XDR and Security Onion to catch initial access like hash captures; escalate alerts with Morgan and Alex using SOAR; track APT29-style campaigns with Alex and Taylor through Falcon Intelligence; defend Active Directory from Kerberoasting with Falcon ITDR; and fine-tune noisy detections from fileless malware using XDR and network-based tools. Each hands-on lab simulates Riley's full attack chain—credential theft, privilege escalation, lateral movement—so you can build the skills that lead to promotions and high-paying roles. Ready to outsmart Riley and level up your SOC career? Let's dive in.
CrowdStrike Proving Ground Lab
WWT's ATC CrowdStrike Proving Ground Lab exists to showcase the CrowdStrike Falcon platform's web UI and ability to alert on, and prevent, breaches using cloud data and machine learning.
Partner POV | Better Together: ExtraHop + Crowdstrike
CrowdStrike's integration with ExtraHop RevealX combines EDR and NDR for real-time traffic analysis, AI-driven insights, and automated threat response, enhancing security without disrupting operations.
Partner POV | CrowdStrike Leads Agentic AI Innovation in Cybersecurity
CrowdStrike's latest AI innovation autonomously triages endpoint detections, saving customers more than 40 hours of manual work per week on average.
Partner POV | CrowdStrike 2025 Global Threat Report
The CrowdStrike 2025 Global Threat Report details the threat landscape of the past year, the key threats and trends we observed, and the adversaries behind them to inform and prepare businesses for the year ahead.
Partner POV | Assessing Misconfigurations at Scale with Falcon Exposure Management
Misconfigurations often fly under the radar, but overlooking these risks can open the door to adversaries. Learn how to simplify configuration management for large environments.
Partner POV | Solving for Exponential Data Growth in Next-Gen SIEM
We dive into the ability of next-gen SIEM systems to address the common problem of rapid data growth in the first blog of a new series, "What Makes Next-Gen SIEM Next-Gen?"