Description
Detects outgoing HTTP requests to CrowdStrike cloud services (.crowdstrike.com), where the Falcon agent and console communicate. Expect this traffic from managed endpoints, and treat unexpected sources, such as servers reaching the console over the web, as a lead worth investigating.
No cross-references or related blog posts found for this signature.