ExtraHop Reveal(x) package for Falcon LogScale

Easily ingest, store, and visualize ExtraHop Reveal(x) 360 flow data in CrowdStrike Falcon® LogScale leveraging a pre-built package to gain valuable network insights for improved threat detection and response. The ExtraHop package for Falcon LogScale allows you to easily ingest and parse incoming ExFlow data from your ExtraHop Reveal(x) sensors, providing you with metrics around the types of peers, protocols and geolocation data for unmanaged systems that do not have the CrowdStrike Falcon agent installed. With these insights stored within Falcon LogScale, your team gains comprehensive visibility, accountability and data collection for any unmanaged device, alongside additional detections, observations and context derived within Falcon LogScale.

• Get valuable insights

  Extract relevant network insights with parsers for ExFlow logs and Detection Records (JSON) from ExtraHop Reveal(x) sensors in Falcon LogScale

• Gain comprehensive visibility

  Get visibility and ensure accountability with additional data collection for devices without a Falcon sensor

• Visualize your data

  Easily monitor ExtraHop Reveal(x) activity with dashboards for location, IP address, and network detection and response (NDR) detections