AIDR
This is the full name of what AIDR stands for.
What is AI Detection and Response
Falcon Secure Access protects users inside this application that everyone uses every day to browse the internet.
What is a browser?
Falcon's EDR module is called this.
What is Falcon Insight XDR?
NGAV stands for this.
What is Next-Generation Antivirus?
Falcon Identity Protection protects this — the usernames and passwords employees use to log into company systems.
What are credentials?
AIDR can detect this type of adversarial attack where malicious prompts try to manipulate or bypass AI behavior.
What is a prompt injection?
Before it became Falcon Secure Access, this was the original name of the browser security platform that CrowdStrike acquired.
What is Seraphic Security?
While NGAV focuses on preventing threats, EDR focuses on this — giving security teams full visibility into what happened on an endpoint after a threat gets in.
What is detection and investigation?
This Falcon subscription is required to enable NGAV prevention capabilities (not just detection) on endpoints.
What is Falcon Prevent?
Falcon Identity Protection detects when an attacker has stolen an employee's identity by building a baseline of this for every user.
What is normal behavior?
These are the two AIDR subscription offerings — one for monitoring employees, one for securing AI-powered applications.
What are AIDR for Workforce and AIDR for Agents?
Falcon Secure Access is CrowdStrike's modern replacement for this legacy remote access technology.
What is a VPN?
EDR continuously records this on every endpoint — every process, file, network connection, and user action — so security teams can reconstruct exactly what an attacker did.
What is telemetry?
Falcon NGAV uses these to detect attacks based on behavior and intent rather than just known malicious files.
Indicators of Attack?
To deploy Falcon Identity Protection on-premises, the Falcon sensor must be installed on these specific servers — the backbone of Microsoft Active Directory.
What are domain controllers?
AIDR can monitor AI activity across browsers, applications, gateways, and cloud platforms using these data-gathering components.
What are collectors?
Falcon Secure Access supports these 3 browsers.
What is Chrome, Edge, and Firefox?
Falcon EDR surfaces this — a visual timeline of every action an attacker took on an endpoint — so analysts can quickly understand the full scope of an attack.
What is a process tree (or attack timeline)?
Unlike legacy antivirus that needs constant updates, Falcon NGAV detects new threats without relying on these.
What are signatures?
Falcon Identity Protection can automatically respond to a suspicious login by requiring the user to prove their identity with this security step — without needing a human analyst to intervene.
What is multi-factor authentication (MFA)?
AIDR policies support three rule actions: Log, Block, and this third action that detects and replaces sensitive content before it reaches an AI model or user.
What is Redact?
Falcon Secure Access can detect and block this type of attack in real time — where criminals create convincing fake login pages to steal employee credentials.
What is phishing?
Falcon EDR allows security teams to remotely connect to any endpoint in real time to investigate and remediate threats using this built-in Falcon capability.
What is Real Time Response (RTR)?
Traditional antivirus protects only against known threats. Falcon NGAV adds this capability — using AI and behavioral analysis to stop attacks that have never been seen before.
What is machine learning?
Falcon Identity Protection doesn't just protect on-premises Active Directory — it also extends protection to cloud applications by integrating with these two popular identity platforms.
What are Microsoft Entra ID and Okta?