Skip to main content
Go to Red Canary Documentation
Red Canary Support

Getting Started with CrowdStrike

  • Updated .

Issue

User is new to using CrowdStrike and needs guidance or introductory training on installing sensors and using the Falcon console.

Environment

CrowdStrike

Resolution

To begin learning how to use CrowdStrike, refer to the vendor's documentation linked below.

The following hyperlinks assume your CrowdStrike Falcon console is hosted on the US-1 subdomain (falcon.crowdstrike.com). If you log in to Crowdstrike from a different URL, replace the subdomain in the link's address with your own (e.g. falcon.us-2.crowdstrike.com).

CrowdStrike Overview

  1. Falcon Console Basics
  2. Security Policies in Falcon Explained
  3. CrowdStrike's Endpoint Monitoring Explained

Sensor Installation and Troubleshooting

  1. Windows: Installing and Troubleshooting the Windows Sensor
  2. macOS:  Installing and Troubleshooting the Mac Sensor
  3. Linux: Installing and Troubleshooting the Linux Sensor

Using the Falcon Console

  1. User Management
  2. Managing Hosts and Host Groups
  3. Managing Incidents and Detections
  4. Configuring Detection and Prevention Policies
  5. Creating Policy Exclusions

Note:  The CrowdStrike documentation linked in this article can only be accessed with a Falcon console user account.

Cause

The linked documentation contains all the fundamentals and resources needed to migrate to and start using CrowdStrike as your EDR platform.  These pages, and other guides, can be found in the CrowdStrike Falcon console under Support and Resources > Documentation.