CrowdStrike Falcon SCC Connector

Send Security events from the Falcon platform to SCC.

Explore
Product Description

Falcon Integration Gateway (FIG) enables the forwarding of threat detection findings from the CrowdStrike Falcon platform to Google Cloud Security Command Center.

The CrowdStrike Falcon platform generates detection findings that highlight suspicious files and activities within your environment. These detections range from clear indicators of compromise (IOCs), such as the presence of malicious files, to more complex indicators of attack (IOAs) involving patterns of suspicious behavior across hosts or containers.

The Falcon Integration Gateway project simplifies the export of individual Falcon detections into Google Cloud Security Command Center. This integration is especially valuable for security operations teams that rely on third-party tools, allowing them to receive early, real-time alerts on malicious activity identified by the Falcon platform.

FIG is an open-source project and, as such, does not include formal or implied support from CrowdStrike.

Designed for cloud-native environments, the CrowdStrike Falcon platform reduces operational friction and enhances cloud security efficiency without impacting productivity. Beyond deep integrations, it delivers rich visibility into cloud workload events and instance metadata, enabling advanced detection, rapid response, and proactive threat hunting through the industry-leading Falcon Cloud Workload Protection solution.

To further support DevOps teams, CrowdStrike Falcon Horizon™ cloud security posture management helps organizations quickly identify and remediate configuration issues across multiple environments, improving visibility while reducing alert fatigue for security operations centers.

Tell Us About Your Needs