This Falcomi User Group will take a deep look at "Falcon Discover & Spotlight," which was also featured in the case study session at Falcomi Meetup vol.1! ■ [Vulnerability Management] About Falcon Spotlight Collects and visualizes vulnerabilities in OS and third-party applications in real time. Prioritizes vulnerabilities using a unique AI-based system, ExPRT.AI. You can also check how to deal with collected vulnerabilities. You can also apply Windows patches using the real-time response function. ■ [IT Asset Management] About Falcon Discover Visualizes terminals that do not have Falcon installed, which are likely to be the starting point of cyber attacks. Visualizes the applications and versions used by the terminal. At this event, we will thoroughly explain how to use these modules to visualize and manage asset information, and detect and respond to vulnerabilities, with demonstrations.

The first Falcomi User Group of 2025 will take a deep look at "Falcon For IT," which was released last year! Falcon For IT, which has been requested by many users, is a module that uses generative AI to automate asset management. It supports all operating systems, including Windows, Mac, and Linux, and allows you to search all devices with a wide range of queries. This module not only makes it more efficient to confirm the impact of incidents, but is also used from the perspective of compliance, forensic investigations, and IT operations. At this event, we will introduce the functions of Falcon For IT and how to use it effectively, with demonstrations.

Many companies are now migrating from on-premise to the cloud in order to maximise business opportunities, reduce operational burden and cut costs. As a result, there have been many cases of information leaks due to improper management and operation of the cloud, and cyber attacks exploiting vulnerabilities due to inadequate configuration. In this video, we review the basics of CNAPP (CSPM/CWPP), which is attracting attention as a security measure in the cloud era, and explain the key points to consider when considering strengthening governance not only for your own cloud development environment, but also for the entire supply chain. We will also introduce examples of countermeasures using CrowdStrike products, a leader in the endpoint security market.

Currently, many companies are adopting EDR products to take measures against endpoints, but based on the idea of zero trust, measures including authentication and network elements are necessary. As the use of cloud products increases, we will focus on the fact that authentication is increasingly being used as a means of attack, and explain how to utilize ITDR solutions, which are authentication-based EDR, and how to combine them with EDR. In this seminar, we will explain the necessity of ITDR based on EDR realized by CrowdStrike, and introduce a feasible roadmap for endpoint security in zero trust.

Telework in companies, which started in the wake of the new coronavirus, is being questioned as to how to deal with unique cybersecurity risks and how to respond to incidents. On the other hand, if there are no specific examples of cyberattacks and security incidents that have occurred, many people may be wondering how to address security measures for telework. In this seminar, we will explain the cyberattack "Bottle Expolit Kit" that actually attacked the telework environment of a certain company, and introduce the countermeasures actually taken. This is an actual example where an employee of a certain company was attacked because he was connected to the Internet outside the company without going through the internal network, so there was no perimeter defense such as a proxy or Box, and he directly accessed the website. Regarding countermeasures, we will introduce the countermeasures taken by a certain company for CrowdStrike Falcon in chronological order.

The coronavirus (COVID-19) has forced many companies to change the way they work. This sudden change has presented some difficulties to those who manage corporate systems. Also, looking a little further into the future, I think many companies will use this change as an opportunity to take the helm of digital transformation (DX) rather than returning to the conventional way of working after the chaos settles down. ? In this session, we will explain "Zero Trust" that supports DX and the importance of endpoints in Zero Trust.

Due to the coronavirus (COVID-19), many companies have been forced to change the way they work, and this sudden change has presented some difficulties to those who manage corporate systems. Looking a little further into the future, I suspect that many companies will use this change as an opportunity to implement new security measures, rather than returning to their conventional ways of working after the chaos subsides. In this session, we will organize the points required in the changes in security, and explain the importance of endpoint security and corresponding solutions in realizing zero trust in the new normal era. Those who are considering security measures with keywords such as "telework" and "zero trust", and those who are considering strengthening security for endpoints such as "EDR", "NGAV", and "internal threats". , Please take this opportunity to listen.

The term “EDR” is a word that is often heard these days. However, while actually considering EDR, don't you have questions such as what is different from "anti-virus products" and "Isn't it difficult to analyze alerts when introducing EDR?" In this seminar, we will once again explain "Why is EDR necessary now?" and "From what point of view should EDR be selected?" Please take this opportunity to listen!