CrowdStrike

Ingest CrowdStrike detection findings, threat reports, and audit logs.

Extension

Free trial Documentation

Product information
Release notes

Overview

Dynatrace integrates with the CrowdStrike Falcon platform to enable visibility, unified analysis, and operationalization of both security findings and threat intelligence across your monitored environments.

The integration ingests CrowdStrike detection findings and threat reports — including indicators of compromise (IOCs) such as IP addresses, domains, URLs, and file hashes — maps them to the Dynatrace Semantic Dictionary, and normalizes them as security finding and threat report events. This helps security teams investigate threats, correlate external intelligence with runtime context, and automate response workflows.

Capabilities:

Single pane of glass: Ingest security findings and threat reports with their indicators of compromise (IOCs) from CrowdStrike into Dynatrace (powered by OpenPipeline™)
Unified analysis: Dynatrace transforms and maps both detection findings and threat reports to a unified format, so you can analyze and process security data consistently across multiple sources (powered by Dynatrace Semantic Dictionary)
Runtime exposure analysis: Search and correlate IOCs and detection findings across all data in Dynatrace — natively captured and third-party ingested — including logs, traces, and events, to reveal where threats surface in your environment
Findings & threat operationalization: Prioritize, visualize, and automate security response and proactive threat exposure analysis with runtime context
Unveil blind spots: Discover and eliminate coverage gaps in your security product deployment and assessments

Use cases

Overview: Visualize and report security detections, threat exposure, and trends across tools and environments with ready-made Dashboards.
Prioritization: Analyze and prioritize security findings uniformly with Notebooks.
Runtime insights: Connect detection findings and threat indicators of compromise (IOCs) to Dynatrace native apps to reveal where external threats intersect with your monitored environment, using Distributed Tracing, Logs, Vulnerabilities, and Threats & Exploits.
Automation: Automate orchestration and drive proactive threat remediation by creating notifications and tickets for critical security findings with Workflows.
Investigation: Use security findings and threat reports as an additional dimension for threat hunting and incident forensics with Security Investigator.

Get started

For detailed information and setup instructions, go to Ingest CrowdStrike detection findings, threat reports, and audit logs.

Details

This integration comes with ready-made dashboards and notebooks to help you:

Visualize and summarize security findings and product coverage
Get an overview of ingested threat reports and their indicators of compromise
Analyze threat exposure from a selected threat report against your runtime environment

Subscribe to new releases

Copy to clipboard

Related to CrowdStrike

Dashboards

Transform complex data into clear visualizations with custom dashboards.

OpenPipeline

Configure ingest, processing, and persistence of data sent to Grail.

Full version history

To have more information on how to install the downloaded package, please follow the instructions on this page.

ReleaseDate

Full version history

What's new:

- Added support for CrowdStrike Threat Intelligence, enabling the extension to collect intelligence reports and ingest them into Dynatrace for centralized threat monitoring and analysis together with the associated Indicators of Compromise (IOCs) as threat observables, including: Email Addresses, Hashes, IP Addresses, Domains, URLs, CVEs.
 - Added support for CrowdStrike Audit Logs, enabling the extension to ingest audit events from CrowdStrike into Dynatrace for centralized auditing, monitoring, and security analysis.
- Added proxy support for a better managing of the connection to the CrowdStrike platform from the Dynatrace ActiveGate.

Full version history

What's new: Initial integration release.

Discover recent additions to Dynatrace

Dynatrace Assist

Dynatrace Assist: Ask, analyze, and act with Dynatrace Intelligence.

Smartscape

Interactively explore and analyze topology and relationships in digital systems.

Compliance Assistant

Track, manage, and automate compliance across your IT and business landscape.

Experience Vitals

Optimize UX with core vitals, frontend error tracking, and end-to-end visibility.

Error Inspector

Discover, triage, and manage errors across all your frontends.

Users & Sessions

Discover how users and cohorts with common characteristics experience your app.

Analyze your data

Understand your data better with deep insights and clear visualizations.

Notebooks

Create powerful, data-driven documents for custom analytics and collaboration.

Dashboards

Transform complex data into clear visualizations with custom dashboards.

Investigations

Fast and precise incident response on Grail data with DQL queries.

Smartscape

Interactively explore and analyze topology and relationships in digital systems.

Logs

Explore all your logs without writing a single query.

Problems

Detect, explain and triage problems automatically using Dynatrace Intelligence.

Automate your processes

Turn data and answers into actions, securely, and at scale.

Workflows

Automate tasks in your IT landscape and move towards autonomous operations.

Jira

Open, update, and close Jira tickets automatically from Dynatrace Workflows.

Slack

Automate Slack messaging for security incidents, attacks, remediation, and more.

Secure your cloud application

See vulnerabilities and attacks in your environment.

Security Posture Management

Detect, prioritize, and remediate security and compliance findings with SPM.

Threats & Exploits

Understand, triage, and investigate detection findings and alerts.

More resources

Observability for Developers on Cursor

Get Real time Code-Level data directly to your Cursor IDE.

Documents

Manage Dashboards, Notebooks and other documents in your Dynatrace environment.

GitHub Copilot Coding Agent

Automate vulnerability remediation and boost developer productivity.

GitHub Copilot Custom Agent

Automate your development workflows with specialized agent definitions.

Observability for Developer on JetBrains

Get real-time code-level data directly to your Jetbrains IDE.

Metrics

Browse, search, and manage all your metrics in one central catalog.

Pagerduty for Dynatrace Workflows

Streamline incident management with automated Pageruty workflows.

Cursor IDE

Boost developer productivity and get real-time, code-level insights into Cursor.

Observability for Developers on Windsurf

Get real-time code-level data directly to your Windsurf IDE.

Are you looking for something different?

We have hundreds of apps, extensions, and other technologies to customize your environment

Leverage our newest innovations of Dynatrace Saas

Kick-start your app creation

Kick-start your app creation

Whether you’re a beginner or a pro, Dynatrace Developer has the tools and support you need to create incredible apps with minimal effort.

Go to Dynatrace Developer

Upgrading from Dynatrace Managed to SaaS

Upgrading from Dynatrace Managed to SaaS

Drive innovation, speed, and agility in your organization by seamlessly and securely upgrading.

Log Management and Analytics

Log Management and Analytics

Innovate faster and more efficiently with unified log management and log analytics for actionable insights and automation.