Enhanced, integrated multilayered threat protection
API 2.0 Compatible
By integrating Mimecast with CrowdStrike, organizations are protected against cyberattacks through an integrated threat sharing solution that provides email, web and endpoint device protection. By sharing intelligence between the two platforms, joint customers can be confident that their organization will be secured from zero-day threats detected by Mimecast and CrowdStrike’s Falcon® Platforms.
Solution Overview
- As inbound emails are received by Mimecast on behalf of the organization, they are subject to analysis by the Mimecast inspection funnel, where a series of email hygiene and advanced security scanning techniques are applied, to ensure that emails are safe before they are delivered to the recipient.
- Any infected messages detected are not delivered to the intended recipient, protecting the organization immediately.
- Key threat identifiers detected by Targeted Threat Protection (malicious attachments, phishing sending domains, and URLs) are shared with the CrowdStrike Falcon® platform.
- CrowdStrike uses this information in the threat detection service to alert the administrators and/or prevent the threat from executing on the managed Endpoint devices.
- Key threat identifiers from the CrowdStrike Falcon® platform are shared with Mimecast to provide consistent protection from threats, and automatically block future matching indicators.
- Mimecast uses the indicators from the CrowdStrike Falcon® platform to scan the mail boxes and automatically remove the affected emails from the recipients.
Mimecast + CrowdStrike Use Cases:
- Automated Protection: Prevent future email threats by blocking matching indicators and scanning mailboxes based on intelligence received from the CrowdStrike Falcon® Platform.
- Threat Intelligence Sharing: Near real time bilateral threat sharing of indicators related to zero day threats detected by email endpoint or web download.
Key Benefits
- Protect the organizations devices from threats detected via Email
- Automated remediation capabilities for the endpoint and secure email gateway
- Enhance threat detection with best-in-class shared intelligence from the Mimecast Secure Email Gateway and CrowdStrike Falcon Platform
- Gain a deeper understanding of the threats targeting the organization
