CrowdStrike > Case Studies > Multinational Consumer Manufacturing Organization Enhances Security with Falcon Platform Deployment

Multinational Consumer Manufacturing Organization Enhances Security with Falcon Platform Deployment

Customer Company Size

Large Corporate

Country

Worldwide

Product

Falcon Prevent
Falcon Insight
Falcon Discover
Falcon Intelligence
Falcon OverWatch

Tech Stack

Self-generated

Implementation Scale

Enterprise-wide Deployment

Impact Metrics

Productivity Improvements
Customer Satisfaction

Technology Category

Cybersecurity & Privacy - Endpoint Security

Applicable Industries

Consumer Goods

Applicable Functions

Business Operation

Services

System Integration
Training

About The Customer

This multinational consumer manufacturing organization operates on a global scale, with a complex and dispersed operating environment. The company is responsible for producing a wide range of consumer goods, which necessitates a robust and comprehensive security infrastructure to protect its operations and data. With tens of thousands of endpoints across various locations, the organization faces significant challenges in maintaining security and operational efficiency. The security team is tasked with safeguarding the company's assets against a variety of threats, including sophisticated malware-free attacks that traditional antivirus solutions struggle to detect. The organization values efficiency and coordination between its security operations center (SOC) and incident response (IR) teams, seeking solutions that enhance these aspects while providing comprehensive protection.

The Challenge

Globally dispersed, with tens of thousands of total endpoints, the organization was relying on multiple 'point' products to defend its global environment. For example, the team depended on separate tools for a range of security functions, such as detection, prevention and remediation, as well as the ability to contain infected machines and take action remotely. Operating with multiple, limited-function solutions was inherently ineffective and cumbersome. They determined they would be better served by adopting a single, unified solution that could truly span the entire prevention, detection, response and investigation spectrum, allowing their support and IR teams to coordinate their efforts using one platform.

The Solution

As an existing customer of CrowdStrike’s Falcon Intelligence service, it was an easy decision for them to include the Falcon Platform in their evaluation process, which involved several possible endpoint protection solution providers. The evaluation proved to them that it was indeed possible to combine next-generation prevention and detection, together with powerful response and visibility capabilities, in a single solution. Falcon provided that one unified platform and holistic view of their environment that they were seeking, enabling the SOC and IR teams to protect the global organization in a consistent and coordinated fashion. Falcon’s powerful real-time and historical analytics enabled the teams to improve both their reactive and proactive threat hunting capabilities. The CrowdStrike Services team contributed specific training on how best to leverage the capabilities of Falcon, while the Falcon OverWatch team offered further threat-hunting resources to augment the customer’s efforts.

Operational Impact

Adopting Falcon endpoint protection immediately resulted in improved workflow between SOC, IR and forensics teams, and more efficient and effective security processes across their global environment.
Roll-out was fast and painless, allowing them to deploy globally in a controlled manner.
With the implementation of the Falcon Platform, the teams quickly began to detect advanced attacks targeting their environment, some using sophisticated, malware-free techniques.
The customer also reported improvements in their ability to prevent malware that their existing AV tool had missed, potentially allowing malicious files to enter their environment.
Falcon was able to eliminate this 'silent failure' by correctly identifying the suspicious files and preventing their execution.

Quantitative Benefit