API & Integrations - Engage CrowdStrike Integration CI - Dec 2024

Service Update

Availability	December 12th, 2024
Product(s)	Engage, Email Security Cloud Integrated (CI)
Who's affected	Email Security Cloud Integrated (CI), Administrators

Overview

Mimecast is pleased to announce the CrowdStrike Human Risk Integration for all Mimecast Engage Email Security Cloud Integrated customers. This integration will allow users to ingest malware-related data into Mimecast’s Human Risk Management Platform. This, in turn, will improve visibility into human risk by adding an additional type of behavior for evaluation and scoring, and allow for behavioral nudges to target users interacting with malware.

What's changing

• The CrowdStrike Integration will be available for Engage users.
• Users will need to create a set of credentials for the integration in the CrowdStrike console, which will then be used to configure a new integration instance in the new Integrations hub.
• The new integration can be set up by navigating to Integrations | Marketplace.
• Users will be able to select whether alerts are managed directly, via SIEM incidents, or via CrowdScore incidents. This information is key in determining whether or not an alert is a true positive and should be included in scoring. 

Only alerts labeled True Positive in the CrowdStrike console (or alerts associated with an Incident marked as such) will be scored.

Recommended actions 

For more information on what needs to be done to make use of the newly available integration, see: Crowdstrike Integration Cloud Integrated.