CrowdStrike Expands Falcon Adversary OverWatch Threat Hunting Across AI and Google Cloud
CrowdStrike, Friday, October 30th, 2026
CrowdStrike adds 24/7 managed threat hunting for AI apps and agents, plus deeper Google Cloud hunting, to Falcon Adversary OverWatch.
CrowdStrike has expanded Falcon Adversary OverWatch with two capabilities: round-the-clock managed hunting for AI applications and autonomous agent activity through Falcon Guardian, and deeper telemetry-driven hunting for Google Cloud.
It builds on the recent OverWatch Cross-Domain launch covering identity, cloud, SaaS, AI agents and third-party data, so customers no longer need separate hunting SKUs per module.
The post walks through a hypothetical intrusion that starts with a phished identity session, registers a rogue MFA device and then abuses an LLM to enumerate apps and harvest credentials, to show why signals must be connected across domains.