CrowdStrike Extends Scope and Reach of AI Portfolio
Security Boulevard, Wednesday, November 4th, 2026
CrowdStrike adds AI agent insider threat detection to Falcon Next-Gen SIEM and launches AI-driven adversary emulation.
Michael Vizard reports that at Fal.Con Europe CrowdStrike announced Agent Insider Threat Detection in Falcon Next-Gen SIEM, which learns the normal behavior of each AI agent and the person who deployed it and flags deviations even when no policy is violated.
When an agent invokes a sensitive tool it pauses and raises an Action Request that teams can approve or answer with the AI Agent Kill Switch.
CrowdStrike also added SIEM detection of AI issues such as API abuse, guardrails and token visibility for Charlotte AI and AgentWorks, and an Agentic Adversary Emulation tool that uses its SafeMind models to chain weaknesses in simulated attacks.