EMBER2024: Advancing the Training of Cybersecurity ML Models Against Evasive Malware
CrowdStrike data scientists are members of a team of cybersecurity researchers that recently released EMBER2024, an…
Falcon Platform Prevents COOKIE SPIDER’s SHAMOS Delivery on macOS
Assessment This campaign highlights that leveraging malvertising and the one-line installation-command technique to distribute macOS information…
CrowdStrike’s Approach to Better Machine Learning Evaluation Using Strategic Data Splitting
“Leakage” in machine learning (ML) occurs when data that an ML model should not learn on…
CrowdStrike Researchers Develop Custom XGBoost Objective to Improve ML Model Release Stability
All of this means that if we want to minimize surprise FPs between model releases, we…
Next-Generation Malware Classification Using Binary Transformers
CrowdStrike researchers have developed a next-gen method to train byte-based Transformer blocks that help models “understand”…
Leveraging CrowdStrike Falcon Against Attacks Targeting Okta Environments
Detecting MFA Fatigue The following rule looks for instances where multiple MFA push notifications are sent…
Tech Analysis: Channel File May Contain Null Bytes | CrowdStrike
Key Points CrowdStrike has observed instances internally and in the field in which the content of…