Peregrine® for CrowdStrike Falcon is a lightning-fast desktop application for batch investigation and remediation of EDR alerts, built by analysts for analysts. Dive into the powerful capabilities of Peregrine as Greg Lyon, MindPoint Group New Product Development Manager and Ahmed Bukhari, MindPoint Group’s Sales Engineer Manager, discuss Real Time Response (RTR), utilizing batch actions with the CrowdStrike API, the GUI File Manager and Registry Manager, offline RTR queue, and more.
Ahmed Bukhari: / abukhari786
Gregory Lyon: / greg-lyon
Download the free 30-day trial: https://www.mpgperegrine.com
Join the Discord: https://www.mpgperegrine.com/discord
Video Highlights:
0:24 Introductions
2:36 What is RTR? Real Time Response with CrowdStrike Falcon
4:38 Batch Commands - Peregrine RTR Capability
6:07 Mass Containment - Peregrine RTR Capability
7:43 Kill Task by Name - Peregrine RTR Capability
8:42 Offline RTR Queue - Peregrine RTR Capability
9:38 Visual File Explorer and Windows Registry - Peregrine RTR Capability
10:58 Command Line Scripts - Peregrine RTR Capability
11:54 Getting Started with Peregrine
13:22 Configuring and Using Peregrine for the first time
14:24 CrowdStrike API key and secret credentials
15:41 What are the different access levels for CrowdStrike?
16:19 Peregrine and Multi-Tenancy
17:33 Ahmed's favorite features
18: 51 Ahmed and the offline RTR queue
19:54 Thanks for bringing Peregrine to life
20:26 Don't forget to join the Discord
20:55 How to get Peregrine, subscription information
21:32 Really! Don't forget the Discord channel!