CrowdStrike Threat AI leads threat intelligence into the Agentic era

CrowdStrike announced Threat AI, the industry’s first agentic threat intelligence system built to automate the most complex, time-consuming intelligence workflows and accelerate outcomes. As part of CrowdStrike’s newly announced Agentic Security Workforce, Threat AI delivers mission-ready agents that reason across threat data, hunt adversaries proactively, and take decisive action across the kill chain, empowering defenders to concentrate on high-impact investigations while remaining firmly in command. 

“Adversaries are weaponising AI to accelerate every stage of attacks – what once took months can now happen in seconds, collapsing the defender’s window of response. Intelligence must evolve beyond informing defenders to actively countering threats at the speed of AI,” said Adam Meyers, head of Counter Adversary Operations at CrowdStrike. “Threat AI is the intelligence arm of CrowdStrike’s vision to equip every security analyst with mission-ready agents that eliminate high-friction tasks better suited for machines, ushering in a new era of threat intelligence.”

Threat AI: Intelligence in action
CrowdStrike has long set the industry standard for adversary intelligence, tracking more than 265 of the world’s most sophisticated nation-state, eCrime and hacktivist groups. Embedded inside CrowdStrike’s Threat Intelligence & Hunting modules and informed by years of real-world decisions from CrowdStrike Counter Adversary Operations’ (CAO) team of elite threat hunters and intelligence experts, Threat AI automates complex workflows and surfaces actionable recommendations when analysts need them most. Threat AI rapidly accelerates investigations and threat response, with initial agents including:

• Malware analysis agent: Automates one of the most time-consuming and complex analyst workflows: reversing, classifying, and comparing malware. In seconds, the agent analyses files, identifies code similarities, provides instant attribution, and generates YARA rules, delivering actionable insights and scaling defenses across entire malware families.
• Hunt agent: Automates proactive, expert-level threat hunting continuously across the environment. The agent executes queries, proactively scans for emerging threats, rapidly surfaces critical findings, and delivers clear, actionable insights and next-step recommendations. 

Expanding the threat intelligence agent workforce
The Malware Analysis and Hunt Agent are the first in a series of Threat AI agents, with additional agents for triage, correlation, and exposure mapping to follow. Each agent will be orchestrated so the output of one strengthens the others.

Threat intelligence browser extension
CrowdStrike is also introducing a powerful new Chrome extension that brings CrowdStrike adversary intelligence directly into analysts’ web browsers. Analysts can access CrowdStrike’s intelligence while conducting external research, gaining immediate context for investigations and speeding response times with actionable insights, all in the same workflow.