CrowdStrike NG-SIEM
SIEM & Observability
CrowdStrike Falcon Next-Gen SIEM is CrowdStrike's SIEM and log management platform. Dash streams security events to it through the HTTP Event Collector, and a custom LogScale parser normalizes them into ECS fields for search, correlation and alerting.
What you get
Real-time delivery through the HTTP Event Collector
ECS-normalized fields through the dash_security parser
Audit logs, alerts and AI interaction sessions by default
Add AI events, detections, findings and policy executions
Per-destination event filters
Delivery health badges and test connection
