CrowdStrike Enhances Threat Hunting for AI and Google Cloud Environments
CrowdStrike expands its Falcon Adversary OverWatch threat hunting capabilities to proactively detect and respond to advanced threats targeting AI systems and Google Cloud infrastructure.
CrowdStrike is significantly expanding its Falcon Adversary OverWatch threat hunting service, bolstering its capabilities to detect and neutralize sophisticated threats across two critical and rapidly evolving attack surfaces: artificial intelligence (AI) applications and Google Cloud environments. This strategic enhancement aims to provide security teams with comprehensive visibility and proactive defense mechanisms against the increasingly complex tactics employed by adversaries.
The expansion addresses the growing trend of attackers broadening their operations across cloud infrastructure, identities, SaaS applications, and AI systems. Suspicious activities in one domain can often be part of a larger, interconnected intrusion, making cross-domain visibility essential for effective threat hunting. CrowdStrike's updated offering now includes 24/7 managed threat hunting for AI applications and autonomous agent activity through CrowdStrike Falcon Guardian, alongside deeper, telemetry-driven hunting specifically for Google Cloud.
This move builds upon the recent launch of Falcon Adversary OverWatch Cross-Domain, which already extends managed threat hunting across identity, cloud, AI agent activity, SaaS applications, and third-party data. The integration ensures that CrowdStrike OverWatch threat hunters possess the broad visibility needed to uncover adversary activity across the entire CrowdStrike Falcon platform, eliminating the need for customers to purchase separate threat hunting solutions for each module or domain.
Adversaries are increasingly exploiting AI systems, which are often connected to sensitive data and infrastructure. The CrowdStrike 2026 Threat Hunting Report indicates that AI agents triggered 2.5 times more detection leads than human activity, highlighting the sheer volume and velocity of signals that security teams must analyze. Falcon Adversary OverWatch Cross-Domain now proactively hunts for threats within AI applications and autonomous agent activities monitored by Falcon Guardian. By combining Falcon Guardian's runtime context with platform telemetry and frontline adversary intelligence, hunters can identify manipulation, abuse, and novel adversary tradecraft that automated detections might miss.
Furthermore, CrowdStrike Falcon Complete for Falcon Guardian extends 24/7 expert-led managed detection and response (MDR) to AI coding assistants and agents. Specialized analysts investigate malicious prompts, suspicious agent behavior, and threats involving AI tools, connecting AI agent activity with downstream endpoint execution to assess threat scope and enable rapid containment and remediation.
In parallel, CrowdStrike is extending its advanced threat hunting capabilities to Google Cloud, mirroring the depth and precision previously available for Amazon Web Services (AWS) and Microsoft Azure. The report also notes a 171% year-over-year surge in eCrime activity targeting cloud environments, often using stolen credentials and misconfigurations. By hunting directly on underlying cloud telemetry, CrowdStrike OverWatch hunters can identify suspicious activity earlier in the attack chain, such as service account misuse, privilege escalation, and lateral movement, even when adversaries attempt to blend in with legitimate administrative operations.
With these expansions, Falcon Adversary OverWatch now provides consistent, telemetry-driven managed threat hunting across AWS, Azure, and Google Cloud, enabling security teams to uncover sophisticated threats in multi-cloud environments without managing disparate hunting operations. The service analyzes trillions of events daily, surfaces millions of detection leads, and delivers tens of thousands of high-fidelity customer notifications annually, backed by CrowdStrike's extensive intelligence on hundreds of tracked adversaries.