What happens when a trusted AI agent becomes the insider threat?
In this CrowdStrike keynote demo, see how Agent Insider Threat Detection, part of CrowdStrike's Agentic SOC, uncovers a compromised AI agent operating inside the enterprise.
What begins as a routine code review quickly turns into a coordinated attack. A DevOps engineer's Claude Code agent spawns multiple subagents, accesses sensitive secrets, steals credentials, and attempts to exfiltrate data, all without the user's knowledge.
The investigation reveals the real threat: a poisoned MCP server update containing hidden malicious instructions.
Watch how CrowdStrike connects activity across AI agents, identities, and endpoints to uncover the attack, distinguish legitimate user intent from malicious agent behavior, and coordinate response using Falcon Guardian, Falcon Intelligence, and AI-powered security experts.
The insider wasn't the employee. It was the AI agent acting on her behalf.
Discover how CrowdStrike is securing the agentic enterprise by protecting not just users, but the AI agents operating on their behalf.
🔍 Agentic SOC | CrowdStrike
Learn more here: https://cs.link/uuxyG
📣 Connect With Us:
► X:
https://twitter.com/CrowdStrike
► Instagram:
https://www.instagram.com/crowdstrike
► LinkedIn:
https://www.linkedin.com/company/crowdstrike
🔔 Subscribe to stay updated!
#CrowdStrike #Cybersecurity
In this CrowdStrike keynote demo, see how Agent Insider Threat Detection, part of CrowdStrike's Agentic SOC, uncovers a compromised AI agent operating inside the enterprise.
What begins as a routine code review quickly turns into a coordinated attack. A DevOps engineer's Claude Code agent spawns multiple subagents, accesses sensitive secrets, steals credentials, and attempts to exfiltrate data, all without the user's knowledge.
The investigation reveals the real threat: a poisoned MCP server update containing hidden malicious instructions.
Watch how CrowdStrike connects activity across AI agents, identities, and endpoints to uncover the attack, distinguish legitimate user intent from malicious agent behavior, and coordinate response using Falcon Guardian, Falcon Intelligence, and AI-powered security experts.
The insider wasn't the employee. It was the AI agent acting on her behalf.
Discover how CrowdStrike is securing the agentic enterprise by protecting not just users, but the AI agents operating on their behalf.
🔍 Agentic SOC | CrowdStrike
Learn more here: https://cs.link/uuxyG
📣 Connect With Us:
► X:
https://twitter.com/CrowdStrike
► Instagram:
https://www.instagram.com/crowdstrike
► LinkedIn:
https://www.linkedin.com/company/crowdstrike
🔔 Subscribe to stay updated!
#CrowdStrike #Cybersecurity