Product
CrowdStrike Falcon Data Replicator
- First Reported
- Sep 3, 2026
- Latest Reported
- Sep 3, 2026
Reported Context (1)
- followed by a privileged load, it is detectable in standard endpoint telemetry, including CrowdStrike Falcon Data Replicator (FDR) data and Windows Sysmon logging. Detection does not depend on CrowdStrike confirming Detection Guidance for Reported CrowdStrike Falcon Local Privilege-Escalation PoC
People (1)
MITRE ATT&CK (2)
Vendors (2)
Products (3)
Tools (1)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.