CrowdStrike
- Aliases / services
- CrowdStrike / CrowdStrike, Inc. / CrowdStrike Falcon / Falcon Exposure Management / Falcon Next-Gen SIEM / LogScale / crowdstrike.com
- Official website
- https://www.crowdstrike.com
Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.
Response status by service
Listed services and systems
- Response status
- Falcon detection and PHP assessment documented
- Response information checked
- 2026-10-27 Rechecked: 2026-10-27
Endpoint protection, exposure management and SIEM.
Existing Falcon IOAs detect and prevent post-exploitation activity. Standard Exposure Management package and targeted-application checks have no minimum sensor requirement; additional PHP discovery requires Windows 7.40+ or Linux 7.31+. Next-Gen SIEM dashboards and correlation rules are also available.
Scope: Additional checks find PHP executables on the default Windows drive and Linux PHP processes installed outside package managers. Earlier sensors retain existing checks. Detection does not replace PHP patching.
What users should do
Check sensor versions, inspect PHP assets in Exposure Management, patch affected installations and review related alerts.
Official service URL
Source URLs
- PHP2Shell response and scopehttps://www.crowdstrike.com/en-us/blog/crowdstrike-protects-customers-from-php-rce-zero-days/Response evidence
- Operating entityhttps://www.crowdstrike.com/en-us/legal/privacy-notice/Service and operation documentation
Related official sources
- PHP2Shell response and scopeOfficial notice
- Operating entityOfficial information directory
Comments