CrowdStrike used RSAC 2026 to push Falcon Next-Gen SIEM deeper into Microsoft-centric environments, announcing that the platform can now ingest and

Security Boulevard is a leading cybersecurity news and information portal, offering articles, analysis, and insights on cybersecurity threats, vulnerabilities, and best practices. From the latest trends in cyber threats to expert commentary on security technologies and compliance frameworks, Security Boulevard provides resources for security professionals, IT leaders, and business executives seeking to protect their organizations from cyber attacks and data breaches.

Security Boulevard

CrowdStrike announced at RSAC 2026 that Falcon Next-Gen SIEM can now ingest and correlate Microsoft Defender for Endpoint telemetry without deploying additional sensors, making it easier for Microsoft-centric organizations to adopt the platform. New capabilities include native Falcon Onum integration promising 5x faster streaming, 50% lower storage costs, and 70% faster incident response. Additional features include Federated Search across distributed data stores, Third-Party Indicator Management for external IOCs, and a Query Translation Agent that automatically converts legacy SIEM queries (including Splunk) into CrowdStrike Query Language. Falcon Next-Gen SIEM reported 75% year-over-year growth in Q4 FY26.

CrowdStrike Adds Microsoft Defender Support to Falcon Next-Gen SIEM at RSAC 2026