How might CrowdStrike evolve its Falcon Identity Protection to offer stronger defense against credential-based attacks?

Introduction

To evolve CrowdStrike's Falcon Identity Protection for stronger defense against credential-based attacks, we need to analyze the current product, identify key pain points, and develop innovative solutions. I'll approach this by examining user segments, analyzing pain points, generating solutions, and proposing metrics for success.

Step 1

Clarifying Questions (5 mins)

• Looking at the product context, I'm thinking Falcon Identity Protection might be targeting enterprise-level customers with complex identity management needs. Could you confirm the primary target audience and their key use cases?

Why it matters: Determines the scope and complexity of solutions we'll propose Expected answer: Large enterprises with distributed workforces and multi-cloud environments Impact on approach: Would focus on scalability and integration capabilities

• Considering user behavior, I'm curious about the current adoption rate of multi-factor authentication (MFA) among Falcon Identity Protection users. What percentage of users have enabled MFA, and what are the most common MFA methods in use?

Why it matters: Helps identify potential gaps in current security measures Expected answer: 70% adoption rate, with push notifications and time-based one-time passwords (TOTP) being most common Impact on approach: Would influence whether to focus on increasing MFA adoption or enhancing existing MFA methods

• Regarding product lifecycle and company alignment, where does Falcon Identity Protection sit in terms of priority within CrowdStrike's overall product portfolio? Are there any specific growth targets or strategic initiatives tied to this product?

Why it matters: Helps align our proposed improvements with broader company goals Expected answer: High priority product with targets to increase market share by 20% in the next fiscal year Impact on approach: Would focus on differentiating features and competitive advantages

• Considering external factors, how has the rise of remote work and increased cloud adoption impacted the threat landscape for credential-based attacks? Are there any emerging attack vectors or techniques we should be particularly concerned about?

Why it matters: Ensures our solutions address the most current and pressing security challenges Expected answer: Significant increase in phishing attacks and credential stuffing attempts targeting remote workers Impact on approach: Would prioritize solutions that address these specific threat vectors