55: CrowdStrike

Causality

On Friday the 19th of July, 2024 millions of CrowdStrike Falcon Agents the world over would lead to a Windows system crash on business machines throwing parts of the world into chaos. We look into exactly what caused it and how complacency and a lack of understanding amplified the effect of this wholly preventable incident.
With John Chidgey.
About Causality (TV):

• Introducing Causality TV
• Causality TV Episode 1: CrowdStrike (Video Release)

Formal Report:

• Falcon Content Update Preliminary Post Incident Report
• Channel File 291 Incident Root Cause Analysis (PDF)

News Releases and Articles:

• CrowdStrike releases root cause analysis of the global Microsoft breakdown
• CrowdStrike Senior Executive Adam Meyers faces CyberSecurity Committee
• CrowdStrike exec apologises before US Congress for software glitch behind July global outage | Reuters
• 1 In 10 Orgs Dumping Their Security Vendors After CrowdStrike Outage

General Information:

• CrowdStrike
• 2024 CrowdStrike incident
• What is CrowdStrike?
• Falcon Content Update Remediation and Guidance Hub
• Antivirus XML Configuration File for CrowdStrike Falcon Sensor
• Named Pipes
• Pipes (Interprocess Communications)
• Wildcard character

Support Causality on Patreon
Episode Gold Producers: 'r', Steven Bridle and Kellen Frodelius-Fujimoto.
Episode Silver Producers: Mitch Biegler, Shane O'Neill, Jared Roman, Katharina Will, Chad Juehring and Ian Gallagher.