What happened
On Oct 30 CrowdStrike extended Falcon Adversary OverWatch Cross-Domain to provide 24/7 proactive threat hunting for AI applications and autonomous-agent activity monitored by Falcon Guardian, and added Falcon Complete for Falcon Guardian — expert-led managed detection and response for AI coding assistants and agents using Agent Graph to connect agent activity to downstream endpoint execution. It also extended telemetry-driven cloud hunting to Google Cloud alongside AWS and Azure.
Why it matters
It is among the first large-vendor managed services that apply human hunters and MDR specifically to the agentic AI surface, tying AI activity to endpoint execution; CrowdStrike cites AI agents triggering 2.5x more detection leads than human activity, so this addresses the analyst-capacity gap.
Applicability
SOC / threat-hunting teams on Falcon; valuable where detection alone misses manipulation or abuse of AI tools and where cloud coverage spans AWS, Azure and GCP.