1. Home
  2. Endace Announces Integration with CrowdStrike Falcon Next-Gen SIEM

Endace Announces Integration with CrowdStrike Falcon Next-Gen SIEM

AUCKLAND, New Zealand and AUSTIN, Texas – August 18, 2026 – Endace today announced a new integration with CrowdStrike Falcon® Next-Gen SIEM that brings EndaceProbe™
always-on packet capture directly into the CrowdStrike Falcon® platform. The integration enables security teams to access definitive packet-level evidence within Falcon Next-Gen SIEM, accelerating investigations, improving threat hunting, and providing greater visibility across complex hybrid and multi-cloud environments.

By combining Endace's packet capture data with Falcon Next-Gen SIEM, organizations can correlate packet-level evidence with security telemetry to gain a more complete view of attacker activity and accelerate response. Falcon Next-Gen SIEM delivers up to 150x fastersearch performance than legacy SIEMs and solutions positioned as SIEM alternatives, at an 80% lower total cost of ownership.

  • Find and investigate evasive threats with AI-powered detections and rich contextual insights from Endace;
  • Accelerate deployment with streamlined Endace data onboarding and third-party automated response actions;
  • Unify SOC data and workflows to deliver superior security outcomes at lower total cost.

With the integration, security analysts can pivot directly from detections and investigations in Falcon Next-Gen SIEM to related packet data stored in EndaceProbe. This enables teams to reconstruct attack activity, validate findings with definitive network evidence, and conduct retrospective investigations to identify exposure to newly discovered threats and vulnerabilities.

"The integration between EndaceProbe and Falcon Next-Gen SIEM gives SOC teams unparalleled visibility into the network component of cyber threats," said Cary Wright, Vice President of Product at Endace. "By combining packet-level evidence with Falcon Next-Gen SIEM, organizations can investigate incidents faster, improve threat hunting, and strengthen cyber resilience."

The Endace integration is available today in the CrowdStrike Marketplace, the one-stop destination for the world-class ecosystem of CrowdStrike compatible products. To learn more about the Endace and CrowdStrike partnership, visit https://marketplace.crowdstrike.com/listings/endace-vision-data-connector/.

The Endace Fusion Partner program provides pre-built integrations between industry-leading solutions and EndaceProbe’s powerful API to give security and IT teams the reliable evidence they need to protect their networks from cyber threats and performance issues. For more information, please visit www.endace.com/fusion-partners.

Additional Resources:

About Endace

Endace’s scalable, always-on packet capture gives Network Operations and Security teams the deep visibility they need for fast, accurate incident investigation with rich forensic evidence at their fingertips from all their tools. EndaceProbes provide enterprise-class packet sniffing in on-prem, public and private cloud environments, with rapid, centralized search and one-click access to full pcap data from leading security and performance solutions (including Palo Alto Networks, Fortinet, Cisco, Splunk, Elastic, Microsoft and many others). Analyze network traffic using a single, unified console across all on-premise, private, or public cloud infrastructure for total hybrid cloud visibility. Capture every packet. See every threat. www.endace.com

For more information see www.endace.com or follow Endace on X and LinkedIn.

Contact: pr@endace.com

Latest News & Announcements

Get a demo