The Microsoft Crowdstrike Incident of 19th July 2024

Microsoft and CrowdStrike are both prominent players in the cybersecurity industry, often known for their collaboration and competitive dynamics. Here’s a brief overview of each and their relationship:

Microsoft

Microsoft is a global technology company known for its software products, cloud computing services, and enterprise solutions. In the realm of cybersecurity, Microsoft offers a suite of tools under the Microsoft Defender brand, which includes:

• Microsoft Defender for Endpoint: An endpoint detection and response (EDR) solution.
• Microsoft Defender for Identity: Provides identity protection and monitoring.
• Microsoft Defender for Office 365: Secures email and collaboration tools.
• Azure Security Center: A unified security management system for cloud environments.

CrowdStrike

CrowdStrike is a cybersecurity company specializing in endpoint protection, threat intelligence, and incident response. Their flagship product, Falcon, is a cloud-native endpoint protection platform that provides:

• Endpoint Detection and Response (EDR): Real-time threat detection and response.
• Threat Intelligence: Insights into global cyber threats.
• Managed Threat Hunting: Proactive threat hunting services.
• Incident Response: Quick and effective response to security incidents.

Collaboration and Competition

While both companies offer endpoint protection solutions, they also collaborate and integrate with each other’s platforms to enhance security capabilities. For example:

• Integration: CrowdStrike’s Falcon platform can integrate with Microsoft’s Azure to provide enhanced security monitoring and response capabilities.
• Cooperation: Both companies participate in threat intelligence sharing to improve their threat detection and response.

Key Points

• Complementary Solutions: Microsoft focuses on a broad range of security services integrated into its ecosystem, while CrowdStrike specializes in advanced threat detection and response.
• Integration: Businesses can leverage both platforms together for a comprehensive security posture.
• Competition: Despite their collaboration, they are also competitors in the endpoint protection market.

Understanding the strengths and integration possibilities of Microsoft and CrowdStrike can help organizations build a robust and layered cybersecurity strategy.

Now The Microsoft Crowdstrike Incident of 19th July 2024

On July 19, 2024, CrowdStrike experienced a significant incident when a software update to its Falcon Sensor vulnerability scanner caused widespread disruption. This update led to “blue screens of death” on millions of Microsoft Windows machines, rendering them unusable and causing major outages in various sectors, including aviation, media, banking, healthcare, and emergency services. The issue resulted in a significant drop in CrowdStrike’s stock price​​.

For further details, you can visit the official CrowdStrike events page and learn more about their activities and upcoming events​ on crowdstrike page.

Solutions or Steps to Solved the Crowdstrike attack on Windows Systems.

1. Boot windows into safe mode
2. Navigate to C:\Windows\System32\drivers\CrowdStrike directory
3. Find the file C-00000291*.sys and delete it
4. Boot the Host normally after that.

If you find it difficult to follow the procedure just copy the command and paste the hit enter.

del C:\Windows\System32\drivers\CrowdStrike\C-00000291*.sys

You’re good to go.