The 2024 IT Outage
In July 2024, CrowdStrike, a global cybersecurity provider known for its Falcon platform, caused a major crisis in IT that affected hundreds of global enterprises and echoed throughout the world for weeks. CrowdStrike's platform is an endpoint detection and response (EDR) solution that enables enterprises to monitor their systems for potential malicious activity associated with cyber-attacks and threats such as malware or ransomware.
It is one of the most highly-regarded EDR solutions available today and is widely used on enterprise systems running Windows OS, including at some of the world's largest corporations. The success of the platform is in no small part due to its ability to update its security configurations dynamically, as this enables it to respond to emerging threats and provide more comprehensive protection against them.
As part of its update support, on July 19, 2024, CrowdStrike released a new sensor configuration update for its Falcon security platform. The update was designed specifically to provide added protection against the exploitation of named pipe executions, which threat actors have been using to facilitate persistent stealth attacks on targets. Unfortunately, however, the release of this configuration update was swiftly followed by a major outage, affecting millions of users worldwide.
Background on the CrowdStrike Outage Incident
In the midst of this crisis, Salvador Technologies had a pivotal role to play in helping customers to recover. By leveraging the air-gap concept, our clients were able to activate secured backups that seamlessly replaced the original disk. This solution offered an alternative for the system to swiftly boot up, ensuring uninterrupted operational continuity.
Our solution provides unmatched value:
-
Secured Operational Continuity
-
Full visibility of the operation
-
Easy Deployment, secured machines with no IT team dependency
See it in action:
A Recovery Solution for Windows IT Outage (BSoD)
With our Blue Screen (BSoD) Recovery solution, our customers were able to significantly accelerate the recovery process to fully restore the functionality of their systems within just 30 seconds. This enabled them to get up and running again almost immediately so as to minimize downtime and secure operational continuity. Customers were also able to deploy our solution easily with no IT dependency, which enabled them to secure their devices more quickly.
In conjunction with our recovery solution, we advise conducting regular restoration tests. This will help to guarantee effective system recovery in the event of a cyber incident or a future event like this case of IT outage.
