CrowdStrike and Snowflake integrate security telemetry with Snowflake data
CrowdStrike will use Falcon Next-Gen SIEM to ingest and correlate Snowflake data with security telemetry, while Falcon Onum will route telemetry natively into Snowflake and other destinations. The integration uses federated search so teams can query Snowflake data within Falcon investigations, adding context for investigations without copying or relocating underlying data and reducing data-movement friction and costs.