rootpwn

Endpoint Security & XDR

CrowdStrike Introduces On-Device AI for Real‑Time Data Classification

CrowdStrike has added a new on‑device AI capability to Falcon Data Security, enabling real‑time classification of sensitive data using language models on Intel‑powered hardware. The feature helps defenders reduce data exposure and streamline DLP policies.

CrowdStrike has rolled out a new on‑device AI feature within Falcon Data Security that classifies sensitive data in real time. The capability uses language models that run locally on Intel‑designed AI accelerators, eliminating the need to send data to external services.

What Happened

The update expands Falcon Data Security to include on‑device natural‑language processing for data classification. The feature was developed in partnership with Intel and is available in the latest Falcon agent releases.

Impact on Defenders

  • Real‑time classification reduces the window for data exfiltration.
  • Local processing preserves privacy and lowers network load.
  • Classification results feed directly into Falcon’s DLP and policy engine.

How to Enable

  • Upgrade to Falcon agent version 10.3 or newer.
  • Enable the “Data Classification” setting in the Falcon console.
  • Verify that the Intel AI accelerator is detected in the agent logs.
  • Review classification reports and adjust sensitivity thresholds as needed.

Next Steps

Integrate the classification output with existing DLP rules and monitor for false positives. Consider combining the feature with Falcon Secure Access for zero‑trust data handling.

CrowdStrike Falcon Data Security on-device AI data classification Intel

← All news