Microsoft (MSFT, Financial) and CrowdStrike (CRWD) have announced a partnership aimed at improving the identification and tracking of cyber threat actors across different security platforms. This collaboration focuses on aligning attacker attribution by mapping aliases of network threat actors, thereby reducing confusion caused by varying naming systems and speeding up responses to complex attacks.
The companies have developed a shared cyber threat intelligence mapping system that connects attacker identifiers across different vendor ecosystems without enforcing a single naming standard. This system reduces the ambiguity of attacker labels, enabling defenders to make faster and more confident decisions.
Adam Meyers, Head of Counter-Adversary Operations at CrowdStrike, emphasized the importance of staying ahead of attackers who exploit technical and naming inconsistencies. The collaboration has already achieved success in de-duplicating over 80 attackers, streamlining coordination between CrowdStrike and Microsoft's threat research teams.
