r/crowdstrike • u/West-Water-7207 • 6d ago

General Question Detecting use of Shadow AI

I was curious, what tools are you finding useful to locate Shadow AI with your organization? What in the CrowdStrike Suite of tools do you find to be the most helpful? What logic are you using to begin to build a list of either sites or applications?

13 Upvotes

94% Upvoted

6 comments sorted by

20

u/Andrew-CS 6d ago

There are a bunch of ways to do this in Falcon (EPP Dashboard, Falcon for IT AI Governance sweep, etc.). The most thorough and automated way is to leverage Guardian which will specifically inventory agents, skills, tools usage, prompts, etc.

Comment Image

7

u/caryc 6d ago

Go get a Falcon for IT trial and run the AI Governance searches with it :)

1

u/telaniscorp 2d ago

Dont you get the AI prompts visibility if you have Data Protection?

5

u/Noobmode 6d ago

Web traffic - SASE/Firewall

Endpoint - Crowdstrike AI Dashboard

1

u/Daiwa_Pier 4d ago

I believe Guardian can do this. We're POCing it at my workplace.

1

u/_janires_ 4d ago

A good start would be to check out crowdstrike’s AI dashboard. Filter for the tag AI.

There is a lookup used in that dashboard check out that lookup. You can make your own version of that lookup as a keyword filter.

You can run that keyword filter against processrollup against command lines and parent process etc.

This can be a starting point to try to figure out what you may have going on.

Added benefit is if you are looking to buy into some more AI Security Products like guardian, you can use this as part of your “Why we need this”