CrowdStrike Charlotte AI

Charlotte AI is CrowdStrike's generative AI security assistant built into the Falcon platform. It allows security analysts to investigate threats, understand vulnerabilities, and respond to incidents using natural language queries instead of complex query languages. Ask Charlotte questions like 'Am I impacted by the latest vulnerability?' or 'Show me suspicious lateral movement in the last 24 hours' and it translates your intent into platform actions, returning results with context and recommended next steps. This reduces investigation time from hours to minutes. Charlotte AI is trained on CrowdStrike's massive threat intelligence dataset — trillions of security events from millions of endpoints worldwide. It understands attacker tactics, techniques, and procedures (TTPs) and can correlate disparate signals into coherent attack narratives. The AI assists with threat hunting, incident response, policy creation, and security posture assessment.