Commvault Adds Cyber Recovery to CrowdStrike Charlotte SOAR

The connector embeds specific resilience capabilities into automated security playbooks. Security operators gain the ability to restrict access within Commvault to block unauthorized changes during an incident and automatically suspend data aging policies. This ensures that viable recovery points remain available even when an attack is underway.

Beyond defensive measures, the integration facilitates forensic workflows. Teams can restore potentially compromised assets into a Commvault Cleanroom environment, permitting analysis to proceed without impacting production systems. Vidya Shankaran, Field CTO at Commvault, noted that this collaboration simplifies the coordination between traditionally siloed security and recovery departments.

This announcement follows previous integrations between the two companies involving Falcon Insight XDR and Falcon Next-Gen SIEM. The new functionality is currently available for joint customers through the CrowdStrike Marketplace.