Grouse
Well-Known Member
- Joined
- Dec 2, 2020
- Messages
- 1,331
- Reaction score
- 7,480
"The problem stemmed from a Rapid Response Content update in the Falcon Sensor, CrowdStrike said on July 24. This type of update is intended to respond to fast-moving threats, and uses a Template Instance to define specific behaviors. “Due to a bug in the Content Validator, one of the two Template Instances passed validation despite containing problematic content data” on July 19, CrowdStrike wrote in a Preliminary Post-Incident Review. The Content Validator is a procedure to “perform validation checks on the content before it is published,” CrowdStrike wrote. The Template Instance passed other quality checks, but, due to the bug, an error was allowed to pass through to deployment."
CrowdStrike Says Buggy Validator Was Behind Massive Outage
CrowdStrike Says Buggy Validator Was Behind Massive Outage