CrowdStrike Falcon® streams endpoint activity data to the cloud in real time. This makes the data available for administrators to search at any time, even if some endpoints are powered off or offline when the search is conducted. The speed of the CrowdStrike Threat Graph gives you five second visibility across your environment for both real-time and historical events.