CrowdStrike Falcon® Sandbox defeats even the most evasive malware by running in the kernel and using sophisticated sandbox techniques that make it nearly undetectable. It exposes the most advanced targeted attacks, going beyond common static and dynamic file analysis to monitor all malicious behavior and system interaction. This allows Falcon Sandbox to deliver the most extensive set of indicators of compromise (IOCs) in the industry.