 Okay, welcome back everyone, theCUBE's live coverage of RSA Conference 2023 in Moscone. I'm John Furrier, host of theCUBE Day Two. Kind of feels like Day One was yesterday, but this is Day Two, full program. It's packed, events are back, steady state, got two great guests, Yavish Trong as the Senior Vice President of Customer Experience at Cribble, thanks for coming on. Congratulations, and Daniel Bernard, Chief Business Officer at CrowdStrike, good to see you guys. Thanks for coming on. So Cribble, CrowdStrike, partnership, we got some news, let's get that out of the gate. Let's hear the news. Sure, well, what's going on in the market is a lot of our customers, they're on this XDR journey. How do I bring data into the platform? How do I use CrowdStrike for everything? Not just security use cases, DevOps use cases as well. And bringing data in with Cribble just is so much easier, so much faster. Bringing data in was a big struggle. Even working with Cribble a long time, they're a Falcon Fund company, made an investment in them about a year and a half ago, and they've really emerged as a leader in the market in terms of this data transit. And bringing data in with Cribble via our CrowdStream product, it's never been easier, it's never been faster, and it's fully integrated. Yeah, super, we've just been working together a long time, as you mentioned, really helping CrowdStrike EDR customers get their data into legacy sims, and now with CrowdStream, we have a much easier way to get data into the CrowdStrike Falcon. You know, what I love about the news is that this is an example of where this market is right now. You have the explosion of new approaches and demand for the data, and it's got to be scalable and extensible and reliable and easy to use, and this is like now the new table stakes and the pressure's on, so you guys bring that new product to the table. What made this work? What was the reason? Were you guys partnering? Can you expand on the relationship? Sure, I think some of the best partnerships, they actually start organically, and so if you look at the way data is moving and where it was moving, Falcon platform, EDR data, very voluminous data, 70% of the data that we'd see in legacy sim products was coming from CrowdStrike. How was it getting to these sim products? It was going to be a Cribble, so it was really easy for us to listen to our customers and see this demand for the Cribble technology, the differentiation in this observability pipeline, and for us to help route that right here into the data destination, which is our log scale product in the Falcon XDR platform. Yeah, we share a lot of customers in common already, and it was interesting seeing that grow from the field, and then even as they were starting to look at log scale and the opportunity that they have with that product, and to hear them go, well, can you help us move data into this product? And so we built a pack, made it really easy to move data over, and of course that turned into, well, how do we get that inside the CrowdStrike interface to make it even easier for customers to- Take us to how it works, because this is a big deal. I think, again, I've talked to the founders of the Cribble many times when they started, they just build products, and then they, what's your go-to-one? We just go to customers, they got a problem, we just build it for them, they see that we're going together. And now you've got data's large scale, the plumbing's there. Talk about how it works with CrowdStrike so people can understand the connections. Sure, so it starts like this, and we're going to do it live so you see what a customer experience is. You log into our platform, there's a button. It says CrowdStream powered by Cribble. You click the button, and that starts your data journey of bringing the data in. That's where Cribble comes into play. Yeah, and so customers can choose, we have a very easy and intuitive interface with 1,000 integrations for all the different source types that they might have, and it allows us to, for customers, just to immediately go, what sources am I interested in moving into the Falcon Log Scale platform? And then, just literally drag and drop and say, send it to Log Scale now, and we'll automatically process, parse it, forward it, and then format it in the right way so we can land it there. That's so easy, we're done. I mean, okay, that's a wrap, guys. I mean, that's kind of the way it's supposed to be. Okay, what's the impact of customers? Are you guys going to go to market together? Talk about the relations. What's the plans? Sure, so we're going to market together, but what makes this really, really wonderful for our customers, we've got over 26,000 customers, and great for Cribble is, we make it so easy. Like you said, what's the big barrier to XDR? The big barrier to XDR is, okay, you got the CrowdStrike data, that's endpoint, that's cloud, that's workload, that's identity. Explain XDR real quick before. Sure, so XDR, it really starts with where we were with EDR, endpoint detection and response, and CrowdStrike, pioneer, created, owns the EDR category. Endpoint, you want to do prevention, detection and response. So the D in the R is detection and response. How do you keep an endpoint safe? Today, that's EDR. Enterprises are sitting there saying, wait, we want to do it beyond the endpoint. We want this protection layer, this visibility layer across everything. And that's where we start getting into data that in attack surfaces that aren't CrowdStrike, and that's where the X comes in, extended detection and response. So if you're trying to move to XDR, it really becomes more of a data-based, a data-defined problem. How do you get the visibility over the data? How do you bring it to one place? And we are the one place, and in order to be the one place, we need to make data in really, really easy. Well, first of all, I want to say congratulations to CrowdStrike. We follow a lot of the public stock metrics. Dave does, like you read about, Dave's much more on that. But the metrics are all doing great on the business side, so congratulations. This, working with other companies, has become a connection business. We're APIs in the cloud. Data connects to data. People are working together. Clean rooms are being discussed everywhere you talk about. So this is like a connector on steroids, it seems like. Is that what I'm saying? A little bit. I mean, at the heart of it, Cribble is an integrations company. And so what we spend our time and attention is on, where is all of the data? And then how do we get it to the various destinations? And in this case, specifically log scale, but really we were formed to help customers overcome this problem. Data is growing in a 25% cagger. That means in five years, you're going to have 250% more data than you have today. And a lot of it's coming from EDR, if we're being quite honest, as you said, 60 to 70%. And so how do you get in front of that? Make sure that you can put it where it needs to go. And then once you have that, as the gravity that comes with that amount of data, how do you get your other data in there? Where's your firewall data? Where are inputs from other parts of the business that you can use to solve problems? It's like filling up the gas tank. You just go pump it in. So what's the use case? What's the driver here? More visibility and some more data for all those solutions you guys are driving? Is the customers saying, I have bespoke data, they have a tool, they're replacing something. What's the driver? What's the motivation behind the connection? So the number one driver for what we do, we want to stop the breach. And you stop the breach by having the right data set at the right time and being able to action the data in real time. So the log scale product, instant search capability, long-term data retention, and it's quite affordable and efficient to do that, which everybody in this market's looking for, the affordable and efficient button. But zooming out a little bit, I think what we hear from customers is a lot of pain points around legacy SIM products. It's too expensive, it takes too many people to operate, getting data in, getting data out, too difficult. And frankly, that's a lot of the reasons why Cribble was created in the first place as well. There's got to be a better way. So I think we're going to see that whole SIM market evolve in a very material way, as XDR and SIM really collide. And that creates a lot of opportunities for customers to have a more efficient way to do security and beyond, as well as a place to retain, store, manage, search, all these different things they want to do. Keep an eye on the data, it's awesome. I want to talk about the partnership again before we go into some of the observability trends. One of the big discussions this event is the collaboration between companies, not just on sharing information, but actually working together like this. Can you comment on how you see that evolving? Is it going to be, we're going to see more of that? And what's the best practice on part nine? So CrowdStrike, we're really on this EDR, this EDR to XDR transformation. And what's nice about XDR is it's a team sport. We can't do it alone. It's not just about the attack surfaces that we protect at CrowdStrike. It's also about integrating with other third party products. And hundreds of companies work with CrowdStrike. We're really becoming an ecosystem within cybersecurity, so better together. I mean, when we all work together, our customers get a better cybersecurity outcome. That's faster security. That's more simple security. And it all starts and ends with the data. And if we don't bring in the data, they don't get the result, the benefit, and the ease of operation from all these different products. More data, more skill. You can't get to full XDR without all these additional data sources. And so when we talk about partnering, we're all about choice. Customers should choose where do they want their data to go? Which tools? All of the tools that end up in an environment were chosen for a reason. We want to give them the ability to have those. And then once they've made a choice, and they said, we're buying into this XDR journey, we want this ability to do this. Well then the next step is, how easy can we make that so that they don't have to replace fleets of agents on non-crowd strength devices and tools? And we've heard so many stories, even on theCUBE from frustrated CISOs and saying, look, I'm buying these other tools, I got a lot of retro coding going on, I got a rewrite code. Parsers. Stuff breaks. I won't say, we're PG-13 here on theCUBE today, unlike yesterday. So, okay, partnerships are cool. And the somewhat observability is a hot category, continue to merge, been overfunded. We see some consolidation this market, but with more data coming in and more services being deployed for student cloud, native, and Edge, there's more need for better observability. So what's the vision do you guys see? And certainly with AI and machine learning, more code will be generated. So more code will be flooding into the networks. Who's going to observe the observability? And you get the whole AI discussion, so we're anticipating that's going to change the game of observability. What's your angle on that? So I think from a data perspective, as I mentioned, 250% more data in the next five years than you had today. And so you keep seeing this data growth, but what do you do with it? Because a lot of data, especially the telemetry data that we're focused on, which is how do we solve problems for the data that's coming from all these applications? You have a transaction online, you book a plane ticket or something. That looks like one transaction, but behind the scenes, there's hundreds of things that folks are watching. How fast did that website respond? How did my services actually work? And you'll see all of this coming and it's just constantly growing. And so what Cribble does and what observability is about is saying, that data, it may have near zero value until it is the most valuable data because something happened and you have to be able to get to it. So if you're going to stay in front of that, how do you figure out where are those nuggets of gold? What is actually valuable to you? And observability as a trend or as a market category is really about how do I ask questions of data that I didn't anticipate before because I didn't even know that data was going to be valuable until there was a problem. Yeah, if the data geeks got, if they hoard the data, they keep it around or they build products, you got to be proud of Cribble right now. It's pretty major. It's been an amazing journey. It's revolutionary. But the destinations where people are putting their data, that's what's changing too. That's where having an XDR platform that can ingest it, that can sustain it, maintain it for years, that makes it instantly available, easy to search, affordable. You get a lot more value out of the data that Abby's talking about that you didn't need until that one moment when there was a suspicious event. This team's sport angle is interesting. I want to get your thoughts. You guys have that news lately. What's update on the XDR? What's the latest in CrowdStrike? What's the momentum look like? Sure, so lots of things going on at CrowdStrike. We have 23 modules on the platform that are doing things well beyond endpoints. So helping customers secure their cloud, helping customers secure identity. That's a really hot, fast growing space in the market. Also the log scale product that we're talking about, that XDR backend, very interesting. This week we just announced Managed XDR, where it's a service wrapper that our partners deliver as well as we deliver for customers that want to operationalize and use XDR. That's integrating multiple other point products or other platforms into the CrowdStrike experience. So we're here really living and breathing this team's sport, making it a reality. We're not just talking about it, we're doing it. And the thing that you guys are doing, the numbers are obviously on the performance on the business side is great. But the industry, there's some fat that needs to be cut. And we see some areas that need to be kind of, okay, move to the side, let it go to the next level. And I think the data piece is huge. Big endorsement with CrowdStrike. Again, great relationship. Congratulations on Cribble. Thank you. And say hello to the team over there. Clinton and everybody, so, you know. Yeah, we'll do it. I know we really enjoy our time on theCUBE. You guys are awesome. And CrowdStrike, we'll see you at the event. What else is new at the company? The event coming up, put a plug in. We have Falcon coming up. That's where the security ecosystem, we're not just here at RSA. Everybody's coming all over again and doing it at Falcon, where we're becoming that defining event of security. Hundreds of our tech ISV partners, our service provider partners, our MSP partners. And of course, thousands of customers will be there too. And we'll be there too. He will be there. And on our journey to get to 26,000 customers also, we are also having our very first CribbleCon this year. So it'll be in July in Las Vegas. So, you know, this'll be the, we're hoping for hundreds. So, you know. We love to go to the original events. We've been to every DockerCon, even virtual, when they started. So maybe CribbleCon could be a nice trend, you know, present at creation. That's the big cube motto. When a first event comes out, you got to keep us in mind. We'll come over. We will talk after this show. You got to start at CribbleCon, then come to Falcon, and then we'll see you at both places. Yeah. Thanks for coming on. I appreciate it. Okay, more action. That's the news action here at RSA. This is where the game is changing. It's evolving, security's getting, I would say not a mulligan, but they're taking it to the next level as super cloud, as super apps come out, more data all happening here with CrowdStrike here at the cube. Thanks for watching. I'll be right back after this short break.