CrowdStrike Analyst Interview Questions
& Process
Real candidates share what happened, how many rounds they had,
and how the experience turned out.
Based on 30 interview experiences · FREE TO READ
Candidate interview experiences
First-hand accounts from people who interviewed at CrowdStrike.
CrowdStrike
Analyst
Entry Average Negative experience No offer 3 rounds
Interview process
Recruiter call Technical screen Technical screen
Interview formats
Technical Coding
So I had this interview for a Falcon Complete Analyst role. First, there was a recruiter call which was great, they told me about the job, what they expect and the salary. Then I did a Cyber Skyline challenge, it was pretty easy. After that, I had a technical interview with two people, a Principal Analyst and a Senior Analyst. The Principal Analyst seemed really uninterested from the start, just asked questions without reacting to my answers. The Senior Analyst was really nice though. Unfortunately, I found out the next day that I didn't get the job, which is probably for the best given the Principal Analyst. I felt like I answered the questions fine.
Confirmed questions2 questions
- What's your approach if a client claims a hack occurred, but there are no console alerts?
- Describe how you'd manage a client's insistence on a hack despite a lack of console alerts.
CrowdStrike
Analyst
Mid Easy Negative experience No offer 3 rounds
Interview process
Recruiter call Technical screen Technical screen
Interview formats
Behavioral Technical Coding
Had a friend ask me to interview so I could do the CTF and see if I liked it for feedback. I thought it was decent and I didn't intend on interviewing, but the recruiter called me roughly 5 times to interview for a job that didn't meet any of my requirements. In short, I'm happy where I'm at and shouldn't have interviewed since I didn't intend on joining. The technical interview was only terrible because it started and ended with knowing we weren't going to work out because the recruiter submitted me for a job that wasn't compatible. 1. Initial interview over the phone with the recruiter completely signing you up for something you said wouldn't be a good fit 2. Technical challenge, never used Splunk and not that hard 3. technical interview over zoom 3rd interview was very general questions that I felt you could've answered a 100 ways and then a few stump the chump (tell me what this process abbreviation is without Google). The interviewers brought up job requirements that I already told the recruiter that I didn't care for and then it all went downhill from there. They also say not to mind them pausing for long periods of time. The whole process felt like a waste of time since it started with 3 of my no-gos on my job requirements.
Confirmed questions5 questions
- Are you comfortable working mostly on site and at nights?
- Tell me about a time you dealt with a difficult customer situation.
- Was the powershell command that spawned from a Word document malicious?
CrowdStrike
Analyst
Senior Difficult Positive experience Accept offer 3 rounds
Interview process
Recruiter call Technical screen Onsite
Interview formats
Technical Behavioral
The interview process was quick and efficient. I really liked the teams I met; they were likeable, approachable, and responsive. The recruiter was great, providing fast and useful feedback. The technical interviews were challenging and got progressively harder, really probing my knowledge of both Windows and Linux. All interviewers were punctual and stayed late to answer all my questions about the company.
Confirmed questions1 question
- I cannot disclose the specific questions asked, but you should be able to answer them using your existing professional knowledge and expertise.
CrowdStrike Analyst Interview Questions
Quoted word for word from CrowdStrike interview reports.
“Was the powershell command that spawned from a Word document malicious?”
Read reports →“Where can I find the Window Event logs?”
Read reports →“Can you list the known logon types and the event IDs for failed authentications?”
Read reports →“What logon type code is associated with TeamViewer?”
Read reports →“What are the main Window Event Codes used for investigations?”
Read report →“How would you detect a malicious file?”
Read report →“Can you identify a user from the log file exhibiting abnormal behavior?”
Read report →“Can you discuss intrusion detection techniques and potential adversary methods?”
Read report →“Could you discuss how critical threat intelligence is for current cybersecurity operations and outline CrowdStrike's methods for incorporating it into their offerings?”
Read report →Formats, difficulty and experience
Across all 30 CrowdStrike interview reports.