The Architecture of Agentic Defense: Inside the Falcon Platform

This document introduces Charlotte AI expert agents on the Falcon platform, detailing how they leverage a unified Enterprise Graph to deliver deterministic, explainable reasoning for detection triage, guided investigation, natural language search, malware analysis, promptbooks, and workflow automation. By correlating telemetry across endpoints, identities, vulnerabilities, and threat intelligence via Asset, Intel, Threat, and Risk Graphs alongside Falcon LogScale, the agents assign risk scores and execute consistent, policy-enforced responses at scale, reducing manual variance and improving prioritization across environments.