https://www.reddit.com/r/crowdstrike/comments/1e6vmkf/comment/ldw1yxe/
Sysadmins could not have prevented it.