Anomali ThreatStream vs CrowdStrike Falcon

• Fantastic UI
• STAXXX for sharing intelligence
• Threat Intelligence feeds
• Automation and collaboration cuts work down for the analysts

Read full review

• Ransomware protection. We ran a ransomware simulation with obfuscated executables to hide malware signatures and CrowdStrike found and stopped 15 out of 15.
• Malware/adware detection. Packaged adware in official installers are instantly blocked without interfering with the install of the primary application.

Read full review

• We get false positive detections when we run an email signature script for our users. These false positives can be a distraction. We've implemented a whitelist for those behaviors, but had some difficulty in figuring out how to configure CrowdStrike to recognize these executions since the file name and hash were always different (the executing file was firstname_lastname.exe, and that was too Vague to whitelist.

Read full review

• After the Initial startup cost, it has overall had a positive impact by increasing efficiency of the team and freeing up analysts to do manual threat hunting

Read full review

• It doesn't cover legacy systems.
• An update stopped a critical service that took about 5 hours restart; investigations are still happening.
• Mobile compatibility arrived too late and the integration wouldn't be as robust as the main MDM solution. It didn't meet the requirements.

Read full review