CrowdStrike Falcon vs Tanium

• Ransomware protection. We ran a ransomware simulation with obfuscated executables to hide malware signatures and CrowdStrike found and stopped 15 out of 15.
• Malware/adware detection. Packaged adware in official installers are instantly blocked without interfering with the install of the primary application.

Read full review

• Tanium helps in identifying a list of infected machines with any vulnerabilities. For example if we create a package with list of Windows vulnerabilities, it will push the package through its sensors to all the nodes, and trace out the infected machines in our organization.
• It helps in adding IOC's which helps us in track down the hashes or shah files existing with that IOC 's machines.
• The most impressive thing about Tanium is that it can quarantine the machine of our choice without connecting to the network, which really helps a lot of times in containment of any infected machines.

Read full review

• We get false positive detections when we run an email signature script for our users. These false positives can be a distraction. We've implemented a whitelist for those behaviors, but had some difficulty in figuring out how to configure CrowdStrike to recognize these executions since the file name and hash were always different (the executing file was firstname_lastname.exe, and that was too Vague to whitelist.

Read full review

• One issue is its ring topology, as the data is stored in central hubs and pushed through its peer nodes. If the central hub fails, then the associated node will also result in failure.
• Another problem is that all Tanium management is on premises requiring the customer to maintain it. If we want ask any help from Tanium support we always get a response like "you are maintaining it yourselves and it's your responsibility.
• The Tanium User Interface could be improved a bit as, although the tool is rich in performance, a more impressive UI might really attract new customers.

Read full review

• CrowdStrike has cut our security costs.
• Has given us more insight into our end points.
• It has helped with our older PC's CPU usage.
• Cut our cost and time from managing multiple platforms down to managing one platform with better insight than what we had with multiple security platforms.

Read full review

• Adding the IOC 's tracing infected machines, and removing unwanted applications quickly.
• Quarantine the infected machine from the network in order to prevent it from causing damage or infecting other machines.
• The user interface could be improved.

Read full review