Item: CrowdStrike Falcon
Rating: 8
Author: Verified User

Use Cases and Deployment Scope

Crowdstrike Falcon is one of the leading NG-AV endpoint detection platforms in the market which is always up to date with the emerging threats. We use Crowdstrike Falcon to give MDR services to many of our customers. It helps to prevent, block all types of Cyber-attacks and also helps to get the detailed overview of the attack. It is very user friendly in access and management.

Pros and Cons

The Log analysis is very detailed and easy to use.
Prevent and block all type of malwares.
Great threat intelligence which is very up-to-date with the recent cyber attacks
very user friendly in access and management
Automated feature of detecting, taking action and closing incidents using fusion workflow.

The False positive alerts can be minimized
The UI can be made better and easy to access.
Customer support can be made better

Return on Investment

Helps to detect and prevent attacks automatically and saves time.
Up-to-date with the emerging cyber threats and helps in preventing them
Very easy to use and deploy.

Consolidation of Tools

Able to remove other antivirus on the hosts which were used for scanning.

It helps to work with a single EDR solution and saves the resources of another antivirus.

Breadth of Solutions

All the different services given by crowdstrike under one EDR solution helps to limit using different tools for that. It has become easier to manage all the services under one solution. It helps to intergrate easily with the SIEM solutions as well.

Innovative Uses

The fusion workflow helps to automate detection and prevention of the known PUP/Adwares which helps to save time.
The remote shell option helps to connect to the host quickly which helps to find important and vital information.

Alternatives Considered

SentinelOne Singularity, VMware Carbon Black EDR and Microsoft Defender for Endpoint

The logs analysis is very easy to use as it uses splunk in the backend. The automated SOAR features helps to save time and response on the incidents. The threat intelligence is very up-to-date with the recent cyber attacks.

Key Insights

Do you think CrowdStrike Falcon delivers good value for the price?

Yes

Are you happy with CrowdStrike Falcon's feature set?

Yes

Did CrowdStrike Falcon live up to sales and marketing promises?

Yes

Did implementation of CrowdStrike Falcon go as expected?

Yes

Would you buy CrowdStrike Falcon again?

Yes

Other Software Used

Microsoft Defender for Endpoint, VMware Carbon Black EDR, LogRhythm NextGen SIEM Platform, Microsoft Sentinel, AlienVault USM, Darktrace

Likelihood to Recommend

It helps to detect and prevent malwares automatically which saves the response time to act. The machine learning and AI feature which helps to detect unusual behavioural based malwares which use defence evasion techniques. The fusion workflow feature which helps to automate the detection and blocking of less important files such as PUP/Adwares so the focus can be on real threats. The host logs are easy to filter and use which helps to do quick incident response.

On the best automated threat protection solution

Software Version

Modules Used

Overall Satisfaction with CrowdStrike Falcon