Item: CrowdStrike Falcon
Rating: 8
Author: Itumeleng Thekiso

Use Cases and Deployment Scope

We use CrowdStrike Falcon as an endpoint sensor to detect vulnerabilities throughout our organizations endpoints, in this day and age vulnerabilities come in all shapes and sizes from all different kinds of directions bet it from; an e-mail that contains a malicious link, an infected file you unintensionally downloaded from the web, existing programs with old or new vulnerabilities that are installed on our endpoints etc.CrowdStrike Falcon really addresses these issues on a wider proportion making sure we stay up to date with new CVEs and that our endpoints are secured.

Pros and Cons

Host machine vulnerability detection
Threat mitigation
Activity monitoring
Constantly releases alerts or notifications
Behavourial analytics

Endpoint manual scan
Malware analysis needs improving
Requires some level of expertise to use its features

Return on Investment

More endpoint security
A secure network
Less attack surface

Consolidation of Tools

We generally use a multitude of tools and do not solely rely on a single product like CrowdStrike, we use this product injunction with various other security tools to minimize the threat attack surface overall.

Our tech stack is rather layered to say the least, it is better than to rely on a singular product.

Breadth of Solutions

We are now able to focus less on endpoint security and actually widen our security scope by deploying more security tools to our network that aren't centered towards endpoints.
CrowdStrike Falcon's has provided us with the opportunity to integrate our security team into different clusters i.e. not one cluster handling a single product like CrowdStrike but a multitude of clusters handling different security tools.

Innovative Uses

Creating custom dashboards
Creating custom alerts
Zeroing-in specific CVEs/Vulnerabilities

Key Insights

Do you think CrowdStrike Falcon delivers good value for the price?

Yes

Are you happy with CrowdStrike Falcon's feature set?

Yes

Did CrowdStrike Falcon live up to sales and marketing promises?

I wasn't involved with the selection/purchase process

Did implementation of CrowdStrike Falcon go as expected?

I wasn't involved with the implementation phase

Would you buy CrowdStrike Falcon again?

Yes

Other Software Used

Automox

Likelihood to Recommend

CrowdStrike is really a wide reaching EDR solution for very large organizations, it makes economical sense to deploy CrowdStrike Falcon if your organization has a large endpoint footprint, threat hunting is 24/7 so meaning if most of the security team is on holiday CrowdStrike is able to mitigate a lot of threats without the help of the security team essentially and it also does send out alerts if necessary.

However, CrowdStrike isn't your typical anti-virus solution it does not provide you with the ability to control it manually like you would with some products out there.

Lightweight yet Robust Security Solution

Software Version

Modules Used

Overall Satisfaction with CrowdStrike Falcon