Item: CrowdStrike Falcon
Rating: 7
Author: Verified User

Use Cases and Deployment Scope

CrowdStrike is used for endpoint detection and response capability as part of our standard operating system. This ensures that anomalous activity on end user compute devices is detected and arrested before it can propogate and impact the network. Further, it allows for investigtion and response by providing a detailed map of activity to isolate, understand and identify affected systems.

Pros and Cons

Detecting suspect activity at the endpoint
Stopping potentially damaging network activity by isolating an endpoint
Tracing activity throughout the network to assist with investigation and remediation

Limitations in ability to make detailed rulesets to address edge cases
False positives continue to be an issue
Can be noisy leading to alert fatigue

Return on Investment

Day to day management of endpoint protection has reduced
False positives have increased

Consolidation of Tools

CrowdStrike has only replaced our previous endpoint protection solution

There has been no impact due to consolidation

Breadth of Solutions

We are using CrowdStrike only for endpoint protection

Alternatives Considered

Trend, Symantec Endpoint Security, Bitdefender Managed Detection and Response (MDR) and Microsoft Defender for Endpoint

At the time of purchase CrowdStrike provided the best featureset and value proposition for the organisation. The cloud first nature of the product and the mix of heuristic and behaviour based detection technologies was better than anything else that we looked at.

Key Insights

Do you think CrowdStrike Falcon delivers good value for the price?

Yes

Are you happy with CrowdStrike Falcon's feature set?

Yes

Did CrowdStrike Falcon live up to sales and marketing promises?

Yes

Did implementation of CrowdStrike Falcon go as expected?

Yes

Would you buy CrowdStrike Falcon again?

Yes

Likelihood to Recommend

The solution is relatively good as a set and forget, particularly if being operated by a small team. Similarly, the system will allow for a level of active monitoring and integrating into MSSP services; however there is a point at which the level of sophistication drops off, especially when heading down a path of automated response, etc.

Great all round endpoint protection solution

Software Version

Overall Satisfaction with CrowdStrike Falcon