Item: CrowdStrike Falcon
Rating: 9
Author: Verified User

Use Cases and Deployment Scope

It is used within the wholesale division on all the servers and desktops. It is used as a next-generation endpoint detection and response tool. We intend to catch any behavioral anomalies posed by advanced malware that may be missed by signature-based AV. It's a ransomware detection and prevention tool.

Pros and Cons

Behavioral Detection
Ransomware Prevention
Always on Cloud connectivity for new pattern detections
Low maintenance

High network bandwidth usage occasionally
Infrequent false positives

Return on Investment

Good Value for Money
Smaller footprint
Faster Response
Good Support

Alternatives Considered

Trend Micro Smart Protection Suite and with XGen

Ease of use and proven track record led to adoption of CrowdStrike over others. No complaints from support of business teams so far with the use of this tool. The facility to remote contain the host has saved cycles for both SOC and the platform support teams. The cloud updates and policy management is a plus apart from exceptional customer support.

Products Replaced

Introduction to CrowdStrike

RFI

Likelihood to Recommend

It's a good augmentation tool for malware protection. The detection rate and success are pretty high. Able to catch almost 90% anomalies. The cloud updates make it simple to manage and update the policies. The agent/client footprint is small on the endpoints and takes fewer resources. It can be seen utilizing network bandwidth though due to the continuous data reading from the endpoints.

World class end point detection and response tool is undoubtedly CrowdStrike

Software Version

Modules Used

Overall Satisfaction with CrowdStrike Falcon Endpoint Protection