External reviews
External reviews are not included in the AWS star rating for the product.
Crowd strike falcon review
What do you like best about the product?
The crowdstrike is very proactive in its detections and as it is highly structured with Machine learning and artificial intelligence,it has high detection rate compared to regular endpoint security solutions
What do you dislike about the product?
I don't think there is much to dislike in crowd strike,I have found it very useful so far but little problem with falcon ML detection related fps
What problems is the product solving and how is that benefiting you?
We are actively monitoring our infrastructure with crowd strike and it is easy to contain machines and separate them from network, the behavioural based detections are top notch.
- Leave a Comment |
- Mark review as helpful
Crowdstike Falcon: EDR and Threat Detector
What do you like best about the product?
Crowdstike is a next generation cloud based end point protection platform and a market leader in the cyber security space which secures end points in a variety of ways by providing end point detection and response services, anti-virus, threat detection that helps SOC teams to detect, investigate and respond sooner before any malicious artefacts becomes wide spread.
CS Falcon does not scan your endpoints, data, emails or websites like other AV solutions in the market, it analyzes the behaviors which should suffice the requirement however there are options to initiate manual scans for reporting and audit purposes.
One other thing about Crowdstrike Falcon is it's a light weight agent which can autouograde it self with out needing manual intervention.
CS Falcon does not scan your endpoints, data, emails or websites like other AV solutions in the market, it analyzes the behaviors which should suffice the requirement however there are options to initiate manual scans for reporting and audit purposes.
One other thing about Crowdstrike Falcon is it's a light weight agent which can autouograde it self with out needing manual intervention.
What do you dislike about the product?
Crowdstrike is expensive, technical support should be improved, adding any AV exclusions on the CS side cannot be easily verifyable from the endpoints and event logging on the endpoints is also limited unless one has console level access.
What problems is the product solving and how is that benefiting you?
In our environment we have a SOC operations team that heavily relies on Crowdstike for cyber security monitoring and incident response which other players in the market are not able to provide at the level with which Crowdstrike operates.
the best AV - next gen
What do you like best about the product?
light weight agent, less number of false positive
What do you dislike about the product?
Process of removing duplicates could be better
What problems is the product solving and how is that benefiting you?
The EDR solution of Crowdstrike is best in the market as per me, The sandboxing and threat analysis feature reduce lot of effort for the administrators.
Crowd strike Threat Intel and other tools
What do you like best about the product?
It's dashboard and seemless performance accross diffrent operating units is the one which make it unique.
I do triage and used this product frequently in our infra and it gives much better view inside ...
Thanks team for the support...
I do triage and used this product frequently in our infra and it gives much better view inside ...
Thanks team for the support...
What do you dislike about the product?
It's version update glitch with end point software some how make more noise when there is something alredy covered in previous version let's say big fixed ...but in upcoming version those bugs pop up again .
What problems is the product solving and how is that benefiting you?
It's give superior quality and control in single dashboard.
We can review and take action on same time and it's very easy to triage different things .even multiple angles of thinking we could do .
We can review and take action on same time and it's very easy to triage different things .even multiple angles of thinking we could do .
A very light sensor to protect your Endpoint
What do you like best about the product?
I like Crowdstrike because it is very light on the systems and doesn't consume too much CPU compared to other solutions, which protects your endpoint without affecting the system's efficiency. I also love the RTR feature that helps a Security admin take necessary actions when required from the backend.
What do you dislike about the product?
What I dislike about Crowdstrike is writing query to generate a report and feel few such reports can be generated using UI for people not good at query
What problems is the product solving and how is that benefiting you?
The best part about Crowdstrike is its ability to stop the potentially risky execution of files by using behavioural analysis. For us Crowdstrike is saviour from all kind of malicious activity that can hamper the environment
A lightweight endpoint protection tool with instant threat mitigation
What do you like best about the product?
It is a robust cloud-based endpoint protection tool that offers excellent features and protects our data from unknown threats. It is a lightweight endpoint security tool that doesn't affect the endpoint performance and smoothly runs in the background process. It provides real-time protection and takes instant action on unidentified malware mitigation. Overall, It is a trusted and intuitive solution for our organization that helps to share and access data with zero vulnerability.
What do you dislike about the product?
The user interface is tricky, and challenging to understand all the inbuilt features. I think UI can be better, which helps in a seamless navigation experience.
What problems is the product solving and how is that benefiting you?
First, It doesn't affect the endpoint devices' performance, and it is a cloud service that can efficiently operate in low configured endpoint devices. It saves our cost on highly configured devices and delivers 100% protection from all unknown threats.
Crowd strike Complete-Falcon best enterprise endpoint solution across world
What do you like best about the product?
MDM Integration and support in all platforms like Win, MAC and Linux. Global SaaS platform. Next-Gen Protection.
What do you dislike about the product?
When installed in the lower configuration of laptops, laptops become slower.
What problems is the product solving and how is that benefiting you?
MDM Integration, Next-Gen Protection, Integrated Threat Intelligence etc.
Good at blocking detections and activity but needs to improve on many features.
What do you like best about the product?
It has lots of useful features like USB blocking/logging, logging process, logs network connections/DNS requests, command line activity, and scheduled tasks. Real-Time Response is my favorite, I have used many Powershell scripts with this feature.
What do you dislike about the product?
When looking at an incident, it only shows a process tree related to the incident. In order to view the whole panorama of what was going on you need to navigate to Investigate host, which consumes more time and is slow to load. Compare that to Cisco AMP4E and they automatically give you a whole timeline of all the running processes around the time of the incident. It comes down to a 1-hour investigation vs 20 minutes compared to AMP4E.
If they could log all the processes and files on the incident page, a button that gets/quarantines the file would be useful.
Something else that needs work is the quarantine and sandbox. I see a whole list of sandbox failure logs even when manually uploaded. Generaly speaking it is very good at detecting and blocking activity but I don't understand why most files do not get quarantined. We have tuned the policies and still need to constantly do manual cleanup on the infected hosts.
If they could log all the processes and files on the incident page, a button that gets/quarantines the file would be useful.
Something else that needs work is the quarantine and sandbox. I see a whole list of sandbox failure logs even when manually uploaded. Generaly speaking it is very good at detecting and blocking activity but I don't understand why most files do not get quarantined. We have tuned the policies and still need to constantly do manual cleanup on the infected hosts.
What problems is the product solving and how is that benefiting you?
Endpoint protection. We are using Real-Time Response via the API to install other software remotely using powershell scripts.
The product provides excellent protection.
What do you like best about the product?
The av mechanism of this cloud delivered endpoint protection platform is what got me to explore this product. It provides next gen protection with its advanced protection setting.
What do you dislike about the product?
There are not much that i would say are disliking feature of this endpoint protection product. the edr could use some work as it takes time to get the logs updated.
What problems is the product solving and how is that benefiting you?
It is helping us in maintaining our company's security by detecting any malwares that have penetrated the user system. Also its feature of quarantine allows us to examine the malware and take further action to safeguard our internal network.
Malware Killer
What do you like best about the product?
Falcon Console is user friendly and it has very powerful AI & ML detection methods.
It is very accurate detection merhods.
It is very accurate detection merhods.
What do you dislike about the product?
As such no dislikes but support portal do not show tickets opened by Admin
What problems is the product solving and how is that benefiting you?
It has addressed Certificate pinning issue so it is helping to reduce non reporting & older sensors
showing 31 - 40