External reviews
External reviews are not included in the AWS star rating for the product.
Strong in the major areas, needs some work in the details.
What do you like best about the product?
The level of confidence we now have knowing that our systems are protected against a whole host malicious actions as well have actionable information at fingertips is incalculable. The new features that come out are thoughtful and useful that come out with the release schedule. The release schedule itself is not overly aggressive and so far is very stable. The intelligence module is also very helpful.
What do you dislike about the product?
The 'Spotlight" feature could use some work. Currently we are unable to search multiple hosts at once, and have not found a workaround for it yet. The Spotlight search will gather all of the host information, running process data, logons ect. The clues you would need to run an investigation are found here often. It is extremely time consuming to have to run the same search, one at a time for each host, then correlate that data for comparison. I am unfamiliar with the back end of Crowdstrike so programming the ability to input a comma delineated list to search could be very difficult. Having had some some development work as well as DBA experience, I can understand that it may not be as simple as it sounds.
What problems is the product solving and how is that benefiting you?
We replaced a few endpoint agents with Crowdstrike. Specifically we replaced Carbon Black Protect and MS SCEP. We moved from a traditional AV to an EDAR solution. An internal guideline for our organization is to reduce the number of endpoint agents deployed. The system overhead has been realized by removing the Protect application.
- Leave a Comment |
- Mark review as helpful
Falcon delivers where others have missed
What do you like best about the product?
Alerts generated in as close to real time as possible
Powerful tools that pick up on what traditional hash based protection misses
Ability to quarantine a device
Real Time Response allows you to connect to the device via command line tools
Powerful tools that pick up on what traditional hash based protection misses
Ability to quarantine a device
Real Time Response allows you to connect to the device via command line tools
What do you dislike about the product?
Currently, the biggest feature that I feel is missing in not having the ability to complete an On Demand scan
What problems is the product solving and how is that benefiting you?
This tool has saved our company from multiple Ransomware attacks.
Recommendations to others considering the product:
Crowdstrike has saved our company from numerous attacks where other traditional AV protection has failed. It is a powerful tool that delivers on what they claim that they do.
Great EDR Product
What do you like best about the product?
The UI is helpful when performing investigations.
Some other features I like from the UI:
The Hash Search page, the Host Search page, The Detections page.
The product will generally tell you: what happened, what was the source, which hosts are affected, why this detection matters, and to make it even better - all these are mapped to the MITRE ATT&CK Matrix.
This makes things easier to communicate with other analysts to understand the lifecycle or workflow of an attack, and what we can do in the future to prevent it.
Some other features I like from the UI:
The Hash Search page, the Host Search page, The Detections page.
The product will generally tell you: what happened, what was the source, which hosts are affected, why this detection matters, and to make it even better - all these are mapped to the MITRE ATT&CK Matrix.
This makes things easier to communicate with other analysts to understand the lifecycle or workflow of an attack, and what we can do in the future to prevent it.
What do you dislike about the product?
Sometimes it's hard to tell which process spawned another process in the Timeline view.
Our team does not understand the difference between a detection and an incident.
Are incidents assigned automatically? Is an incident just multiple detections from the same host? Some insight into how it chooses to create an incident for a detection vs just a detection would be great.
Our team does not understand the difference between a detection and an incident.
Are incidents assigned automatically? Is an incident just multiple detections from the same host? Some insight into how it chooses to create an incident for a detection vs just a detection would be great.
What problems is the product solving and how is that benefiting you?
The product is great for combining next-gen AV with EDR capabilities.
The problem that we're solving with CrowdStrike Falcon: Endpoint Protection is that sometimes incidents are too noisy with the detections, and often-times analysts have to log in to multiple different dashboards or products to tell a story -- what are we seeing? Which hosts are infected? Where did the malware (for example) come from? Which processes are making network connections?
All these questions and more can be answered with the Crowdstrike console.
The problem that we're solving with CrowdStrike Falcon: Endpoint Protection is that sometimes incidents are too noisy with the detections, and often-times analysts have to log in to multiple different dashboards or products to tell a story -- what are we seeing? Which hosts are infected? Where did the malware (for example) come from? Which processes are making network connections?
All these questions and more can be answered with the Crowdstrike console.
Recommendations to others considering the product:
Check out the MITRE evaluations for EDR vendors, and Gartner Magic Quadrant.
Fantastic EDR and MSSP
What do you like best about the product?
Constant availability of detection and remediation. Thorough monitoring and behavioral analysis
What do you dislike about the product?
Price can be intimidating for smaller organizations.
What problems is the product solving and how is that benefiting you?
We were able to free up a significant amount of our IT group's time dealing with endpoint detection and remediation, and also gain secondary benefits like enhanced network visibility and vulnerability assessments.
Peace of mind knowing I have a trusted Endpoint solution to protect the office PCs
What do you like best about the product?
Off the bat I was pleasantly surprised at CrowdStrike's support, they have been fast and efficient to get back with any issues I've had. Very easy to manage as a small IT team
What do you dislike about the product?
The dash board use to be clunky and cluttered but has since been cleaned up. Made a lot of it very user friendly.
What problems is the product solving and how is that benefiting you?
Out biggest problem was having such a small IT team that we could not always monitor every PC efficiently. CrowdStrike has made it very possible recently by allows us to setup notifications for any activity.
Recommendations to others considering the product:
Highly recommended for any company but particularly a company that doesn't have someone dedicated to cyber security.
Integral in protecting our environment in a way that removes end-user friction
What do you like best about the product?
The next-gen style endpoint protection is a game-changer and has been integral in providing high-level support with customizable threat intelligence. Not only is the protection leading the industry but the method by which the agent connects to the console and runs on the endpoint has been amazing. You can deploy on a large scale and run the agent in a way that no longer needs end-user interaction. Finally, users are protected and they don't have to think about it anymore.
What do you dislike about the product?
There's not much to dislike here. The attentiveness of, not only of the team assigned to our account but from the Overwatch team, and even the executives. They've all been fantastic.
What problems is the product solving and how is that benefiting you?
Protecting faculty endpoints and lowering the overall risk to endpoints, including servers. The benefits of peace of mind and industry-leading protection are the main benefits.
User friendly management console, technology focused, the best threat hunting mechanism.
What do you like best about the product?
User friendly management console, technology focused, the best threat hunting mechanism and good VA with machine learning concept utilization. Its an amazing technology as per the EndPoint management or EDR perspective.
What do you dislike about the product?
All looks good compared to other existing EndPoint technologies..
What problems is the product solving and how is that benefiting you?
Daily Threat hunting, EndPoint AV management, Vulnerability management and Inventory management concepts /technologies i do utilize on regular basis.
Recommendations to others considering the product:
It is the best Endpoint Protection technology i even worked on in past.
It is cloud based, easy to manage and it provides the best threat hunting mechanism, VA concepts with machine learning tech utilized. Inventory management concepts as well as report sections are fine and easy to manage.
Thank You !
It is cloud based, easy to manage and it provides the best threat hunting mechanism, VA concepts with machine learning tech utilized. Inventory management concepts as well as report sections are fine and easy to manage.
Thank You !
Quiet reassurance
What do you like best about the product?
Easy to deploy via several methods and for all our equipment Windows, Mac and Linux
Great support and regular check-ins.
Hand held through Setup, didn't need to become an expert to deploy
highly customized reports and dashboards allow for personalized profiles based on duties and resposibilities
Great support and regular check-ins.
Hand held through Setup, didn't need to become an expert to deploy
highly customized reports and dashboards allow for personalized profiles based on duties and resposibilities
What do you dislike about the product?
nothing truly to dislike, dashboards can be overwhelming initially.
having access via a mobile app might be useful but the feature set would need to be limited, mostly for notifications and mini dash boards
initially we weren't able to monitor our Linux devices but there have been improvements regarding that.
having access via a mobile app might be useful but the feature set would need to be limited, mostly for notifications and mini dash boards
initially we weren't able to monitor our Linux devices but there have been improvements regarding that.
What problems is the product solving and how is that benefiting you?
maintains patches and hotfix at OS and BIOS levels.
remotely destroyed lost assets.
helps us to identify potential issues within our programmers groups while they test and develop new code
remotely destroyed lost assets.
helps us to identify potential issues within our programmers groups while they test and develop new code
Recommendations to others considering the product:
Follow best practices guidance for tiered rollouts.
create small sub sets of groups for early testing and aggressive monitoring
Automate roll outs and updates
Large store of add-ons allowing for integration with other software management platforms
great for managing user hardware in the field even out of country and overseas
create small sub sets of groups for early testing and aggressive monitoring
Automate roll outs and updates
Large store of add-ons allowing for integration with other software management platforms
great for managing user hardware in the field even out of country and overseas
Crowdstrike
What do you like best about the product?
The security detection system and malware learning
What do you dislike about the product?
nothing at all the software has been great!
What problems is the product solving and how is that benefiting you?
a lot of threats have been solved before anything happened
It just works!
What do you like best about the product?
It's very easy to create and alter policies and apply them to different groups.
What do you dislike about the product?
I wish Reports were easier to navigate to.
What problems is the product solving and how is that benefiting you?
We needed an effective endpoint protection solution that was easy to implement and manage.
Recommendations to others considering the product:
So much easier to use than older on-prem products.
showing 211 - 220