External reviews
External reviews are not included in the AWS star rating for the product.
Best EDR solution in market right now
What do you like best about the product?
I have worked on 3 EDR solutions so far and 2 antivirus solutions. I would say Crowdstrike is the best one. It has a single lightweight sensor that works perfectly online and offline. As a cybersecurity analyst, I encountered fewer false positives, errors, and minimal performance issues. Maintenance of the Enterprise solution is easy compared to other EDR solutions. The behavioral analysis component is good, which reduces the need for exclusions. Crowdstrike is available for Windows, MAC and Linux OS. Having a lightweight agent does not affect the performance of machine. Results are good for zero days as well, and Crowdstrike continuously works on improving the product and services
What do you dislike about the product?
UI is not that clean, but it's only because it provides excellent insights. Crowdstrike training is not easily available for everyone. You need to be a customer to get access to CS university
What problems is the product solving and how is that benefiting you?
We have so many features to handle threats in our environment through the console. It makes incident handling very easy and removes threats silently. If an enterprise doesn't want to invest much into the administration of the solution, it should go for it. More protection, fewer false positives, errors, and minimal performance issues. Maintenance of the Enterprise solution is easy compared to other EDR solutions. The behavioral analysis component is good, which reduces the need for exclusions. It can be easily integrated with ITSM solutions like SNOW and software deployment solutions like SCCM.
- Leave a Comment |
- Mark review as helpful
Best Lightweight EDR Solution
What do you like best about the product?
It's a Lightweight EDR Solution in the market with less CPU Utilization
What do you dislike about the product?
The system Tray icon is missing, To check the client is running we need to check it via Cmd
What problems is the product solving and how is that benefiting you?
Lesser CPU utilization makes the Enduser Happy and Its signature less
Super Powerful!
I like how this product was very powerful. It was also very user friendly which made it easy to use.
Leader of next-gen AV & EDR
What do you like best about the product?
1. Extremely Lightweight (20-30 MB)
2. Very good user-friendly Dashboard for better management of security posture.
3. False Positives are less compared to other products in the market.
4. Detailed alerts provide a better solution approach for the detections.
5. Sandbox integration is a good add-on feature.
2. Very good user-friendly Dashboard for better management of security posture.
3. False Positives are less compared to other products in the market.
4. Detailed alerts provide a better solution approach for the detections.
5. Sandbox integration is a good add-on feature.
What do you dislike about the product?
1. Real-time Scan is not available unlike Microsoft Defender for Endpoint.
2. No AD Integration - hoping this would come soon.
3. Provided instruction articles need expertise to be worked on.
4. Can be a little expensive for a small-scale enterprise.
5. Doesn't work with Legacy Operating systems such as Windows XP, although this is a trend in the market to make them obsolete.
2. No AD Integration - hoping this would come soon.
3. Provided instruction articles need expertise to be worked on.
4. Can be a little expensive for a small-scale enterprise.
5. Doesn't work with Legacy Operating systems such as Windows XP, although this is a trend in the market to make them obsolete.
What problems is the product solving and how is that benefiting you?
In my organization with more than 15000 users, it's not advisable to just rely on conventional antivirus with virus definition signature updates. A real-time log and behavior analysis with AI & ML is the next-gen leap to prevent any malicious event at its origin. Crowdstrike bridges this gap between AV and EDR by combining it. There are several benefits it provides:
1. Blocking all malicious activities instantly.
2. Detailed alerts with a process tree to understand and take proper action.
3. Endpoint management is so easy (like triaging and isolating host from network etc.)
4. Malware hunting and analyzing with Sandbox Integration.
1. Blocking all malicious activities instantly.
2. Detailed alerts with a process tree to understand and take proper action.
3. Endpoint management is so easy (like triaging and isolating host from network etc.)
4. Malware hunting and analyzing with Sandbox Integration.
Crowdstrike and JumpCloud Work Awesome Together
What do you like best about the product?
I like the support that both parties bring to help administrators configure the connection between the two systems and how willing they are to make it work in case errors occur.
What do you dislike about the product?
I dislike that the instruction articles that both provide aren't very clear, and there's more than one article from each system that it can be hard to tell which article to follow.
What problems is the product solving and how is that benefiting you?
Crowdstrike is helping our company detect any malicious content on our user's JumpCloud enrolled devices so that we can provide accurate and timely protection that has been sorely needed.
Signatureless Antivirus
What do you like best about the product?
The main important feature of this product is the agent software size . It is around 20-30 mb maximum . Light weight agent .
What do you dislike about the product?
The console function changes every now and then because of product functionality changes .
What problems is the product solving and how is that benefiting you?
It works on machine learning . It doesn't block unnecessary files as the agent is very intelligent. It works on IOC's which gives a clear idea .
Effective Analysis using Falcon CrowdStrike
What do you like best about the product?
Detection & Prevention of Suspicious/Malicious Powershell scripts are way better than other EDR solutions.
The RTR feature enabled Analysts to grab the files for Investigation and run them on the Falcon Sandbox The Network containment helps in mitigating the Threat and observing the attack in place
The RTR feature enabled Analysts to grab the files for Investigation and run them on the Falcon Sandbox The Network containment helps in mitigating the Threat and observing the attack in place
What do you dislike about the product?
We have to depend on Event Search to identify the true source of the Alert
What problems is the product solving and how is that benefiting you?
Blocks Malicious/suspicious processes based on Signature/Machine Learning
New executables without any signatures/Inbuilt exe's are blocked if spawning unnecessary process based on Machine Learning
The RTR feature helps an Analyst grab the files required for Analysis and isolate device if Host is compromised
New executables without any signatures/Inbuilt exe's are blocked if spawning unnecessary process based on Machine Learning
The RTR feature helps an Analyst grab the files required for Analysis and isolate device if Host is compromised
Solution for Lack of visibility and threat hunting
What do you like best about the product?
1. Smaller or Mid-size companies does not have every single tool for incident analysis and incident response, so it’s not easy to find threat actor within their environment so Falcon Complete: Managed Detection and Response (mdr) can help the companies for analysis and incident response.
2. Falcon Complete Managed Detection and Response (mdr)’s Threat intelligence makes sure what’s going on inside and going outside of the company, MDR performs threat hunting to catch those little bugs in suspicious activity that’s going on in the company.
2. Falcon Complete Managed Detection and Response (mdr)’s Threat intelligence makes sure what’s going on inside and going outside of the company, MDR performs threat hunting to catch those little bugs in suspicious activity that’s going on in the company.
What do you dislike about the product?
Falcon Complete Managed Detection and Response (mdr)’s has access to your sensitive data or will have access to sensitive data to detect cyber-attacks or perform analysis and incident response.
What problems is the product solving and how is that benefiting you?
Smaller or Mid-size companies does not have that much budget to get every single tool for incident analysis and incident response, so it’s not easy to find threat actors within their environment so Managed Detection and Response (mdr) can help the companies for analysis and incident response.
Easy to use and works well as per the requirements
What do you like best about the product?
User-friendly solution with functionalities such as threat detection. Also, works well for zero-day attacks detection and prevents them. This solution can be integrated with other platforms.
What do you dislike about the product?
Knowledge base is an improvement area along with the Quality of support that they offer. There support people should be more trained. we are not of much help when required.
What problems is the product solving and how is that benefiting you?
Easy to use, light weight solution to help overcome malware and ransomeware attacks. It helps us with good threat hunting and behaviour-based analysis capabilities to prevent new threats.
Recommendations to others considering the product:
Use this product as we have repaced it with other platform in our infrastructure.
Worry Free Protection
What do you like best about the product?
No nag screens or intrusive messaging. It works in the background with low resource consumption. I only know it's there when / if it found something.
What do you dislike about the product?
There don't seem to be any downsides after 2.5 years of daily use.
What problems is the product solving and how is that benefiting you?
Crowdstrike solved the issue of safe browsing. In conjunction with solid firewall policy and user awareness, Crowdstrike Falcon silently patrols each action with minimal negative impact to each user's productivity.
showing 101 - 110