What do you like best about the product?

The most extensive and prominent endpoint protection solution for your computing infra. It supports the major computing platform like Windows, Linux and Mac. The Falcon agent is really efficient in detecting all sort of malicious activity and their SOC team always monitors your infractructure for potential threat activities. You can easily configure your deployment strategy and roll out the falcon agent to your computing infra. It protects your end points from all type of attack vectors and zero day attacks as well due to its UBA module and AI/ML features. You can integrate your SIEM solution over falcon API to ingest logs and perform SOAR activities.

What do you dislike about the product?

The recent outage due to CrowdStrike agent was caused due to inefficient testing and rolling out faulty sensor update. They can improve their testing infrastructure to better manage product roll out.

What problems is the product solving and how is that benefiting you?

Every enterprise needs a robust endpoint protection plan to combat ever growing threat landscape and notorious threat actors. Crowdstrike falcon endpoint protection plan is the most advance threat protection solution you can use to protect your infra from threat actors. They make use of AI/ML techniques and world class threat intel to map every sort of activities happing inside your computing infrastructure and detect any sort of malicious activities in it's very early stage. It has a very extensive detection rules and live threat detection anomaly rules which protect against zero day attacks as well.