CrowdStrike Falcon Endpoint Protection Reviews

I think the best thing about Crowdstrike is it can rely not only on signatures but analyzes behavior to detect malicious items in the environment. It finds all sorts of things traditional antivirus would never see.

They tend to nickel and dime you on add on's—a lot of addons that should be part of the product you have to purchase separately.

We needed a nontraditional antivirus product that wasn't signature-based and was not resource-hogging.

The first and good thing is you will get to see from where the process started and where it has ended by a process tree. And after that I it is to do rdp connection to hosts.

There is nothing to dislike because there is no difficulty or complicated in this tool.

It has an ability to stop the processes which are seems to be malicious in nature and quarantine the malicious files and throw an alert to analyst so he can decide what to do with that file

CrowdStrike Falcon Endpoint Protection Platform has great user interface and easily understandable for layer 1 analyst or a new user

I have not observed any cons related CrowdStrike Falcon Endpoint Protection Platform in my time as a soc analyst

CrowdStrike Falcon Endpoint Protection Platform is helping us with providing the dual capability of EDR and AV in same package

It offers great features like machine learning to protect endpoints from advance threats, also it offers threat detection and response and threat intelligence as well.

All the features are very helpful and easy to implement, so there is nothing to dislike about it.

It is a great tool for endpoint protection which offers endpoint detection and response too. It addresses many challenges which resolves the issue endpoint management and protection.

It is a cloud based and lightweight agent to protect our endpoint from the zero-day attacks. It consumed less CPU and RAM uses in compare to other EDR solution. It works on signature-less technique. It scan real time.

Platform could be more simple according to me.

It is protecting from the zero-day threats

Top Notch protection against knowns and unknown threats !

Nothing for now. Crowdstrike is industry leader.

Top Notch protection against knowns and unknown threats !

Simplicity in describing the threats and not leaving the hard choice making to user

IOC management has a lot to improve especially option to add locations or patterns to stop threata

Stoping malicious PowerShell scripts that come with cracked tools that students won't stop installing

It has helped tremendously to strengthen our security posture by securing our endpoints.

There has been nothing to dislike up to this point!

It has helped to free up our IT department from having to constantly worry about malware and malicious software infecting our endpoints.

First of all, the dashboard looks awesome and the way it shows detections hierarchical tree of process involved, it is very good. Apart from it, it has some add on feature called spotlight is good CVE analysis and it is good to create custom IOA.

So far I have nothing to dislike about this tool.

Real impacting process captured in hierarchical tree graph. Also, it has good capability to block process execution and custom IOA creation.

CrowdStrike Falcon for Endpoint is a potent cybersecurity tool that improves endpoint security for businesses by providing real-time visibility and reaction, advanced threat information, a lightweight agent, preventative security measures, and professional managed threat hunting services.

Some users have noted that CrowdStrike Falcon Endpoint Protection might be resource-intensive on the endpoint, which may cause system slow performance problems. Additionally, some users have remarked that it is needed to have extensive training on this platform to fully utilized it and familiarity on configuration if need. As with any cybersecurity solution, it's critical to take into account these factors and carry out extensive testing to ascertain whether the product is compatible with the needs and resources of your firm.

First it offers a real-time visibility to our endpoints and knowing the current status of devices by this, it allows us cyber security analyst to check if there is existing threat present on devices. It has also customizable dashboard which we can optimized base on the requirement of our operations team.