Crowdstrike Falcon Intelligence

What differentiates Crowdstrike Falcon Intelligence from other similar products?

The response is rapid and accurate, initially the details shown are enough to take action and afterwards technical team may analyze the incident in depth. Other products that we evaluated were either too costly or gave a lot of false positives which reduces the confidence in their judgement about threats.

What is your favorite aspect of this product?

The clarity of detection and details they provide is fantastic, I have about 10 years experience in cyber security and have been an ethical malware developer for red teaming purposes for over 5 years and CrowdStrike remains one of the toughest EDR to bypass. It can catch even the most advance and sophistaced malware and relies on latest tactics to perform better than others.

What do you dislike most about this product?

Support is very dry and robotic, repeats same instructions over and over. Sometimes they completely rely on bots responses which makes us feel stupid about ourselves however when a ticket is escalated the better people usually respond in a week or so.

What recommendations would you give to someone considering this product?

If you are mid to large organization this may be the best security solution (all in one) but for smaller organizations with less number of machines it may be bit of an overkill.

What differentiates Crowdstrike Falcon Intelligence from other similar products?

Crowdstrike falcon is a light weight application that can be deployed quickly and easily that can auto upgrade itself, it safely secures endpoints against bad actors by bringing in its EDR and MDR capabilities into the mix whereas other competitors in the market are unable to provide such features. Threat hunting and threat intelligence offerings from Crowdstrike makes it unique in dealing with the threats in addition, crowdstrike does not cause performance degradation on the VDIs or endpoints which makes it standout against other products.

What is your favorite aspect of this product?

The way it helps SOC operation teams in managing the cyber security estate in the organization and keeping the environment healthy and safe is what i like the most about Crowdstrike and also it actively analyzes the patterns thereby giving actionable insights to the team to act against the bad actors (if any).

What do you dislike most about this product?

MDR (Managed detection and response) capability of Crowdstrike is an expensive feature as it needs highly knowledgeable cyber security experts to analyze the data and personally i feel that since we have used Crowdstike in a VDI environment it was getting difficult to track anti-virus exclusions that were configured on the Crowdstrike console from the end point.

What recommendations would you give to someone considering this product?

If you want to have your organization protected against all kinds of malwares, cyber threats and other attack vectors. Crowdstrike is a great choice to keep your environment safe and secure.

What differentiates Crowdstrike Falcon Intelligence from other similar products?

Machine learning based analysis

What is your favorite aspect of this product?

Centralized management without local server

What do you dislike most about this product?

issues during implementation and in case of virus impact mostly whole operating system needs to refreshed.

What recommendations would you give to someone considering this product?

if you have small org with less than 500 users than it is good to have it