Try our new research platform with insights from 80,000+ expert users

Change Auditor for Active Directory vs CrowdStrike Falcon comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Change Auditor for Active D...
Average Rating
9.0
Reviews Sentiment
6.9
Number of Reviews
2
Ranking in other categories
Active Directory Management (7th)
CrowdStrike Falcon
Average Rating
8.6
Reviews Sentiment
7.3
Number of Reviews
138
Ranking in other categories
Security Information and Event Management (SIEM) (6th), Endpoint Protection Platform (EPP) (1st), Threat Intelligence Platforms (TIP) (1st), Endpoint Detection and Response (EDR) (1st), Extended Detection and Response (XDR) (1st), Attack Surface Management (ASM) (1st), Identity Threat Detection and Response (ITDR) (1st), AI-Powered Cybersecurity Platforms (1st)
 

Mindshare comparison

While both are Security Software solutions, they serve different purposes. Change Auditor for Active Directory is designed for Active Directory Management and holds a mindshare of 7.1%, down 7.3% compared to last year.
CrowdStrike Falcon, on the other hand, focuses on Extended Detection and Response (XDR), holds 9.9% mindshare, down 17.4% since last year.
Active Directory Management Mindshare Distribution
ProductMindshare (%)
Change Auditor for Active Directory7.1%
One Identity Active Roles12.2%
ManageEngine ADManager Plus11.5%
Other69.2%
Active Directory Management
Extended Detection and Response (XDR) Mindshare Distribution
ProductMindshare (%)
CrowdStrike Falcon9.9%
Wazuh6.8%
SentinelOne Singularity Complete5.8%
Other77.5%
Extended Detection and Response (XDR)
 

Featured Reviews

reviewer2794194 - PeerSpot reviewer
Sr Mgr Cyber Defense at a manufacturing company with 10,001+ employees
Auditing changes has become faster and now uncovers misconfigurations within minutes
The best features Change Auditor for Active Directory offers are that it's lightweight and easy to understand. You don't have to memorize event IDs since it's in English. What makes Change Auditor for Active Directory lightweight and easy to understand in my experience is that it doesn't require the events to record to the domain controllers. Therefore, I can focus just on the event types without having to turn up detailed logging on my DCs. Change Auditor for Active Directory has positively impacted my organization by helping us respond to audits very quickly to show that we had evidence of who was making the changes and match them up to the ticket request and who approved it. After implementing Change Auditor for Active Directory, it has allowed us to answer questions literally in minutes, whereas it would have taken us half a day to a day before.
Waleed Omar - PeerSpot reviewer
Information Security Specialist at Arab Open University
Provides effective real-time threat detection with potential for cost optimization
Some features such as device control, firewall management, and file analysis are standalone products that we need to purchase separately. If these features came out of the box within the product, it would be much more beneficial for us. Other providers such as SentinelOne include these features in their base product. We attended a CrowdStrike Falcon event where they discussed some shallow AI features, but we cannot see these in our panel yet. We work with different solutions such as Darktrace and SocRadar, where AI features are automatically displayed in our dashboards after release. However, for CrowdStrike Falcon, we cannot see these features.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The most valuable features are the ability to protect Active Directory accounts and groups, and the real-time notifications that help manage Active Directory more effectively."
"Change Auditor for Active Directory has positively impacted my organization by helping us respond to audits very quickly to show that we had evidence of who was making the changes and match them up to the ticket request and who approved it."
"I like the feature called RTC, the remote time connector."
"It seems to do a pretty good job of protecting the host. It offers good insights that it gives you when it has a detection. It's pretty incredible."
"Scalability is good. We have had no issues with it."
"Everything is automatic. I install the sensor and renew the service. Periodically, I get a notice that they've shut something down."
"It's ability to do threat hunting is really great, quite robust, and even allows you to do hygiene stuff."
"The OverWatch is the most valuable feature to me. It's a 24x7 monitoring service, and when they see anything suspicious in my environment, they will investigate."
"The detection is very reliable. Also, OverWatch is a great feature."
"The EDR is amazing and ease of integration with Splunk is a big plus. Integration with BigQuery is also a plus for me and workflow creation is easy. Overall, CrowdStrike Falcon is a great product."
 

Cons

"Change Auditor for Active Directory could be improved if the client were more flexible when installed, so if I upgrade the server, I wouldn't have to replace the clients at the same time."
"Areas that could be improved include having more management capabilities with command-line scripts and more flexibility in general."
"The support for different OS versions needs improvement because sometimes due to business conditions, updating our OS is impossible."
"The malware analysis could be improved, as that's what we use the solution for the most and that change would make it a better EDR tool."
"CrowdStrike Falcon could improve if it became an XDR. When we look only to an end-point, we lost the context of the environment. I know it's another line of design of the product. However, if CrowdStrike becomes an XDR, it could be very good."
"Deployment in cloud environments is challenging. Another concern is CrowdStrike's GUI. It changes annually, making it hard to work and find options."
"Basically, they don't cover legacy OS or applications. That's the only issue we're concerned about"
"We sometimes get false positives."
"The Integration with tools, SOC tools, could be better."
"I would like to see the machine learning feature enhanced."
 

Pricing and Cost Advice

Information not available
"The pricing will depend upon your volume of usage."
"I do not have experience with the cost or licensing of the product."
"The tool is a little bit expensive compared to other products, but I think it's okay owing to its quality."
"The pricing could be reduced. If it was more reasonable that would be great."
"The pricing and licensing are reasonable. I don't think we are getting charged more than what it is worth. It is fair, but I do not like how it is a la carte. I realize they do that so other organizations can buy and get the agent, getting it cheaper than you could otherwise. However, if you want the main core package, which has all the main features with the exception of maybe the multi-cloud protections, that can get pricier for an organization. So, you have to pick and choose what you want. I do not care for a la carte pricing."
"The price of CrowdStrike Falcon is expensive and should be reduced."
"The price of CrowdStrike Falcon could be better. It is very expensive, we pay approximately $900 per month for the licenses. There are not any additional fees."
"When comparing to Microsoft, CrowdStrike Falcon is more expensive."
report
Use our free recommendation engine to learn which Active Directory Management solutions are best for your needs.
884,933 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
14%
Insurance Company
9%
Manufacturing Company
8%
Computer Software Company
8%
Computer Software Company
11%
Financial Services Firm
10%
Manufacturing Company
10%
Government
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
By reviewers
Company SizeCount
Small Business50
Midsize Enterprise33
Large Enterprise62
 

Questions from the Community

What is your experience regarding pricing and costs for Quest Change Auditor for Active Directory?
My experience with pricing, setup cost, and licensing was pretty straightforward. Actually, we bundled it with some other services offered from Quest to get a volume discount.
What needs improvement with Quest Change Auditor for Active Directory?
Change Auditor for Active Directory could be improved if the client were more flexible when installed, so if I upgrade the server, I wouldn't have to replace the clients at the same time. I think g...
What is your primary use case for Quest Change Auditor for Active Directory?
My main use case for Change Auditor for Active Directory is auditing changes, finding changes to undo, and break-fix solving issues. For example, I could give you a quick specific example of how I'...
Comparing CrowdStrike Falcon to Cortex XDR (Palo Alto)
Cortex XDR by Palo Alto vs. CrowdStrike Falcon Both Cortex XDR and Crowd Strike Falcon offer cloud-based solutions that are very scalable, secure, and user-friendly. Cortex XDR by Palo Alto offers ...
How does Crowdstrike Falcon compare with Darktrace?
Both of these products perform similarly and have many outstanding attributes. CrowdStrike Falcon offers an amazing user interface that makes setup easy and seamless. CrowdStrike Falcon offers a cl...
How does Microsoft Defender for Endpoint compare with Crowdstrike Falcon?
The CrowdStrike solution delivers a lot of information about incidents. It has a very light sensor that will never push your machine hardware to "test", you don't have the usual "scan now" feature ...
 

Also Known As

No data available
CrowdStrike Falcon XDR, CrowdStrike Falcon Threat Intelligence, CrowdStrike Identity Protection, CrowdStrike Falcon Surface, CrowdStrike Falcon Platform
 

Overview

 

Sample Customers

American Airlines, Bank of America, BARCLAYS, ebay, Ford, intel, MARS, MERCK, Microsoft, UBER, VISA
Information Not Available
Find out what your peers are saying about One Identity, Microsoft, Netwrix and others in Active Directory Management. Updated: March 2026.
884,933 professionals have used our research since 2012.