What advice do you have for others considering CrowdStrike Identity Protection?

I monitor our endpoints across Windows, Mac, and Linux, and I identify any malicious software or unapproved software that comes up and is blocked by the platform. I also use CrowdStrike Falcon for a rudimentary asset inventory and checking out what types of shadow IT and applications are installed across my network. CrowdStrike Falcon has stopped a lot of malware from being executed on user devices. I estimate we have had about 20 incidents over the past year that were prevented by CrowdStrike Falcon. The workload has not necessarily gone down; the detections that are created are reviewed now, but there is almost nothing that needs to be done other than having the device wiped. I am using Charlotte AI to help craft better queries for Falcon Fusion. We have purchased at least five different add-ons to increase the overall insight into everything in the company. Using Falcon for IT, we have been able to identify and assess different application-based risks on our user endpoints. I would advise anyone to dive in and get comfortable with the console; there is a lot of information in there that you need to figure out, and it is pretty easy to figure out. I would rate this product a 9 out of 10.

Regarding CrowdStrike Falcon's AI capabilities, I don't work in the governance department, and my organization doesn't 100% implement the AI features in my environment. I know CrowdStrike is using AI to triage the events, so the events are 99% triaged before coming to me. I don't have a better answer for this question. Regarding the accuracy and reliability of CrowdStrike Falcon's AI output, I am not able to answer that question as I have no information about it. CrowdStrike Falcon has not allowed me to consolidate or replace other security tools. Having multiple security capabilities on a single platform like CrowdStrike Falcon definitely has advantages but also disadvantages. I don't want to put all the eggs in one basket, so I appreciate CrowdStrike and use some of its capabilities, but I don't want to put all my security investments in CrowdStrike. I prefer to use other tools as well. CrowdStrike Falcon's sensor has not had any issues on endpoint performance, and my ability to deploy security at scale has not been negatively impacted. CrowdStrike Falcon has made things easier regarding the workload and productivity of my security team. What differentiates CrowdStrike Falcon from other cybersecurity platforms I have used or evaluated is definitely its innovation, common usage, and ease of use. I would rate my overall experience with this product a nine out of ten.

CrowdStrike Falcon has allowed me to consolidate or replace other security tools, providing a secondary look at our current systems and a second set of eyes that verifies what I see, thus cutting down the need for additional security. I have given this review a rating of 9.

If I would rate CrowdStrike Falcon on a scale of one to ten, I would give it a ten. What would make it a ten for me is if everything was consolidated in one, where I did not have to deal with a third party and a go-between. My advice to other companies considering CrowdStrike Falcon is to make sure you get references and make sure that you adequately do the vetting and testing. I would rate this review overall as a nine out of ten.

A security incident where CrowdStrike Falcon helped my team detect or stop a threat involved a contractor who came on who may not have actually been a human. CrowdStrike Falcon helped us discover malicious activity and we were able to remediate without losing anything. CrowdStrike Falcon has affected the workload and productivity of my security team because it is so easy to use. We have been extremely productive and proactive. CrowdStrike is also the first to tell us about emerging technologies, so we know about it before the general marketplace. We are using AI within CrowdStrike Falcon in that it is everywhere. AI is a tool to translate extremely complicated technical jargon into very easy to follow runbooks, words, verbiage, how-tos, and automations. That is how we are using it. The impact AI has had on my security operations is that it allows computers to do computer things, so we do not have to have human interaction when it comes to security frameworks. The advice I would give to other organizations considering CrowdStrike Falcon is to just implement it. I rate this product a nine out of ten.

CrowdStrike Falcon has allowed me to consolidate or replace other security tools significantly. My advice to other organizations considering CrowdStrike Falcon is that if the organization has the size to seriously evaluate the Complete offer, the pricing difference is usually more than justified in acquiring it. The impact on my security operations has been that it has made us more confident in the delivery of security, both within client environments and within our own. Reducing the workload around it enables us to do more valuable work in that space and provide security that we feel is more adequate and that we are more confident in. I can describe a security incident where CrowdStrike Falcon helped my team detect a threat. We had an issue with a stealer log that somehow ended up on a server machine, which we were able to trace back to the administrator who accidentally uploaded it through a Samba share. I have given this review a rating of ten out of ten.

I have no experience with CrowdStrike Falcon's AI capabilities. I have no experience with the accuracy and reliability of output from CrowdStrike Falcon's AI capabilities. I cannot comment on whether CrowdStrike Falcon is deployed in my organization on public cloud, private cloud, hybrid cloud, or on-premises, as I have no experience with how it is deployed. The benefits of having multiple security capabilities on a single platform like CrowdStrike Falcon include ease of access, as I don't need to jump between tools, and compatibility, as things just work. I can describe a security incident where CrowdStrike Falcon helped my team detect a threat. We needed to determine whether the Axios attack was going to impact us and whether any sensitive proprietary code may have been stolen. With CrowdStrike Falcon's advanced search, I was able to determine that we were not affected and that we had nothing to worry about. CrowdStrike Falcon has affected the workload of my IT team by making us seem more competent in the security aspect of things. I was able to quickly provide an update to my CTO on whether this was going to impact us, and that is a significant achievement for me. My advice to others looking into using CrowdStrike Falcon is that it is a very powerful tool that provides a lot of insights. I have trusted it for three years and believe you could as well. I would rate this product a perfect ten.

CrowdStrike Falcon is deployed in my organization using a hybrid cloud setup. What differentiates CrowdStrike Falcon from other cybersecurity platforms I have used or evaluated is that so far, it is a well-recognized name with good performance and a good overall reputation. I love it. My advice to others looking into using CrowdStrike Falcon is to not look at anything else and to use it instead. It works and it works great. I would rate this product a 10 out of 10.

I would rate CrowdStrike Falcon a 10 out of 10. I give CrowdStrike Falcon a 10 because they do what needs to be done and they do what we ordered it to do. Regarding CrowdStrike Falcon's AI capabilities, I think it has been doing well. I think everything with AI could always improve, but its capabilities right now have been good and sufficient. I think CrowdStrike Falcon's AI capabilities in terms of accuracy and reliability of its output are quite impressive, as Charlotte has been very descriptive any time an alert occurs, and the AI is doing very well at breaking down what needs to be done, including next steps and what happened in the alert. Using Falcon platform has changed the way my security team detects, investigates, and responds to threats by escalating detections and responding on our end because CrowdStrike already gives us the breakdown of what has happened. The benefits I have seen from having multiple security capabilities on a single platform include saving time and preventing us from constantly going to different multiple platforms, as we could just all look at one platform. A security incident where Falcon helped my team detect or stop a threat was during the time of the DPRK, North Korean attack, and they helped stop and prevent that. The impact that the Falcon sensor has had on endpoint performance and my ability to deploy security at scale is that the endpoint Falcon sensor has helped keep visibility into any and all devices that we have. I am using AI within Falcon platform to monitor which users use AIs and to make sure they are only using permitted AI, not every AI out there. What differentiates Falcon from other cybersecurity platforms I have used or evaluated is that they are constantly doing well and they have never let us down. The advice I would give to others looking into using CrowdStrike Falcon is to please hurry this process up, but trust Falcon, use the demo and attend their events, and you will appreciate the product. I am giving this review an overall rating of 10.

My advice to other organizations considering CrowdStrike Falcon is to definitely work with one of the good reselling partners. We use GuidePoint, and they are fantastic. I can also say that you should really get to know your CrowdStrike Falcon team once they are assigned to your company because they are definitely assets to leverage. I would rate this product as a nine overall.

I benefit greatly from having multiple security capabilities on a single platform, as it is advantageous not to have numerous different agents installed on endpoints and to be able to leverage a single sensor. CrowdStrike Falcon sensors are installed across all of our endpoints. We use Microsoft Azure as our cloud provider. The single sensor approach of CrowdStrike Falcon differentiates it from other cybersecurity platforms I have used or evaluated. My use of CrowdStrike Falcon has expanded since the initial deployment, as we have added additional modules to the sensor, including Spotlight and Next-Gen SIM. My experience with pricing, setup cost, and licensing for CrowdStrike Falcon is positive, but the licensing cost is somewhat expensive. I would advise others looking to use CrowdStrike Falcon to fully leverage the solution and build into the Falcon stack, as it works exceptionally when you have the different modules deployed. I would give CrowdStrike Falcon a nine on a scale of one to ten.

The impact of Charlotte AI on my security operations is high from the perspective of being able to find things quicker, but if you ask it to do complex tasks, it is not necessarily the best. I would rate this review an 8 out of 10 overall.

I would rate CrowdStrike Falcon a nine on a scale of one to ten because I never give anything a perfect score, and it is almost a ten. Regarding CrowdStrike Falcon's AI capabilities, I think its governance and security are great. Its accuracy and reliability of output seem reliable, but I have not used it enough, as I rely mostly on the Falcon Complete team and my own individual investigations. CrowdStrike Falcon is now deployed in my organization on GovCloud due to the recent migration. CrowdStrike Falcon has allowed me to consolidate or replace other security tools, as I actually got rid of some such as Exonius. The benefits I have seen from having multiple security capabilities on a single platform are faster response time, quicker identification for investigations, and better overall security posture. I can describe a security incident where CrowdStrike Falcon helped my team detect or stop a threat involving individuals getting fooled by malicious emails and links, and CrowdStrike Falcon stopping it and allowing me to use the sandbox to see what would have occurred and how it was stopped. CrowdStrike Falcon has affected the workload or productivity of my security team by making response times faster and visibility quicker and more seamless. The CrowdStrike Falcon sensor has had a lightweight effect on endpoint performance, is easy to roll out, and there is really no difference at all when it comes to response or processes, other than being faster than it was prior to having CrowdStrike Falcon sensors on my hosts. What differentiates CrowdStrike Falcon from other cybersecurity platforms I have used or evaluated is that so far it is the best, but it is definitely the most expensive. My advice for others looking into using CrowdStrike Falcon is to invest in it, as it is a good solution. I would rate CrowdStrike Falcon a nine out of ten overall.

The advice I would give to others looking into using CrowdStrike Falcon is that they have great capabilities and good pricing options. They offer good stability as well as large coverage, so they are truly a leader in the market. The Falcon sensor has positively impacted endpoint performance and my ability to deploy security at scale because it is a one-click solution. We can pick the policies we want to roll out based on the targeted group, and we are able to do that. What differentiates CrowdStrike Falcon from other cybersecurity platforms I have used or evaluated is its scale and ease of deployment, plus the telemetry data. However, there are some capabilities which I still need CrowdStrike Falcon to update, so that will provide an edge over the other existing tools which I am using. Falcon has not yet allowed me to consolidate or replace other security tools, as we are still using other competitive tools, but our end goal is to have those benefits existing in CrowdStrike Falcon, so that we can deprecate other tools and use CrowdStrike Falcon exclusively. I can describe a security incident where Falcon helped my team detect a threat by allowing us to see a user accessing unauthorized GenAI third-party applications, which is not within their business standard operating procedure. We took action and blocked those third-party websites, and that insight came from CrowdStrike Falcon endpoint data. I would rate this product an eight out of ten.

I would rate CrowdStrike Falcon overall as a nine out of ten because it is a really good tool, and obviously nothing is perfect, but it is definitely a big player in the security industry. I would advise other organizations considering CrowdStrike Falcon that if you want to get more visibility and more data, then CrowdStrike Falcon is definitely something you should consider. I think their customer support is really good and their agents are very professional and smooth. If you are ever looking for more granular insights, CrowdStrike Falcon is the way to go.

Using CrowdStrike Falcon has changed the way my security team detects, investigates, and responds to threats by allowing us to focus on other things and not really worry about this. We only need to concentrate on these threats and indicators once they happen. Having multiple security capabilities on a single platform has allowed us to work more effectively because I think the more things that you can consolidate into a single pane of glass allows the users to work more effectively without having to keep switching back and forth. A security incident where CrowdStrike Falcon helped my team detect or stop a threat involved users getting phishing links that told them to download software, which actually downloads ScreenConnect remote access software to their workstations. CrowdStrike Falcon has been detecting these indicators, and we have been able to tell it that since it is not an authorized application within our university, we can have it stop, block, and isolate those instances and notify the SOC, which works pretty well because we are able to then isolate the user, educate the user through the help desk, and have the box re-imaged to make sure it is clean. CrowdStrike Falcon has affected the workload or productivity of my security team by allowing us to concentrate on other things because this is very self-driven and keeps things moving. The CrowdStrike Falcon sensor has had a positive impact on endpoint performance and my ability to deploy security at scale because we actually have not had any negative impacts at all. It has all been positive, with the exception of some maybe glitches on the Linux boxes, but there really have not been any performance or issues otherwise. We are honestly probably not using AI within CrowdStrike Falcon as effectively as we could, but we do use it to help search for related incidents and similarities within the console to see what is there. What differentiates CrowdStrike Falcon from other cybersecurity platforms I have used or evaluated is the ease of use and the lightweight client, which seem to be the biggest advantages. The best advice I could give to others looking into using CrowdStrike Falcon is to listen, understand what your options are, make sure you have a good idea of what your deployment is going to look like and plan for that, and then everything should flow freely. Do not buy it haphazardly. I would rate this review a 10 out of 10.

What differentiates CrowdStrike Falcon from other cybersecurity platforms I have used or evaluated is that the crowd aspect of CrowdStrike is valuable because we gain insight from attack vectors and methods we do not experience ourselves, allowing us to build alerts or develop awareness for them. My use of CrowdStrike Falcon has expanded since my initial deployment. The initial deployment focused strictly on endpoint defense. We now have endpoint, SOAR, SIEM, and even some asset inventory capabilities, which is beneficial. Currently, we are using AI within CrowdStrike Falcon to build many of the SOAR playbooks within their SOAR solution. The impact AI has had on my security operations allows us to investigate matters more deeply and build very specific exclusions or alerting rules, which is beneficial. The advice I would give to other organizations considering CrowdStrike Falcon is that while there is much to tackle and accomplish, it is well worth the effort. I would rate this product 9 out of 10.

CrowdStrike Falcon differentiates itself from other cybersecurity platforms I have used or evaluated by having a lower learning curve compared to its competitors, as well as better accuracy and widely recognized superior telemetry. My advice to others looking into using CrowdStrike Falcon is to conduct a POC, as I believe the product proves itself during the POC. CrowdStrike Falcon is unique in its ability to deploy security at scale quickly, as I do not see other vendors providing such options. I do not see any impact on endpoint performance, and CrowdStrike Falcon is unique in its ability to deploy security at scale quickly, as I do not see other vendors providing such options. The alerts and capabilities of CrowdStrike Falcon are very precise, and with the AI built in, it brings more value and is becoming more powerful in recent months. I rate this review ten out of ten.

My advice for others looking into using CrowdStrike Falcon is to set up a small pilot environment to get used to it and speak to an existing customer for any quirks related to their specific environment. I gave this review a rating of 10.

The impact it has had on my security operations is that it has made it easier for me to accomplish a lot of our use cases and finish all those tasks. My use of CrowdStrike Falcon has expanded since my initial deployment as we have purchased many additional modules. We started with EDR and expanded with different modules like CrowdStrike Falcon for IT and exposure management. I am currently using AI within CrowdStrike Falcon to write queries. The advice I would give to other organizations considering CrowdStrike Falcon is to move forward with it. I provide this review with an overall rating of 9 out of 10.

I would rate CrowdStrike Falcon a nine on a scale of one to ten. I rate it a nine because, for it to be a ten, the interface needs improvement. My advice to others who are thinking about using CrowdStrike Falcon is to do a PoC because they will definitely end up buying it. My overall review rating for CrowdStrike Falcon is nine.

CrowdStrike Falcon has definitely increased the workload of my security team. They definitely have a lot more to do because they see a lot more. The main issue is not with CrowdStrike Falcon itself but with how my team prioritizes things properly, which is a personal concern. We had a lot of browser vulnerabilities that we recently remediated. CrowdStrike Falcon found those vulnerabilities for us and we patched them up and they are good to go now. The advice I would give to other organizations considering CrowdStrike Falcon is that it is definitely worth using, but you should have somebody become an expert in the platform. My overall rating for CrowdStrike Falcon is 8.7 out of 10.

The advice I would give to other organizations considering CrowdStrike Falcon is that if you are really worried about the cost of it, it is worth it. I am using AI within CrowdStrike Falcon for deep security issues, but to be honest, we do not use it completely; we really depend on Falcon Complete to do most of the work. I really cannot think of how my use of CrowdStrike Falcon has expanded since my initial deployment. My review rating for CrowdStrike Falcon is a 10.

In a recent situation while using CrowdStrike Falcon, we saw a suspicious process in the console. We checked the details and the system was showing it in quarantine. We found that the user was trying to access some suspicious link. The system generates alerts if there is suspicious activity. I rate this product an eight out of ten.

As of now, I think CrowdStrike Falcon is better and it is working fine. I rate it 10 out of 10 because it is lightweight, it has real-time detection, and it has the more powerful signature-based and signature-less technology. I can advise others that if there are any opportunities, they should use CrowdStrike Falcon because it is a very lightweight agent with signature-based and signature-less technology. CrowdStrike Falcon has real-time scanning, real-time prevention, and multiple other features. My overall rating for this product is 10 out of 10.

CrowdStrike Falcon for AWS (pay-as-you-go) delivers strong cloud-native protection via AWS Marketplace, which is ideal for startups scaling workloads.

I have experience with these products from prior use. I work with security vendors and some of my customers use Trend Micro and CrowdStrike as well. My experience has been positive and I have been satisfied. The pricing might be a little expensive, but I find it cost-effective. I do not find CrowdStrike Falcon to be the most expensive when comparing pricing with competitors. I would rate this solution an 8 out of 10.

In some cases, we have Excel files with VBA code inside, and CrowdStrike Falcon detects that it's a bit risky for us. When people download EXE files that are threats to our organization, it detects them very quickly. It also detects threats under ZIP files and can show us the path from where it came and where it goes, allowing us to easily see where the infection is and where it has spread. My advice for others looking into using CrowdStrike Falcon is that as an endpoint protection solution, Falcon is always reliable, and I can recommend that this is the product you can deploy and forget all the worries. We are an end user customer of CrowdStrike Falcon; we are not a partner or reseller, and we are not receiving any gift card or incentive for this review. We are just sharing our experience as an end user and as an IT Manager. I rate CrowdStrike Falcon 9 out of 10.

Currently, I do not remember exactly what version of CrowdStrike Falcon we are using because I'm managing the team, but I can check the right version later. We are using the latest version of CrowdStrike Falcon. CrowdStrike Falcon has not helped me predict and prevent potential breaches by itself, but with support from other applications such as Splunk and Windows Defender, it has contributed. I integrate CrowdStrike Falcon with third-party tools. I have to integrate CrowdStrike Falcon with other applications to get the most protection, and the integration is smooth and everything works well. I am using the lightweight agent. For the system performance, the lightweight agent is fine; it has not affected performance too much, and generally it's acceptable. I rate CrowdStrike Falcon eight out of ten.

The feature called Threat Graph for threat hunting helps in terms of security to predict and prevent breaches by showing how threats are evolving and how we can protect the customer environment, which helps us build better security. I have integrated CrowdStrike Falcon with existing SIEM solutions and security frameworks. It helps to streamline incident response processes because it is very easy to integrate with SIEM solutions like IBM QRadar and HPE ArcSight; for the incident response, it helps us correlate with other solutions. My customers using CrowdStrike Falcon are mainly from all industries, including ITES, finance, marketing, manufacturing, and health. I recommend that those planning to use CrowdStrike Falcon should migrate from their old traditional antivirus to next-gen antivirus, which will help them protect their environment. The biggest advantage of this solution for my customers is that it is a single solution that fulfills most of their security concerns while being easy to manage. I rate CrowdStrike Falcon ten out of ten.

For those who would like to use CrowdStrike Falcon, I recommend negotiating hard on commercial terms because it is not an easy or affordable solution. From a commercial standpoint, you should negotiate hard, but technically, it is not very difficult. CrowdStrike Falcon is a user-friendly tool. On a scale of one to ten, I rate CrowdStrike Falcon an eight.

I would rate CrowdStrike Falcon a seven out of ten.

I am a computer engineer by profession. The maintenance is automatic. I would rate CrowdStrike Falcon as nine overall.

Based on my experience, I would recommend CrowdStrike to others because it is user-friendly and easy to manage, unlike other solutions that require experienced personnel; CrowdStrike's documentation is also very clear. I would recommend it to other users because it is a perfect product. It is an easy solution that anyone can manage, providing many benefits for endpoint visibility and allowing for the creation of many custom use cases without the need for much fine-tuning to get true positive alerts. On a scale of one to ten, I would rate CrowdStrike Falcon as a product and solution as an eight.

I would recommend that if you need a quick response against real-time attackers, you should consider purchasing CrowdStrike. Windows Defender doesn't match up, so configuring it on EC2 instances is better for small and large-scale companies as well. Overall rating: nine out of ten.

Support is an area that needs attention. Overall, EDR is fine. ITDR is not mature, and other tools are also not mature. If we talk about SIEM and cloud security, those are also not mature. I would rate it five out of ten.

CrowdStrike is a great solution. It's a hands-on tool. I have not seen other EDRs like it. Compared to Carbon Black, which is much more difficult with a different UI, CrowdStrike allows direct, detailed investigation with a PID generated for each process. It offers unique abilities not seen in other EDRs. Overall product rating: nine out of ten.

For an incident investigator, it's quite easy to use, and it provides great visibility over the processes. I'd rate the solution ten out of ten.

Falcon endpoint protections provides real-time threat prevention and response to identity-based attacks.
1. Protection: Protects traditional AD
2. Detection: Uses AI-powered anomaly detection to identify and neutralize threats
3. Provides 24/7 managed detection and response for identity threat
4. Risk-based access: Enforces MFA based on real-time risk assessment
5. Unified security: Integrates endpoint and identity protection for comprehensive security 6. Managed services: Falcon Complete ITP is a fully managed solution that includes expert management, monitoring, and remediation

Overall, I would rate the product an eight out of ten because of one recent issue that happened. I'm concerned about the recent issue that happened. What if another update causes the same problem again? Is it really as good as it seems? Even our customers have given very good feedback, they get more insights into what's happening, what they should do, and what remediation steps to take. So, in that way, it's very good. I would recommend it, especially if you're going for endpoint security. I'd definitely recommend CrowdStrike first because it's more mature than SentinelOne and other EDR solutions in the APAC region.

CrowdStrike Falcon Surface is a cloud-based solution. In light of the recent global IT outage that affected CrowdStrike, they should do proper change management. Overall, I rate the solution a nine out of ten.

Most customer requirements focus on email security, so we’ve implemented Mimecast. CrowdStrike Falcon integrates with Mimecast, allowing us to provide advanced security beyond Office 365’s capabilities. With DMARC in place, Falcon helps us identify domains that pose a risk to the organization. I advise you to look for customer feedback, and then they should also look for Gartner and other industry leaders so you get the ranking. Overall, I rate the solution a seven out of ten.

I rate the overall product an eight out of ten. I would recommend it to others. However, it's crucial to understand areas where the product might not provide coverage and how to mitigate those gaps. For example, it covers endpoints, networks, and Office 365 environments, but are there other areas in the attack surface that it doesn't address well? It's essential to be aware of any potential gaps upfront. The solution helps in preventing incidents. However, it's challenging to quantify the exact impact because we don't know what would have happened without it. It's similar to having insurance for your house.