External reviews
340 reviews
from
and
External reviews are not included in the AWS star rating for the product.
Great EDR Product
What do you like best about the product?
The UI is helpful when performing investigations.
Some other features I like from the UI:
The Hash Search page, the Host Search page, The Detections page.
The product will generally tell you: what happened, what was the source, which hosts are affected, why this detection matters, and to make it even better - all these are mapped to the MITRE ATT&CK Matrix.
This makes things easier to communicate with other analysts to understand the lifecycle or workflow of an attack, and what we can do in the future to prevent it.
Some other features I like from the UI:
The Hash Search page, the Host Search page, The Detections page.
The product will generally tell you: what happened, what was the source, which hosts are affected, why this detection matters, and to make it even better - all these are mapped to the MITRE ATT&CK Matrix.
This makes things easier to communicate with other analysts to understand the lifecycle or workflow of an attack, and what we can do in the future to prevent it.
What do you dislike about the product?
Sometimes it's hard to tell which process spawned another process in the Timeline view.
Our team does not understand the difference between a detection and an incident.
Are incidents assigned automatically? Is an incident just multiple detections from the same host? Some insight into how it chooses to create an incident for a detection vs just a detection would be great.
Our team does not understand the difference between a detection and an incident.
Are incidents assigned automatically? Is an incident just multiple detections from the same host? Some insight into how it chooses to create an incident for a detection vs just a detection would be great.
What problems is the product solving and how is that benefiting you?
The product is great for combining next-gen AV with EDR capabilities.
The problem that we're solving with CrowdStrike Falcon: Endpoint Protection is that sometimes incidents are too noisy with the detections, and often-times analysts have to log in to multiple different dashboards or products to tell a story -- what are we seeing? Which hosts are infected? Where did the malware (for example) come from? Which processes are making network connections?
All these questions and more can be answered with the Crowdstrike console.
The problem that we're solving with CrowdStrike Falcon: Endpoint Protection is that sometimes incidents are too noisy with the detections, and often-times analysts have to log in to multiple different dashboards or products to tell a story -- what are we seeing? Which hosts are infected? Where did the malware (for example) come from? Which processes are making network connections?
All these questions and more can be answered with the Crowdstrike console.
Recommendations to others considering the product:
Check out the MITRE evaluations for EDR vendors, and Gartner Magic Quadrant.
Fantastic EDR and MSSP
What do you like best about the product?
Constant availability of detection and remediation. Thorough monitoring and behavioral analysis
What do you dislike about the product?
Price can be intimidating for smaller organizations.
What problems is the product solving and how is that benefiting you?
We were able to free up a significant amount of our IT group's time dealing with endpoint detection and remediation, and also gain secondary benefits like enhanced network visibility and vulnerability assessments.
Peace of mind knowing I have a trusted Endpoint solution to protect the office PCs
What do you like best about the product?
Off the bat I was pleasantly surprised at CrowdStrike's support, they have been fast and efficient to get back with any issues I've had. Very easy to manage as a small IT team
What do you dislike about the product?
The dash board use to be clunky and cluttered but has since been cleaned up. Made a lot of it very user friendly.
What problems is the product solving and how is that benefiting you?
Out biggest problem was having such a small IT team that we could not always monitor every PC efficiently. CrowdStrike has made it very possible recently by allows us to setup notifications for any activity.
Recommendations to others considering the product:
Highly recommended for any company but particularly a company that doesn't have someone dedicated to cyber security.
Integral in protecting our environment in a way that removes end-user friction
What do you like best about the product?
The next-gen style endpoint protection is a game-changer and has been integral in providing high-level support with customizable threat intelligence. Not only is the protection leading the industry but the method by which the agent connects to the console and runs on the endpoint has been amazing. You can deploy on a large scale and run the agent in a way that no longer needs end-user interaction. Finally, users are protected and they don't have to think about it anymore.
What do you dislike about the product?
There's not much to dislike here. The attentiveness of, not only of the team assigned to our account but from the Overwatch team, and even the executives. They've all been fantastic.
What problems is the product solving and how is that benefiting you?
Protecting faculty endpoints and lowering the overall risk to endpoints, including servers. The benefits of peace of mind and industry-leading protection are the main benefits.
User friendly management console, technology focused, the best threat hunting mechanism.
What do you like best about the product?
User friendly management console, technology focused, the best threat hunting mechanism and good VA with machine learning concept utilization. Its an amazing technology as per the EndPoint management or EDR perspective.
What do you dislike about the product?
All looks good compared to other existing EndPoint technologies..
What problems is the product solving and how is that benefiting you?
Daily Threat hunting, EndPoint AV management, Vulnerability management and Inventory management concepts /technologies i do utilize on regular basis.
Recommendations to others considering the product:
It is the best Endpoint Protection technology i even worked on in past.
It is cloud based, easy to manage and it provides the best threat hunting mechanism, VA concepts with machine learning tech utilized. Inventory management concepts as well as report sections are fine and easy to manage.
Thank You !
It is cloud based, easy to manage and it provides the best threat hunting mechanism, VA concepts with machine learning tech utilized. Inventory management concepts as well as report sections are fine and easy to manage.
Thank You !
Quiet reassurance
What do you like best about the product?
Easy to deploy via several methods and for all our equipment Windows, Mac and Linux
Great support and regular check-ins.
Hand held through Setup, didn't need to become an expert to deploy
highly customized reports and dashboards allow for personalized profiles based on duties and resposibilities
Great support and regular check-ins.
Hand held through Setup, didn't need to become an expert to deploy
highly customized reports and dashboards allow for personalized profiles based on duties and resposibilities
What do you dislike about the product?
nothing truly to dislike, dashboards can be overwhelming initially.
having access via a mobile app might be useful but the feature set would need to be limited, mostly for notifications and mini dash boards
initially we weren't able to monitor our Linux devices but there have been improvements regarding that.
having access via a mobile app might be useful but the feature set would need to be limited, mostly for notifications and mini dash boards
initially we weren't able to monitor our Linux devices but there have been improvements regarding that.
What problems is the product solving and how is that benefiting you?
maintains patches and hotfix at OS and BIOS levels.
remotely destroyed lost assets.
helps us to identify potential issues within our programmers groups while they test and develop new code
remotely destroyed lost assets.
helps us to identify potential issues within our programmers groups while they test and develop new code
Recommendations to others considering the product:
Follow best practices guidance for tiered rollouts.
create small sub sets of groups for early testing and aggressive monitoring
Automate roll outs and updates
Large store of add-ons allowing for integration with other software management platforms
great for managing user hardware in the field even out of country and overseas
create small sub sets of groups for early testing and aggressive monitoring
Automate roll outs and updates
Large store of add-ons allowing for integration with other software management platforms
great for managing user hardware in the field even out of country and overseas
Crowdstrike
What do you like best about the product?
The security detection system and malware learning
What do you dislike about the product?
nothing at all the software has been great!
What problems is the product solving and how is that benefiting you?
a lot of threats have been solved before anything happened
It just works!
What do you like best about the product?
It's very easy to create and alter policies and apply them to different groups.
What do you dislike about the product?
I wish Reports were easier to navigate to.
What problems is the product solving and how is that benefiting you?
We needed an effective endpoint protection solution that was easy to implement and manage.
Recommendations to others considering the product:
So much easier to use than older on-prem products.
Been a very Happy Customer for about 3 years now.
What do you like best about the product?
The fact that it stops the bad actors and gives me the tools I need to respond. We rolled out CS in a couple of months to over 10 thousand customers. We were a McAfee Customer for almost 20 years and could not be more satisfied with CS.
What do you dislike about the product?
Hard to figure out what addition services we own, versus what we need to purchase. We have had several outages in the cloud, almost like they had to increase capacity, not a big deal, but annoying.
What problems is the product solving and how is that benefiting you?
Removed multiple, resource intensive agents on computers. Getting advanced threat protection.
Recommendations to others considering the product:
I would highly recommend this product.
The IR tool that you want on your side, making IR simpler since 2011.
What do you like best about the product?
The all-in-one capability of the tool, one sensor gets rid of so many other UI's. The tool collects so much information about the endpoint that the sky is the limit on what problems can be solved. Having SPL built into the tool makes our IR lives easier and allows us to not learn a new query language. Having data is great but making it actionable is where CrowdStrike thrives in this area, having multiple API's to ensure integrations can be easily done allows small businesses have comparable IR programs to large enterprises where there are 50+ employees in the security team.
What do you dislike about the product?
Can be daunting to navigate the functionality, since the tool does so much. Improvements could be made with the UI, it's a lot of data thrown into the tool. For the cost of the tool training should be free, if you want better practitioners/advocates for your tool invest in them! They are going to go to another company and demand for CS to make their life easier.
What problems is the product solving and how is that benefiting you?
Visibility, visibility, and more visibility. Before CS there was no visibility, after CS workflows were made, alerts were being responded too, we've created a stronger footprint through CrowdStrike EDR. Better team collaboration it's not just for the IR team, the network team uses the data, cloud operations teams use it, and security upper management uses it to make the security posture better. The API's are straightforward and can be easily integrated with Splunk and other security tools to make the security tool environment better through automation. Automation is the most critical aspect of the security program and upper management demands that, CrowdStrike enables security teams to be better.
Recommendations to others considering the product:
Go with the market leader, they are so focused and dialed in its unbelievable. Having them on your side is crucial to fight the bad guys.
showing 281 - 290