Falcon

Vorteile

Detailed analysis of processes, logon attempts, and great ability to sync with Splunk and Active Directory. Great dashboard to add to the best parts. The falcon complete team does a great work to ensure endpoint security is well

Nachteile

The falcon complete team sometimes does not provide additional details about False Positive events or why a software was classified malicious.

Vorteile

Good interface, lots of Splunk dashboards integrated in the dashboards. Good drilldown capability. Love the process execution tracking functionality

Nachteile

The interface took a couple hours (tops) to get used to, but it wasn't bad. There was a little snag with Mac OS X Catalina, but that's been resolved.

Vorteile

Very light solution to run on the computers, it is just a client that alerts the portal about the virus on computers and take some actions based on what were configured inside the portal.
Easy to install/deploy, not so many options to choose, it is very straight to the point, also the options and configurations inside management portal are pretty easy to use.
However, it updates automatically on the computers and servers.

Nachteile

Sometimes it is not update automatically, and I had some problems to remove the software, the key that is used to install/remove fails sometimes. I can mention that the computers take some time to appear inside the management portal, and you do not know if it is working properly or not. Another thing that you can miss, you cannot run a scan on your computer manually, to find viruses or other malicious files, it is supposed to be monitored all the time through the portal.

Vorteile

Crowdtsrike falcon agent is very lightweight and has lower resource utilization in endpoints. Further it supports all the endpoint operating Systems. Interfaces are simple and even non-technical people can understand. Dashboards are informative and graphical representation is perfect with breakdown approach. It provides remote control of the endpoint through the command line and one of the most needed options which most other Anti viruses don't have. It has threat intelligence with correlation and can map endpoints with an incident to provide the big picture.

Nachteile

Crowdstrike falcon sensor update is frequent and bandwidth utilization is a bit high since each and every node needs updates. When you are in a limited bandwidth with a higher number of PC’s this will cause too high bandwidth utilization and can interrupt your operation. When you. Connecting through proxy server machine detection is taking long.time Crowdstrike doesn’t support Windows XP. So if you have windows XP PCs in your environment you need some other antivirus to protect them.

Vorteile

Crowdstrike handles endpoint security monitoring and detection better than any solution available.

Nachteile

The rate at which they add partner integrations