Crowdstrike Falcon Enterprise for Business

AI POWERED NGAV

AI powered machine learning and IOAs protect against attacks

• Protects against known and unknown malware, and malware-free or fileless attacks
• Combines the best NGAV prevention technologies such as machine learning, AI-powered indicators of attack (IOAs), high-performance memory scanning and more
• Eliminates ransomware
• Covers the gaps left by legacy AV
• Fully protects endpoints online and offline
• Cleans up known artifacts left behind from blocked malicious activity

EDR

Intelligent EDR automatically detects attacks and threat intel integration provides attribution

• Continuous raw event recording provides unparalleled visibility
• Full endpoint activity details enable proactive and managed threat hunting and forensic investigations
• Intelligent EDR automatically detects and intelligently prioritizes malicious and attacker activity, reducing alert fatigue by 90% or more
• Unravels entire attack in the easy-to-use Incident Workbench enriched with context and threat intelligence data
• Provides powerful response action to contain and investigate compromised systems, including on-the-fly remote access to endpoints to take immediate action

MANAGED THREAT HUNTING

An additional layer of monitoring and analysis to ensure that threats never get missed

Proactively hunts for threats 24/7, eliminating false negatives Uniquely pinpoints the most urgent threats in your environment and resolves false positives Threat hunters partner with your security operations team to provide clarity on an attack and guidance on what to do next.

DEVICE CONTROL

Detailed visibility on USB devices utilization

Reduces the risks associated with USB devices by providing:

• Granular policy enforcement to ensure control over USB devices used in the environment
• Effortless visibility across USB device usage, including what files are being copied to USB storage
• Insightful dashboards automatically provide detailed information such as class, vendor, product, serial number

FIREWALL MANAGEMENT

Host firewall management made easy

• Easily create, enforce and maintain firewall rules and policies
• Simplify operations by using the same lightweight Falcon agent, management console and cloud-native architecture
• Automatically identify and view specific activities, potential threats and network anomalies

INTEGRATED THREAT INTELLIGENCE

Fully understand the threats in your environment and what to do about them

Malware research and analysis at your fingertips:

• Eliminate guesswork and uncertainty to respond to threats decisively
• Automatically determine the scope and impact of threats found in your environment
• Easily prioritize responses with threat severity assessment
• Immediately get recovery steps and resolve incidents with in-depth threat analysis
• Find out if you are targeted, who is targeting you and how to prepare and get ahead

THE POWER OF THE CLOUD

Tens of thousands of endpoints operational in hours

CrowdStrike’s cloud-native platform eliminates complexity and simplifies endpoint security operations to drive down operational cost

Reduced cost and complexity: Operates without the need for constant signature updates, on-premises management infrastructure or complex integrations.

Protection of the crowd: Allows everyone to be protected against a threat encountered in just one environment. Automatically scales to adapt to growth and changing needs.

Restores endpoint performance: Installation and day-to-day operations bear zero impact on endpoints — even when analyzing, searching and investigating.

Works on day one: Deploys and is operational in minutes.