What is our primary use case?
CrowdStrike Falcon Data Security's main use case involves blocking PDFs that are uploaded to platforms to create or merge PDFs, and also tracking files that are uploaded to public file-sharing platforms like WeTransfer or Google Drive.
I do not remember any recent case in which CrowdStrike Falcon Data Security detected or blocked the upload of a sensitive file to an external platform because we spent some time troubleshooting, and when we implemented it, everything has been working perfectly, so there's nothing in particular to highlight; the tool is simply working well and I do not investigate it much. What we are doing now is implementing it with Microsoft Sensitivity Labels.
The data security challenges that led me to adopt CrowdStrike Falcon Data Security include that we did not know where the information was going. We knew we had sent communications to employees about how to use file transfers, but we did not know exactly whether they were using them correctly. We bought it and we see that it's useful to see where the information is going.
I am not using CrowdStrike Falcon Data Security much to protect sensitive information against generative artificial intelligence applications for now, but we're seeing where the information is going among the different AIs. This is something that I will not apply fully yet because we're just seeing where the information is going. For now, it involves the cloud consoles, and AI is something we will tackle next year.
How has it helped my organization?
CrowdStrike Falcon Data Security has positively impacted my organization because it improves data protection. Now we know where the information is going, and we are also educating users with a workflow that is sent automatically when we detect—when CrowdStrike's EDR detects—that information is being uploaded to unauthorized sites. It notifies the user that they must not do this and shares a guide on how to do it through OneDrive, which is the authorized platform for the company.
I have noticed a reduction in data leakage incidents because many users did not know what the file-sharing policy was, and now with the module, we can notify them that they're doing it wrong, block it, and also automatically notify them how they should do it.
CrowdStrike Falcon Data Security has helped identify risky data movements or possible data loss in my organization, above all, secrets, administrator passwords, APIs, API keys, and important things to be aware of.
CrowdStrike Falcon Data Security has changed my ability to distinguish between legitimate user behavior and risky or malicious activities because we have a clear line between what is good activity and what is not. When there is a suspicion, I contact the user, but by automating alerts and educating the user, we've been able to find out where the data is going and see what is being done with it, and it's working very well for us.
CrowdStrike Falcon Data Security has had a significant impact on the workload required to investigate data security incidents. It gives you a very useful dashboard, and when investigating alerts or details, it provides everything necessary to investigate it and to determine quite quickly the actions or whether it is a false positive.
What is most valuable?
I consider the best features offered by CrowdStrike Falcon Data Security to be the Data Flows, knowing where the information is going, and how the dashboard is designed. It's quite useful, and I can see exactly where the information is going in a more general way and then filter further by events.
The visualization of the Data Flows and the dashboard helps me in my day-to-day work because we were able to identify that a lot of sensitive information was being uploaded to file-sharing platforms, including company PDFs that were being uploaded incorrectly, and with this, we can prevent it.
Having data security integrated together with endpoint activity and the rest of the security context that CrowdStrike Falcon offers has a lot of value for me because it provides a unified view together with the Next-Gen SIEM alerts, which are being integrated quite well when there's a user who uses more data than they should.
What needs improvement?
I think that an aspect that could be improved in CrowdStrike Falcon Data Security is the Data-at-Rest Scanning module. Currently, it offers good detection capabilities, but the way it displays the information is not very useful.
I would like the Data-at-Rest Scanning module to offer clearer reports or more useful visualizations because it offers visualizations that are not very good.
I give CrowdStrike Falcon Data Security a seven because I think the module can still be improved a lot. It could be integrated with applications like Microsoft 365 or other SaaS, and the way it represents the information could be a bit more useful, especially Data-at-Rest. The Data-in-Motion data shown there is represented well, but maybe it could also be revised to make it easier, although it's pretty good.
CrowdStrike Falcon Data Security has improved my ability to discover and understand sensitive data across my environment a lot, but I think the Data-at-Rest Scanning module can be improved. If the visualization of the data were improved, we could see where the sensitive information is located more clearly.
For how long have I used the solution?
I have been using CrowdStrike Falcon Data Security for approximately four months.
What do I think about the stability of the solution?
I consider CrowdStrike Falcon Data Security to be very stable in its operation. It's been very stable, there haven't been failures, we've hardly opened any support cases.
What do I think about the scalability of the solution?
I assess the scalability of CrowdStrike Falcon Data Security as very easy. It shows very clearly in the dashboards where the information is going, and it has been easy to take actions.
How are customer service and support?
I think the customer support for CrowdStrike Falcon Data Security is good. I've had to contact them, and the experience has been quite fast. If I had to rate customer support on a scale from one to ten, I would give a nine.
Which solution did I use previously and why did I switch?
CrowdStrike Falcon Data Security has not helped me consolidate or replace traditional DLP tools or other data security solutions because we didn't have any. It's the first one.
I can't say what differentiates CrowdStrike Falcon Data Security from other data protection or DLP solutions that I have used previously because I haven't used any previously. I've only used CrowdStrike Falcon Data Security.
CrowdStrike Falcon Data Security is the first tool of this type in my organization.
What was our ROI?
I have not observed any return on investment since I started using CrowdStrike Falcon Data Security.
What's my experience with pricing, setup cost, and licensing?
What they did tell me is that a good deal was made with the whole pack of other CrowdStrike technologies that we bought.
Which other solutions did I evaluate?
Before choosing CrowdStrike Falcon Data Security, I didn't evaluate other options. We went straight to it, we saw that it worked, and we bought it.
What other advice do I have?
I would rate CrowdStrike Falcon Data Security a seven on a scale from one to ten.
CrowdStrike Falcon Data Security is deployed in my organization in the public cloud. I use the SaaS console that you provide us.
My advice to other people who are considering using CrowdStrike Falcon Data Security is to see exactly where their information is going and make decisions based on that.
Which deployment model are you using for this solution?
Public Cloud
If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?
Other