What is our primary use case?
My main use case for CrowdStrike Falcon Adversary Intelligence is intelligence and threat hunting.
I can give you a specific example of how I use it for intelligence or threat hunting. We received an alert regarding continuous pings from an unknown source. We were able to use the adversary intelligence to get information on where it was coming from and the threat actors behind it, which gave us insight into who our current adversaries are for our organization.
Nation-state actor type threats have been the most useful types of threat or adversary intelligence to my organization.
CrowdStrike's adversary-centric intelligence helps my team understand the threats most relevant to my organization by providing information on nation-state actors, which are our main threat.
The intelligence provided is very actionable when my team needs to investigate or respond to a threat.
CrowdStrike Falcon Adversary Intelligence has helped my organization identify or prioritize threats earlier by providing information that we did not have before.
I incorporate CrowdStrike Falcon Adversary Intelligence into threat hunting, incident response, or detection engineering by using the additional information that we did not have.
My team uses CrowdStrike Falcon Adversary Intelligence in its day-to-day security operations by utilizing it to investigate different threats that we encounter.
What is most valuable?
The best features CrowdStrike Falcon Adversary Intelligence offers include the threat intelligence information that it provides on certain groups, which definitely helps us make sure we can tighten up our tools.
I can tell you more about how the threat intelligence on specific groups helps me. There are certain areas I am able to use geoblock, which I was not able to before, but now due to the threat intelligence that I received from CrowdStrike, I am able to provide a more secure environment.
CrowdStrike Falcon Adversary Intelligence has positively impacted my organization by helping us tighten our controls and giving us more information that we did not have previously available.
The specific outcomes I have seen from CrowdStrike Falcon Adversary Intelligence include improved detection.
What needs improvement?
I do not have any suggestions for how CrowdStrike Falcon Adversary Intelligence can be improved at this time.
For how long have I used the solution?
I have been using CrowdStrike Falcon Adversary Intelligence for six months.
What do I think about the stability of the solution?
CrowdStrike Falcon Adversary Intelligence is stable.
What do I think about the scalability of the solution?
The scalability of CrowdStrike Falcon Adversary Intelligence is great.
How are customer service and support?
Customer support has been excellent.
I would rate the customer support a 10 on a scale of one to 10.
Which solution did I use previously and why did I switch?
I previously used Carbon Black and we switched due to lack of customer support, which has been excellent with CrowdStrike.
How was the initial setup?
Setup went really well due to the staff and the individuals that we have assigned to us. Overall, it was great.
What was our ROI?
So far, I have definitely seen a return on investment due to the ability to react quicker.
What's my experience with pricing, setup cost, and licensing?
My experience with pricing, setup cost, and licensing is that pricing was more expensive than the competitors, which could have potentially been an issue.
Which other solutions did I evaluate?
Before choosing CrowdStrike Falcon Adversary Intelligence, I evaluated other options, including SentinelOne.
What other advice do I have?
I would rate CrowdStrike Falcon Adversary Intelligence an eight on a scale of one to 10.
I gave it an eight because it seems to be on par with all the other threat intelligence vendors that I have utilized in the past. It is just more integrated with the current tool, which is why I prefer it.
Regarding CrowdStrike Falcon Adversary Intelligence's AI capabilities, I think its governance and security are good.
Regarding CrowdStrike Falcon Adversary Intelligence's AI capabilities, I would say its accuracy and reliability of output are really good.
I would recommend CrowdStrike Falcon Adversary Intelligence as long as pricing is something that others can tolerate, but I think it definitely pays for itself. My overall review rating for CrowdStrike Falcon Adversary Intelligence is eight.
Which deployment model are you using for this solution?
On-premises