2021-08-30T13:51:00Z
NC
Content Manager at PeerSpot (formerly IT Central Station)
  • 2
  • 246

How does Microsoft Defender for Endpoint compare with Crowdstrike Falcon?

Which would you choose?

2
PeerSpot user
2 Answers
HB
Infrastructure Manager at a energy/utilities company with 201-500 employees
Real User
Top 10
2021-09-13T19:25:10Z
Sep 13, 2021

The CrowdStrike solution delivers a lot of information about incidents. It has a very light sensor that will never push your machine hardware to "test", you don't have the usual "scan now" feature but on the platform, you can drill down the events to find the starter of a blocked event. 


It does have basic features to whitelist programs and paths, does show you information about what kind of threat was blocked, gives you information about user logged, machine details (SO, version, serial, Mac Address, Local and WAN IP,...) and grants you with the time, the file that executed the event, allows you to group devices and define exclusion, detection, response policies based on them. 


It does allow you to create specific profiles for each type of user like helpdesk analysts, managers, etc (with different access, etc).


The solution is pretty good, actually and I'm pretty happy with it. I don't have experience with Microsoft Defender for Endpoint but will do in a couple of months to update this. =]

Product comparison that may be of interest to you
KM
IT Consultant/Program Manager at a tech services company with 10,001+ employees
User
2021-09-07T22:29:38Z
Sep 7, 2021

Depends on your budget and on the conditions of a Microsoft license. If you have an M365 license (like E3 or E5), Microsoft is cheaper.


In terms of functionality, CrowdStrike is better.

Find out what your peers are saying about CrowdStrike Falcon vs. Microsoft Defender for Endpoint and other solutions. Updated: March 2023.
686,748 professionals have used our research since 2012.
Related Questions
Ronald Chavez - PeerSpot reviewer
Cloud Services
Feb 20, 2023
Hi everyone,  What do you think of the integration of Azure AD Services, Defender for Endpoint, and Intune as comprehensive security solutions? I have demoed these solutions together. There are as well other alternatives that integrate with SaaS services. Thank you for your help.
2 out of 4 answers
James OConnor - PeerSpot reviewer
Sr. Solutions Sales Executive - Commercial/Charity/Healthcare/SMB Individual Contributor at Hypertec Direct
Feb 15, 2023
I believe it is a good first step, and I would say even a requirement, but in no way is it a comprehensive security solution, even for endpoints.   There are many things that need to be addressed for security. In addition to this, there is XDR, MDR, more comprehensive AV for endpoints & Servers that stop attacks, Threat Hunting, Mitigation, PEN Testing, Security Training for end users, Multi-Factor Authentication (Microsoft's MFA is good but only for Microsoft products), Patch Management for Endpoints, Servers and Cloud Workloads, Network Access Control, Firewalls for On-Premise and Cloud server workloads, Network Segmentation, Password Management, Data Backups (3-2-1-1 Rule) with Immutable Backups, Power Backups, Physical Security, Monitoring, NOC/SOC services, and working towards a Zero Trust architecture...   But there are no single-point solutions that will make you secure, so don't get complacent. And you can outspend your profits if you do everything. Just remember it's best to have a layered approach that works together and looks at everything from a security perspective and how it integrates with your overall security plans and objectives to help identify holes and possible mitigations. Healthcare must do Risk Assessments by law, but I recommend that all companies of all sizes do at least annual risk assessments since there is so such thing as being too small or inconspicuous to be hit with malware or have a cyber security attack since much of the delivery is automated and not just by the script-kiddies of years gone by... Nation States are actively engaging in cyber warfare daily, along with terrorists, and opportunists looking to make big money from you...
Gaurav Chandola - PeerSpot reviewer
Senior Associate Specialist at a financial services firm with 1,001-5,000 employees
Feb 16, 2023
It depends on your company's infrastructure. Check with your cyber team whether you can sync your endpoints to Cloud using Azure AD as Azure Registered/ Azure Hybrid AD join/ Azure AD join, etc.        1. So, if the ask is only to enroll them in Intune to leverage defender/BitLocker services - go directly to Azure AD's join approach.        2. If you still want to manage patch management/mcm BitLocker but Defender via cloud, the approach should be Azure Hybrid AD join.         3. You can still use autopilot using both of these approaches. 
NC
Content Manager at PeerSpot (formerly IT Central Station)
Dec 15, 2022
Some people say it 's free and comes with Windows 10 and some people say it's expensive. So which is it?
See 1 answer
Navcharan Singh - PeerSpot reviewer
Senior Seo Executive at Ace Cloud Hosting
Dec 15, 2022
Microsoft Windows Defender is a part of Windows 10 and is available at no additional cost. It offers basic protection against malware and viruses. For more comprehensive protection, you can upgrade to a paid subscription to Microsoft Defender Advanced Threat Protection. ADTP is a cloud-based platform that delivers real-time security insights and advanced threat protection for endpoints across your enterprise. It features behavioral detection analytics, anti-ransomware, and anti-phishing technologies. Microsoft Defender ATP starts at $15 per user per month. Volume discounts are available.
Product Comparisons
Download Free Report
Download our FREE report comparing CrowdStrike Falcon and Microsoft Defender for Endpoint based on reviews, features, and more! Updated: March 2023.
DOWNLOAD NOW
686,748 professionals have used our research since 2012.