Falcon Review

Falcon is a cloud-based, endpoint protection platform designed to help organizations detect, manage threats in real time and prevent data loss. Features include event logging, alerts, prioritization, credential management and access control.
Using Falcon Prevent antivirus, IT administrators can identify unknown malware or ransomware and block its spread without patching. To automatically investigate incidents, develop countermeasures using YARA and SNORT rules, and monitor social media, DDoS attacks, and botnets for malicious activity, network engineers can use the threat intelligence module, Falcon X. The firewall management module allows users to create, manage, enforce and modify firewall policies.

FALCON – TUTORIAL

FALCON – FEATURES

• Next-generation AV: protects from both malware and malware-free attacks; third-party tested and certified, allows organizations to safely replace their existing legacy AV.
• Endpoint detection and response: provides ongoing, comprehensive endpoint visibility into detection, response, and forensic analysis. This keeps data from being lost and gives you the ability to stop potential breaches.
• Integrated threat intelligence: integrates threat intelligence into endpoint protection, automating incident investigation and accelerating breach response.
• USB device protection: enables secure and responsible use of USB devices with effortless visibility and precise, granular control of USB device usage
• Threat hunting service: identifies attacks and stops breaches 24/7 with an elite team of experts who proactively research, investigate, and advise on threat activity in your network environment
• Host firewall control: provides easy, centralized firewall management, simplifying the management and enforcement of host firewall policies