Resumen
CrowdStrike Falcon is the industry-leading cloud-native endpoint protection platform. Built from the ground up for the cloud, Falcon delivers world-class threat prevention, detection, and response through a single lightweight agent.
In 2023, CrowdStrike introduced Charlotte AI, a generative AI security analyst that helps security teams investigate threats, write queries, and automate responses using natural language. This dramatically accelerates SOC operations and lowers the barrier to advanced threat hunting.
The platform's Threat Graph processes over 2 trillion events daily, providing unmatched threat intelligence and behavioral analytics that stop breaches before they start.
Características Clave
Charlotte AI
Generative AI assistant for threat hunting, query generation, and incident investigation.
Falcon Prevent
Next-gen antivirus with ML-based prevention that stops malware and ransomware.
Falcon Insight XDR
Extended detection and response across endpoints, cloud, and identity.
Threat Intelligence
Industry-leading threat intel from CrowdStrike's adversary tracking team.
Cloud Security
CNAPP capabilities for protecting cloud workloads across AWS, Azure, GCP.
Managed Hunting
Falcon OverWatch provides 24/7 elite threat hunting by CrowdStrike experts.
Ventajas y Desventajas
Ventajas
- Best-in-class detection rates
- Charlotte AI accelerates SOC
- Lightweight single agent
- Excellent threat intelligence
- True cloud-native architecture
- Consistent Gartner leader
Desventajas
- Premium pricing
- Module-based licensing complexity
- Limited on-prem options
- Can be resource-intensive
- Advanced features require higher tiers
Precios
CrowdStrike uses module-based licensing. Pricing starts around $8.99/endpoint/month and varies based on modules selected:
Falcon Prevent
Starting tier - Next-gen AV and prevention. ~$8.99/ep/mo
Falcon Pro
Adds EDR and threat intelligence. ~$15/ep/mo
Falcon Enterprise
Full XDR with USB device control. ~$22/ep/mo
Falcon Complete
Managed detection and response. Custom pricing
Add-on Modules
Identity protection, cloud security, log management available
Enterprise Discounts
Volume pricing available for 1,000+ endpoints
Recommended Certifications
CrowdStrike University offers specialized certifications focused on the Falcon platform. These credentials validate skills in endpoint detection and response (EDR), threat hunting, and incident response using AI-powered cybersecurity.
CCFA - Falcon Administrator
Configure and manage CrowdStrike Falcon platform, including prevention policies, detection configuration, and response actions.
CCFR - Falcon Responder
Investigate and respond to security incidents using Falcon EDR, Real Time Response, and threat intelligence.
