Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Description

Falcon Forensics delivers an all-encompassing solution for data collection and triage analysis during investigative processes. The field of forensic security typically involves extensive searches utilizing a variety of tools. By consolidating your collection and analysis into a single solution, you can accelerate the triage process. This enables incident responders to act more swiftly during investigations while facilitating compromise assessments, threat hunting, and monitoring efforts with Falcon Forensics. With pre-built dashboards and user-friendly search and viewing capabilities, analysts can rapidly sift through extensive datasets, including historical records. Falcon Forensics streamlines the data collection process and offers in-depth insights regarding incidents. Responders can access comprehensive threat context without the need for protracted queries or complete disk image collections. This solution empowers incident responders to efficiently analyze large volumes of data, both in a historical context and in real-time, allowing them to uncover critical information essential for effective incident triage. Ultimately, Falcon Forensics enhances the overall investigation workflow, leading to quicker and more informed decision-making.

Description

The NetWitness Platform integrates advanced SIEM and threat defense tools, providing exceptional visibility, analytical power, and automated response functions. This integration empowers security teams to enhance their efficiency and effectiveness, elevating their threat-hunting capabilities and allowing for quicker investigations and responses to threats throughout the organization’s entire infrastructure, whether it is located in the cloud, on-premises, or virtual environments. It offers the crucial visibility necessary for uncovering complex threats concealed within today’s multifaceted hybrid IT ecosystems. With its capabilities in analytics, machine learning, orchestration, and automation, analysts can more swiftly prioritize and probe into potential threats. The platform is designed to identify attacks in a significantly shorter time frame compared to other solutions and links incidents to reveal the comprehensive scope of an attack. By gathering and analyzing data from multiple capture points, the NetWitness Platform significantly speeds up the processes of threat detection and response, ultimately enhancing the overall security posture. This robust approach ensures that security teams are always a step ahead of evolving threats.

API Access

Has API No 

API Access

Has API No 

Screenshots View All

Screenshots View All

Integrations

AWS AppFabric No 
BackBox No 
Carbon Black EDR No 
Censys No 
Chronicle SOAR No 
CrowdStrike Falcon Yes 
Google Digital Risk Protection No 
HackGuard No 
Microsoft Defender for IoT No 
RadiantOne No 
Recorded Future No 
SCADAfence No 
SOC Prime Platform No 
ShadowPlex No 
Swimlane No 
Tenable One No 
ThreatConnect Risk Quantifier (RQ) No 
ThreatQ No 
urlscan.io No 

Integrations

AWS AppFabric Yes 
BackBox Yes 
Carbon Black EDR Yes 
Censys Yes 
Chronicle SOAR Yes 
CrowdStrike Falcon No 
Google Digital Risk Protection Yes 
HackGuard Yes 
Microsoft Defender for IoT Yes 
RadiantOne Yes 
Recorded Future Yes 
SCADAfence Yes 
SOC Prime Platform Yes 
ShadowPlex Yes 
Swimlane Yes 
Tenable One Yes 
ThreatConnect Risk Quantifier (RQ) Yes 
ThreatQ Yes 
urlscan.io Yes 

Pricing Details

No price information available.
Free Trial Yes 
Free Version No 

Pricing Details

No price information available.
Free Trial No 
Free Version No 

Deployment

Web-Based Yes 
On-Premises No 
iPhone App No 
iPad App No 
Android App No 
Windows No 
Mac No 
Linux No 
Chromebook No 

Deployment

Web-Based Yes 
On-Premises No 
iPhone App No 
iPad App No 
Android App No 
Windows No 
Mac No 
Linux No 
Chromebook No 

Customer Support

Business Hours Yes 
Live Rep (24/7) Yes 
Online Support Yes 

Customer Support

Business Hours Yes 
Live Rep (24/7) Yes 
Online Support Yes 

Types of Training

Training Docs Yes 
Webinars No 
Live Training (Online) Yes 
In Person No 

Types of Training

Training Docs Yes 
Webinars Yes 
Live Training (Online) Yes 
In Person No 

Vendor Details

Company Name

CrowdStrike

Founded

2011

Country

United States

Website

www.crowdstrike.com/products/endpoint-security/falcon-forensics/

Vendor Details

Company Name

NetWitness

Founded

1997

Country

United States

Website

www.netwitness.com

Product Features

Endpoint Detection and Response (EDR)

Behavioral Analytics Yes 
Blacklisting/Whitelisting No 
Continuous Monitoring Yes 
Malware/Anomaly Detection Yes 
Prioritization Yes 
Remediation Management Yes 
Root Cause Analysis Yes 

Log Management

Archiving No 
Audit Trails No 
Compliance Reporting No 
Consolidation No 
Data Visualization No 
Event Logs No 
Network Logs No 
Remediation No 
Syslogs No 
Thresholds No 
Web Logs No 

SIEM

Application Security No 
Behavioral Analytics No 
Compliance Reporting No 
Endpoint Management No 
File Integrity Monitoring No 
Forensic Analysis No 
Log Management No 
Network Monitoring No 
Real Time Monitoring No 
Threat Intelligence No 
User Activity Monitoring No 

Alternatives

Cyber Triage Reviews

Cyber Triage

Sleuth Kit Labs

Alternatives

NetworkMiner Reviews

NetworkMiner

Netresec
Fidelis Elevate Reviews

Fidelis Elevate

Fidelis Security
Binalyze AIR Reviews

Binalyze AIR

Binalyze