Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Description

Falcon Forensics delivers an all-encompassing solution for data collection and triage analysis during investigative processes. The field of forensic security typically involves extensive searches utilizing a variety of tools. By consolidating your collection and analysis into a single solution, you can accelerate the triage process. This enables incident responders to act more swiftly during investigations while facilitating compromise assessments, threat hunting, and monitoring efforts with Falcon Forensics. With pre-built dashboards and user-friendly search and viewing capabilities, analysts can rapidly sift through extensive datasets, including historical records. Falcon Forensics streamlines the data collection process and offers in-depth insights regarding incidents. Responders can access comprehensive threat context without the need for protracted queries or complete disk image collections. This solution empowers incident responders to efficiently analyze large volumes of data, both in a historical context and in real-time, allowing them to uncover critical information essential for effective incident triage. Ultimately, Falcon Forensics enhances the overall investigation workflow, leading to quicker and more informed decision-making.

Description

Quest Identity Defense, previously known as Security Guardian, is a hybrid identity security platform for protecting Active Directory and Microsoft Entra ID from identity-based threats. The platform continuously observes human and non-human identities to identify Tier 0 exposures, privileged attack paths, risky configurations, anomalous behavior, and other identity vulnerabilities. Identity posture management compares AD and Entra ID configurations with security best practices and provides guidance for remediating identified weaknesses. Proactive object protection helps prevent critical Tier 0 assets from being improperly changed or compromised rather than relying exclusively on rollback after an incident. Quest's Shields Up functionality and agentic AI defense capabilities can automatically freeze at-risk users or critical objects, contain active threats, and limit attacker lateral movement. Continuous anomaly monitoring and detailed auditing show who changed what, when and where the activity occurred, and the workstation from which a change originated. AI-driven analysis converts identity telemetry into security insights and remediation guidance intended to help teams investigate threats and respond more quickly. A flexible API enables organizations to integrate Identity Defense information with existing security tools and custom workflows, while the platform is also designed to support audit and compliance requirements. Quest Identity Defense covers identity security functions across the Identify, Protect, Detect, Respond, Recover, and Govern pillars of the NIST Cybersecurity Framework and is FedRAMP High authorized.

API Access

Has API No 

API Access

Has API No 

Screenshots View All

Screenshots View All

Integrations

CrowdStrike Falcon Yes 
Google Chrome No 
Microsoft 365 No 
Microsoft Azure No 
Microsoft Edge No 
Microsoft Entra ID No 
Mozilla Firefox No 
PowerShell No 
Quest Change Auditor No 
SQL Server No 

Integrations

CrowdStrike Falcon No 
Google Chrome Yes 
Microsoft 365 Yes 
Microsoft Azure Yes 
Microsoft Edge Yes 
Microsoft Entra ID Yes 
Mozilla Firefox Yes 
PowerShell Yes 
Quest Change Auditor Yes 
SQL Server Yes 

Pricing Details

No price information available.
Free Trial Yes 
Free Version No 

Pricing Details

No price information available.
Free Trial Yes 
Free Version No 

Deployment

Web-Based Yes 
On-Premises No 
iPhone App No 
iPad App No 
Android App No 
Windows No 
Mac No 
Linux No 
Chromebook No 

Deployment

Web-Based Yes 
On-Premises No 
iPhone App No 
iPad App No 
Android App No 
Windows Yes 
Mac No 
Linux Yes 
Chromebook No 

Customer Support

Business Hours Yes 
Live Rep (24/7) Yes 
Online Support Yes 

Customer Support

Business Hours Yes 
Live Rep (24/7) No 
Online Support Yes 

Types of Training

Training Docs Yes 
Webinars No 
Live Training (Online) Yes 
In Person No 

Types of Training

Training Docs Yes 
Webinars Yes 
Live Training (Online) Yes 
In Person Yes 

Vendor Details

Company Name

CrowdStrike

Founded

2011

Country

United States

Website

www.crowdstrike.com/products/endpoint-security/falcon-forensics/

Vendor Details

Company Name

Quest Software

Founded

1987

Country

United States

Website

www.quest.com/products/identity-defense

Product Features

Alternatives

Cyber Triage Reviews

Cyber Triage

Sleuth Kit Labs

Alternatives

Change Auditor Reviews

Change Auditor

Quest Software
SmartEvent Reviews

SmartEvent

Check Point Software Technologies
Binalyze AIR Reviews

Binalyze AIR

Binalyze
Falcon Forensics Reviews

Falcon Forensics

CrowdStrike