Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Description

Falcon Identity Threat Detection provides a comprehensive view of all Service and Privileged accounts across both your network and cloud environments, offering detailed credential profiles and identifying weak authentication measures across every domain. It allows for a thorough analysis of your organization’s domains to uncover potential vulnerabilities linked to outdated credentials or weak password practices, while also revealing all service connections and insecure authentication protocols in use. This solution continuously monitors both on-premises and cloud-based domain controllers through API integration, capturing all authentication traffic in real time. By establishing a behavioral baseline for all entities, it can identify unusual lateral movements, Golden Ticket attacks, Mimikatz traffic patterns, and other related security threats. Additionally, it aids in recognizing escalation of privilege and suspicious Service Account activities. With the capability to view live authentication traffic, Falcon Identity Threat Detection significantly accelerates the detection process, making it easier to identify and address incidents as they arise, thus enhancing overall security posture. Ultimately, this proactive monitoring ensures that organizations remain vigilant against potential identity-related threats.

Description

Identify and flag any files or user behaviors that present a significant risk warranting attention from business management. This user and entity behavior analytics (UEBA) system employs advanced, rule-driven modeling to analyze various data sources, helping to identify established behavioral norms and detect potentially harmful activities. By conducting thorough analysis, it can significantly lower the risk of insider threats, which are notoriously hard to identify due to the insider's familiarity with security protocols and their ability to circumvent them. Monitor for abnormal events, such as logins from user accounts belonging to former employees, users logging in from multiple locations at once, or unauthorized individuals accessing an excessive number of sensitive documents. Additionally, keep an eye on file-related risks, including unauthorized attempts to decrypt confidential information. User-specific risks should also be observed, such as an increase in the frequency of file decryption, an uptick in printing after business hours, or a rise in the number of files sent to external parties. Overall, this comprehensive approach aims to enhance organizational security by proactively identifying potential threats.

API Access

Has API

API Access

Has API

Screenshots View All

Screenshots View All

Integrations

Axonius
CardinalOps
CrowdStrike Falcon
Dropzone AI
KernelCare Enterprise

Integrations

Axonius
CardinalOps
CrowdStrike Falcon
Dropzone AI
KernelCare Enterprise

Pricing Details

No price information available.
Free Trial
Free Version

Pricing Details

No price information available.
Free Trial
Free Version

Deployment

Web-Based
On-Premises
iPhone App
iPad App
Android App
Windows
Mac
Linux
Chromebook

Deployment

Web-Based
On-Premises
iPhone App
iPad App
Android App
Windows
Mac
Linux
Chromebook

Customer Support

Business Hours
Live Rep (24/7)
Online Support

Customer Support

Business Hours
Live Rep (24/7)
Online Support

Types of Training

Training Docs
Webinars
Live Training (Online)
In Person

Types of Training

Training Docs
Webinars
Live Training (Online)
In Person

Vendor Details

Company Name

CrowdStrike

Founded

2011

Country

United States

Website

www.crowdstrike.com/products/identity-protection/falcon-identity-threat-detection/

Vendor Details

Company Name

Fasoo

Country

United States

Website

en.fasoo.com/products/fasoo-riskview/

Alternatives

Alternatives

FortiInsight Reviews

FortiInsight

Fortinet
Securonix UEBA Reviews

Securonix UEBA

Securonix