Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Description

Falcon Identity Threat Detection provides a comprehensive view of all Service and Privileged accounts across both your network and cloud environments, offering detailed credential profiles and identifying weak authentication measures across every domain. It allows for a thorough analysis of your organization’s domains to uncover potential vulnerabilities linked to outdated credentials or weak password practices, while also revealing all service connections and insecure authentication protocols in use. This solution continuously monitors both on-premises and cloud-based domain controllers through API integration, capturing all authentication traffic in real time. By establishing a behavioral baseline for all entities, it can identify unusual lateral movements, Golden Ticket attacks, Mimikatz traffic patterns, and other related security threats. Additionally, it aids in recognizing escalation of privilege and suspicious Service Account activities. With the capability to view live authentication traffic, Falcon Identity Threat Detection significantly accelerates the detection process, making it easier to identify and address incidents as they arise, thus enhancing overall security posture. Ultimately, this proactive monitoring ensures that organizations remain vigilant against potential identity-related threats.

Description

Protecting against unseen dangers through user and entity behavior analytics is essential. This approach uncovers irregularities and hidden threats that conventional security measures often overlook. By automating the integration of numerous anomalies into a cohesive threat, security analysts can work more efficiently. Leverage advanced investigative features and robust behavioral baselines applicable to any entity, anomaly, or threat. Employ machine learning to automate threat detection, allowing for a more focused approach to hunting with high-fidelity, behavior-based alerts that facilitate prompt review and resolution. Quickly pinpoint anomalous entities without the need for human intervention. With a diverse array of over 65 anomaly types and more than 25 threat classifications spanning users, accounts, devices, and applications, organizations maximize their ability to identify and address threats and anomalies. This combination of human insight and machine intelligence empowers businesses to enhance their security posture significantly. Ultimately, the integration of these advanced capabilities leads to a more resilient and proactive defense against evolving threats.

API Access

Has API No 

API Access

Has API No 

Screenshots View All

Screenshots View All

Integrations

Accenture Cloud Trade Promotion Management No 
Amazon Athena No 
Amazon CloudSearch No 
Amazon SES No 
Amazon Sumerian No 
Atos OneCloud No 
Cisco ACI No 
Cisco Adaptive Security Appliance (ASA) No 
Cisco AnyConnect No 
Cisco Nexus Dashboard Fabric Controller No 
Cisco Spaces No 
CrowdStrike Falcon Yes 
Hurricane for AutoCAD No 
MacroView DMF No 
SAP Ariba No 
SAP Ariba Supply Chain Collaboration No 
SAP Cloud Platform No 
Splunk Enterprise No 
Splunk Infrastructure Monitoring No 
Splunk On-Call No 

Integrations

Accenture Cloud Trade Promotion Management Yes 
Amazon Athena Yes 
Amazon CloudSearch Yes 
Amazon SES Yes 
Amazon Sumerian Yes 
Atos OneCloud Yes 
Cisco ACI Yes 
Cisco Adaptive Security Appliance (ASA) Yes 
Cisco AnyConnect Yes 
Cisco Nexus Dashboard Fabric Controller Yes 
Cisco Spaces Yes 
CrowdStrike Falcon No 
Hurricane for AutoCAD Yes 
MacroView DMF Yes 
SAP Ariba Yes 
SAP Ariba Supply Chain Collaboration Yes 
SAP Cloud Platform Yes 
Splunk Enterprise Yes 
Splunk Infrastructure Monitoring Yes 
Splunk On-Call Yes 

Pricing Details

No price information available.
Free Trial Yes 
Free Version No 

Pricing Details

No price information available.
Free Trial Yes 
Free Version No 

Deployment

Web-Based Yes 
On-Premises No 
iPhone App No 
iPad App No 
Android App No 
Windows No 
Mac No 
Linux No 
Chromebook No 

Deployment

Web-Based Yes 
On-Premises No 
iPhone App No 
iPad App No 
Android App No 
Windows No 
Mac No 
Linux No 
Chromebook No 

Customer Support

Business Hours Yes 
Live Rep (24/7) Yes 
Online Support Yes 

Customer Support

Business Hours Yes 
Live Rep (24/7) No 
Online Support Yes 

Types of Training

Training Docs Yes 
Webinars No 
Live Training (Online) Yes 
In Person No 

Types of Training

Training Docs Yes 
Webinars Yes 
Live Training (Online) Yes 
In Person No 

Vendor Details

Company Name

CrowdStrike

Founded

2011

Country

United States

Website

www.crowdstrike.com/products/identity-protection/falcon-identity-threat-detection/

Vendor Details

Company Name

Cisco

Founded

1984

Country

United States

Website

www.splunk.com/en_us/products/user-behavior-analytics.html

Alternatives

Permiso Reviews

Permiso

Permiso Security

Alternatives

FortiInsight Reviews

FortiInsight

Fortinet