Average Ratings 9 Ratings

Total
ease
features
design
support

Average Ratings 6 Ratings

Total
ease
features
design
support

Description

CrowdStrike Falcon is a cutting-edge cybersecurity platform that operates in the cloud, delivering robust defenses against a variety of cyber threats such as malware, ransomware, and complex attacks. By utilizing artificial intelligence and machine learning technologies, it enables real-time detection and response to potential security incidents, while offering features like endpoint protection, threat intelligence, and incident response. The system employs a lightweight agent that consistently scans endpoints for any indicators of malicious behavior, ensuring visibility and security with minimal effect on overall system performance. Falcon's cloud-based framework facilitates quick updates, adaptability, and swift threat responses across extensive and distributed networks. Its extensive suite of security functionalities empowers organizations to proactively prevent, identify, and address cyber risks, establishing it as an essential resource for contemporary enterprise cybersecurity. Additionally, its seamless integration with existing infrastructures enhances overall security posture while minimizing operational disruptions.

Description

Leading the market, QRadar SIEM is designed to surpass adversaries through enhanced speed, scalability, and precision. As digital threats escalate and cyber attackers become more advanced, the importance of SOC analysts has reached unprecedented heights. QRadar SIEM empowers security teams to tackle current threats proactively by leveraging sophisticated AI, robust threat intelligence, and access to state-of-the-art resources, maximizing the potential of analysts. Whether you require a cloud-native solution tailored for hybrid environments, or a system that complements your existing on-premises setup, IBM offers a SIEM solution that can cater to your specific needs. Furthermore, harness the capabilities of IBM's enterprise-grade AI, which is crafted to improve the efficiency and knowledge of each security team member. By utilizing QRadar SIEM, analysts can minimize time-consuming manual tasks such as case management and risk assessment, allowing them to concentrate on essential investigations and remediation efforts while enhancing overall security posture.

API Access

Has API Yes 

API Access

Has API No 

Screenshots View All

Screenshots View All

Integrations

AllSecureX Yes 
Axonius Yes 
BlueCat Gateway Yes 
CardinalOps Yes 
Chronicle SOAR Yes 
D3 Smart SOAR Yes 
Dragos Platform Yes 
Guardeon Yes 
Optiv Managed XDR Yes 
Proofpoint Identity Threat Defense Yes 
SOC Prime Platform Yes 
SecurityHQ Yes 
SeeMetrics Yes 
Splunk SOAR Yes 
ThreatConnect Risk Quantifier (RQ) Yes 
ThreatConnect Threat Intelligence Platform Yes 
ThreatQ Yes 
UnderDefense Yes 
VirtualArmour Yes 

Integrations

AllSecureX Yes 
Axonius Yes 
BlueCat Gateway Yes 
CardinalOps Yes 
Chronicle SOAR Yes 
D3 Smart SOAR Yes 
Dragos Platform Yes 
Guardeon Yes 
Optiv Managed XDR Yes 
Proofpoint Identity Threat Defense Yes 
SOC Prime Platform Yes 
SecurityHQ Yes 
SeeMetrics Yes 
Splunk SOAR Yes 
ThreatConnect Risk Quantifier (RQ) Yes 
ThreatConnect Threat Intelligence Platform Yes 
ThreatQ Yes 
UnderDefense Yes 
VirtualArmour Yes 

Pricing Details

No price information available.
Free Trial Yes 
Free Version No 

Pricing Details

No price information available.
Free Trial No 
Free Version No 

Deployment

Web-Based Yes 
On-Premises No 
iPhone App No 
iPad App No 
Android App No 
Windows No 
Mac No 
Linux No 
Chromebook No 

Deployment

Web-Based Yes 
On-Premises Yes 
iPhone App No 
iPad App No 
Android App No 
Windows Yes 
Mac Yes 
Linux No 
Chromebook No 

Customer Support

Business Hours No 
Live Rep (24/7) Yes 
Online Support Yes 

Customer Support

Business Hours No 
Live Rep (24/7) No 
Online Support Yes 

Types of Training

Training Docs Yes 
Webinars Yes 
Live Training (Online) No 
In Person Yes 

Types of Training

Training Docs Yes 
Webinars No 
Live Training (Online) No 
In Person No 

Vendor Details

Company Name

CrowdStrike

Founded

2011

Country

United States

Website

www.crowdstrike.com/platform/

Vendor Details

Company Name

IBM

Founded

1911

Country

United States

Website

www.ibm.com/products/qradar-siem

Product Features

Artificial Intelligence

Chatbot No 
For Healthcare No 
For Sales No 
For eCommerce No 
Image Recognition No 
Machine Learning No 
Multi-Language No 
Natural Language Processing No 
Predictive Analytics No 
Process/Workflow Automation No 
Rules-Based Automation No 
Virtual Personal Assistant (VPA) No 

Brand Protection

Case Management No 
Domain Monitoring No 
Investigation Management No 
Marketplace Monitoring No 
Mobile App Monitoring No 
Paid Search Monitoring No 
Prioritization No 
Social Media Monitoring No 

Cloud Security

Antivirus No 
Application Security No 
Behavioral Analytics No 
Encryption No 
Endpoint Management No 
Incident Management No 
Intrusion Detection System No 
Threat Intelligence No 
Two-Factor Authentication No 
Vulnerability Management No 

Cloud Workload Protection

Anomaly Detection No 
Asset Discovery No 
Cloud Gap Analysis No 
Cloud Registry No 
Data Loss Prevention (DLP) No 
Data Security No 
Governance No 
Logging & Reporting No 
Machine Learning No 
Security Audit No 
Workload Diversity No 

Computer Security

Anti Spam No 
Antivirus Yes 
Audit Trail Yes 
Compliance Management No 
Database Security Audit No 
File Access Control Yes 
Financial Data Protection No 
Maintenance Scheduling No 
Real Time Monitoring Yes 
Security Event Log Yes 
Virus Definition Update No 
Vulnerability Protection Yes 

Cybersecurity

AI / Machine Learning No 
Behavioral Analytics No 
Endpoint Management No 
IOC Verification No 
Incident Management No 
Tokenization No 
Vulnerability Scanning No 
Whitelisting / Blacklisting No 

Endpoint Detection and Response (EDR)

Behavioral Analytics Yes 
Blacklisting/Whitelisting No 
Continuous Monitoring Yes 
Malware/Anomaly Detection Yes 
Prioritization No 
Remediation Management Yes 
Root Cause Analysis No 

Endpoint Protection

Activity Log Yes 
Antivirus Yes 
Application Security Yes 
Behavioral Analytics Yes 
Device Management Yes 
Encryption No 
Signature Matching Yes 
Web Threat Management Yes 
Whitelisting / Blacklisting Yes 

Product Features

Incident Response

Attack Behavior Analytics No 
Automated Remediation No 
Compliance Reporting No 
Forensic Data Retention No 
Incident Alerting No 
Incident Database No 
Incident Logs No 
Incident Reporting No 
Privacy Breach Reporting No 
SIEM Data Ingestion / Correlation No 
SLA Tracking / Management No 
Security Orchestration No 
Threat Intelligence No 
Timeline Analysis No 
Workflow Automation No 
Workflow Management No 

Network Traffic Analysis (NTA)

Anomalous Behavior Detection No 
High Bandwidth Usage Monitoring No 
Historical Behavior Data No 
Identify High Network Traffic Sources No 
Network Transaction Visibility No 
Stream Data to IDR or Data Lake No 
Traffic Decryption No 

SIEM

Application Security No 
Behavioral Analytics Yes 
Compliance Reporting No 
Endpoint Management Yes 
File Integrity Monitoring No 
Forensic Analysis No 
Log Management No 
Network Monitoring Yes 
Real Time Monitoring Yes 
Threat Intelligence Yes 
User Activity Monitoring Yes 

Vulnerability Scanners

Asset Discovery No 
Black Box Scanning No 
Compliance Monitoring No 
Continuous Monitoring No 
Defect Tracking No 
Interactive Scanning No 
Logging and Reporting No 
Network Mapping No 
Perimeter Scanning No 
Risk Analysis No 
Threat Intelligence No 
Web Inspection No 

Alternatives