Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Description

Falcon Forensics delivers an all-encompassing solution for data collection and triage analysis during investigative processes. The field of forensic security typically involves extensive searches utilizing a variety of tools. By consolidating your collection and analysis into a single solution, you can accelerate the triage process. This enables incident responders to act more swiftly during investigations while facilitating compromise assessments, threat hunting, and monitoring efforts with Falcon Forensics. With pre-built dashboards and user-friendly search and viewing capabilities, analysts can rapidly sift through extensive datasets, including historical records. Falcon Forensics streamlines the data collection process and offers in-depth insights regarding incidents. Responders can access comprehensive threat context without the need for protracted queries or complete disk image collections. This solution empowers incident responders to efficiently analyze large volumes of data, both in a historical context and in real-time, allowing them to uncover critical information essential for effective incident triage. Ultimately, Falcon Forensics enhances the overall investigation workflow, leading to quicker and more informed decision-making.

Description

We have developed a structured approach to enhance incident response (IR) skills through targeted training for responders, particularly in specialized fields like healthcare. Scenarios are derived from both VerisDB and a curated list of Flexible IR incidents, allowing managers to assess their team's current capabilities and devise actionable plans for improvement. By utilizing the Mitre Att&ck Matrix, we can pinpoint specific areas that require further practice. Our runbooks are continually refined through the integration of Symbolic AI, ensuring they remain relevant and effective. Designed to be straightforward, our baseline runbooks facilitate incident management and can be tailored to fit individual environments and the needs of security analysts. Moreover, we conduct expert audits of these runbooks to enhance their quality. This process also aids in mentoring less experienced team members in the realms of threat hunting and incident response. We further simulate adversarial scenarios to provide practical experience, while also emphasizing the importance of ongoing skill development for analysts. Our strategy aligns with the critical 1-10-60 rule for incident response, incorporating a skill matrix and point system to foster continuous motivation and structured learning. Additionally, the system features basic gamification elements, such as card-based games, to make the learning process more engaging and enjoyable. Ultimately, this comprehensive approach not only strengthens individual capabilities but also enhances the overall effectiveness of the incident response team.

API Access

Has API No 

API Access

Has API No 

Screenshots View All

Screenshots View All

Integrations

CrowdStrike Falcon Yes 

Integrations

CrowdStrike Falcon No 

Pricing Details

No price information available.
Free Trial Yes 
Free Version No 

Pricing Details

No price information available.
Free Trial Yes 
Free Version No 

Deployment

Web-Based Yes 
On-Premises No 
iPhone App No 
iPad App No 
Android App No 
Windows No 
Mac No 
Linux No 
Chromebook No 

Deployment

Web-Based Yes 
On-Premises No 
iPhone App No 
iPad App No 
Android App No 
Windows No 
Mac No 
Linux No 
Chromebook No 

Customer Support

Business Hours Yes 
Live Rep (24/7) Yes 
Online Support Yes 

Customer Support

Business Hours No 
Live Rep (24/7) No 
Online Support Yes 

Types of Training

Training Docs Yes 
Webinars No 
Live Training (Online) Yes 
In Person No 

Types of Training

Training Docs No 
Webinars No 
Live Training (Online) Yes 
In Person No 

Vendor Details

Company Name

CrowdStrike

Founded

2011

Country

United States

Website

www.crowdstrike.com/products/endpoint-security/falcon-forensics/

Vendor Details

Company Name

Flexible IR

Founded

2017

Country

Singapore

Website

flexibleir.com/cyber-security-incident-response-training-skills

Product Features

Security Awareness Training

Analytics / Reporting No 
Certification Training No 
Custom Test Building No 
Gamification No 
Industry Benchmarking No 
Non-Email Based Testing No 
Online Courses No 
Phishing Simulation No 
Pre-Assessments No 
Prebuilt Training Library No 

Technical Skills Development

Analytics No 
Career Coaching No 
Discussions No 
Exercises and Projects No 
Offline Usage No 
Quizzes & Assessments No 
Videos No 

Alternatives

Cyber Triage Reviews

Cyber Triage

Sleuth Kit Labs

Alternatives

HCL iAutomate Reviews

HCL iAutomate

HCLSoftware
Binalyze AIR Reviews

Binalyze AIR

Binalyze
ICEFLO Reviews

ICEFLO

Agenor Technology