Falcon Security and IT operations Features
Orchestration (5)
-
Asset Management
Lets users group and organize their endpoints to gather threat intelligence on specific technologies.
-
Security Workflow Automation
Reduces the need for IT and security professionals to iterate repetitive tasks associated with gathering threat information.
-
Deployment
The process in which users integrate their existing security systems and endpoints to the threat intelligence platform.
-
Sandboxing
A feature that allows security testing and information gathering to occur in a secure, resource independent environment.
Remediation Management
Identify and orchestrate execution of actions needed to restore systems to optimal conditions
Information (5)
-
Proactive Alerts
Prior to security incidents, the product will alert users when a new, relevant vulnerability or threat is discovered.
-
Malware Detection
Provides multiple techniques and information sources to alert users of malware occurrences.
-
Intelligence Reports
The ability for users to produce reports outlining detailed and personalized threat information
Threat Intelligence
Information to prevent, understand and identify cyber threats
Real-time Alerts
Receive notification of issues as soon as they occur
Personalization (6)
-
Endpoint Intelligence
Analysis for users to examine threat intelligence data specific to their endpoint devices.
-
Security Validation
The product has a recurring examination process to update your intelligence reports as new threats emerge.
-
Dynamic/Code Analysis
The ability to examine your application, website, or database's code to uncover zero-day vulnerabilities.
Event Analysis
Investigate security threats and validate malicious activity
Web-Application Security
Identify and respond to security threats to web applications
Application Security
Identify and respond to security threats to developed applications
Analysis (7)
File Analysis
Identifies potentially malicious files and applications for threats files and applications for abnormalities and threats.
Memory Analysis
Analyzes infortmation from a computer or other endpoint's memory dump for information removed from hard drive.
Registry Analysis
Identifies recently accessed files and applications for abnormalities and threats.
Email Analysis
Parses and/or extracts emails and associated content for malware, phishing, other data that can be used in investigations.
Linux Analysis
Allows for parsing and/or extraction of artifacts native to Linux OS including but not limited to system logs, SSH activity, and user accounts.
Event Analysis
Investigate security threats and validate malicious activity
Network Analysis
Run tests on a network to find the root cause of network issues
Functionality (4)
Incident Alerts
Gives alerts when incidents arise. Some responses may be automated, but users will still be informed.
Anomaly Detection
Constantly monitors activity related to user behavior and compares activity to benchmarked patterns.
Continuous Analysis
Constantly monitors traffic and activity. Detects anomalies in functionality, user accessibility, traffic flows, and tampering.
Decryption
Facilitates the decryption of files and data stored using cryptographic algorithms.
Remediation (5)
Incident Reports
Produces reports detailing trends and vulnerabilities related to their network and infrastructure.
Remediation Suggestions
Provides relevant and helpful suggestions for vulnerability remediation upon detection.
Response Automation
Reduces time spent remedying issues manually. Resolves common network security incidents quickly.
Threat Response
Identifying, analyzing, and mitigating security issues and taking appropriate action to protect systems and data from potential harm
Customizable Reports
Alter the layout and content of reports
Monitoring (6)
-
Gap Analysis
Analyzes data associated with denied entries and policy enforcement, giving information of better authentication and security protocols.
-
Vulnerability Intelligence
Stores information related to common vulnerabilities and how to resolve them once incidents occur.
-
Compliance Monitoring
Monitors data quality and sends alerts based on violations or misuse.
-
Continuous Monitoring
Aggregates real-time updates and historical data from multiplate internal and external data sources to support ongoing proactive threat response.
Server Monitoring
Continuously scan servers on a designated network to monitor health and search for any irregularities or failures
Real-Time Monitoring
Active monitoring of systems, applications, or networks
Asset Management (4)
-
Asset Discovery
Detects new assets as they enter cloud environments and networks to add to asset inventory.
-
Shadow IT Detection
Identifies unsanctioned software.
-
Change Management
Provides tools to track and implement required security policy changes.
Compliance Management
Track and manage adherence to policies for any service, product, process, or supplier
Risk Management (4)
-
Risk-Prioritization
Allows for vulnerability ranking by customized risk and threat priorities.
-
Reconnaissance
Gathers information about the system and potential exploits to be tested.
-
At-Risk Analysis
Uses machine learning to identify at-risk data.
-
Threat Intelligence
Stores information related to common threats and how to resolve them once incidents occur.
Generative AI (9)
AI Text Summarization
Condenses long documents or text into a brief summary.
AI Text Generation
Allows users to generate text based on a text prompt.
AI Text Summarization
Condenses long documents or text into a brief summary.
Generative AI
Use AI to generate content in the form of text, images, videos, etc.
-
AI Text Summarization
Condenses long documents or text into a brief summary.
Generate Attack Scenarios
Use AI to propose possible threat actor tactics, techniques, and procedures against specific environments or assets.
Generate Threat Detection Rules
Use AI to automatically create detection rules based on observed patterns.
Generate Threat Summaries
Use AI to produce concise summaries of complex threat reports or alerts.
Generative AI
Use AI to generate content in the form of text, images, videos, etc.
Agentic AI - Threat Intelligence (4)
Autonomous Task Execution
Capability to perform complex tasks without constant human input
Multi-step Planning
Ability to break down and plan multi-step processes
Proactive Assistance
Anticipates needs and offers suggestions without prompting
Decision Making
Makes informed choices based on available data and objectives
Additional Functionality (95)
Activity Dashboard
Dashboard to view the status of ongoing processes, identify current incidents and track past activities
Reporting/Analytics
View and track pertinent metrics to find patterns and gain insights from data
Threat Intelligence
Information to prevent, understand and identify cyber threats
AI Copilot
A virtual assistant that uses AI to pursue goals and complete tasks on behalf of users
Secure Data Storage
Securely stores data to prevent data loss or breaches
Case Management
Work on a set of tasks related to a particular charge, patient, legal issue or any other complex entity or process
Text Extraction
Process digital photos and/or scans of various document types and extract text from images (JPG, BMP, TIFF, GIF)
Search/Filter
Search and filter data across systems to locate required information by entering keywords or certain criteria
Multiple File Format Support
Supports multiple file formats, such as Doc, Docx, PDF, HTML, etc.
Prioritization
Arrange tasks based on the level of priority or urgency
Web Data Extraction
Extract data from any online source.
Reporting & Statistics
Collection, analysis, and representation of numerical data and generation of reports to understand various patterns
Real-Time Chat
Engage in direct, instant messaging with customers, users, etc.
Optical Character Recognition
Ability to recognize printed or written text within digital images or scanned documents
Third-Party Integrations
Set up connections to third-party platforms to improve business processes
Access Management
Control and manage access to company resources
Task Management
Create, manage and track all task activities and progression
Data Extraction
Automatically retrieve and pull information from documents, websites, images, data sets, and other sources
Data Security
Protect sensitive data for digital privacy
Data Import/Export
Import and export data to and from software applications
Incident Management
Manage and track all disruptions and incidents
User Management
Manage user accounts, profiles, roles, permissions, and other details across applications, devices or networks
Web Threat Management
API
Application programming interface that allows for integration with other systems/databases
IT Incident Management
Manage incidents related to outages or breaches in functionality of IT systems
Data Visualization
Graphical representation of data
Data Recovery
Ability to restore deleted, hidden, or lost data from an email server/system
Vulnerability/Threat Prioritization
Classify levels of threat and organize actions based on priorities
Real-Time Reporting
Active reporting of data and metrics
Investigation Management
Oversee people and resources to carry out an investigation
Incident Reporting
Report and update incidents related to health or workplace injuries that occur on a job or en route to a job site
Messaging
Communicate using messages within the system
Endpoint Protection
Protect users working remotely and provide secure environments for personal devices to access company programs
Analytics
Tools for the systematic analysis of various types of data or statistics
Dashboard
Assembly of graphs and charts for visualizing and tracking statistics/metrics
Threat Protection
Protect incoming and outgoing communications against malware, spam, display spoofing, and other threats
Access Control
Regulate who can view information within the system
Network Monitoring
Tracks and makes accessible data on the health of servers and other network components.
Behavioral Analytics
Track and analyse user behavior within a system or network
Customizable Dashboard
Alter the layout and content of dashboards
Access Controls/Permissions
Define levels of authorization for access to specific files or systems
Alerts/Notifications
Alerts or notifications of various types such as pop-up messages, sounds, banners, or badges
SSL Security
Security protocol that ensures secure, encrypted communication over the internet, safeguarding sensitive data from unauthorized access
HIPAA Compliant
Compliant with HIPAA, which sets standards for sensitive patient data protection
API
Application programming interface that allows for integration with other systems/databases
Threat Response
Identifying, analyzing, and mitigating security issues and taking appropriate action to protect systems and data from potential harm
Endpoint Protection
Protect users working remotely and provide secure environments for personal devices to access company programs
Maintenance Scheduling
Schedule predetermined or ad hoc maintenance services and labor requests
Third-Party Integrations
Set up connections to third-party platforms to improve business processes
Security Auditing
Systematic evaluation of the security of a company's overall security system and situation
Application Security
Identify and respond to security threats to developed applications
Encryption
Convert data into a code for security
Network Security
Prevent and monitor unauthorized access, misuse, modification, or denial of a computer network and network-accessible resources
Real-Time Reporting
Active reporting of data and metrics
AI Copilot
A virtual assistant that uses AI to pursue goals and complete tasks on behalf of users
Reporting/Analytics
View and track pertinent metrics to find patterns and gain insights from data
Authentication
Verify the identity of users/devices to enable secure access
Financial Data Protection
Anti Virus
Prevents, detects and removes malware
Secure Data Storage
Securely stores data to prevent data loss or breaches
Virus Definition Update
Activity Dashboard
Dashboard to view the status of ongoing processes, identify current incidents and track past activities
VPN
Extend virtual private network over public networks to enable protected information exchange
Audit Trail
A record of all activities within the system, including user access, changes made, etc.
Anti Spam
Techniques to prevent and filter unwanted or unsolicited email spam from reaching a user's inbox
Access Controls/Permissions
Define levels of authorization for access to specific files or systems
Data Visualization
Graphical representation of data
Alerts/Escalation
System alerts about the need to escalate an issue or request
Data Security
Protect sensitive data for digital privacy
Real-Time Reporting
Active reporting of data and metrics
Real-Time Analytics
Analyze and gain insights into data in real-time
Network Monitoring
Tracks and makes accessible data on the health of servers and other network components.
API
Application programming interface that allows for integration with other systems/databases
Reporting/Analytics
View and track pertinent metrics to find patterns and gain insights from data
Alerts/Notifications
Alerts or notifications of various types such as pop-up messages, sounds, banners, or badges
Behavior Analytics
Track and analyze user behavior within a system or network
AI Copilot
A virtual assistant that uses AI to pursue goals and complete tasks on behalf of users
Activity Dashboard
Dashboard to view the status of ongoing processes, identify current incidents and track past activities
Profiling
Scanning of users & devices to ensure there are no potential threats
Cloud Backup
Process of backing up of files and applications to cloud-based remote servers for protection of data
Data Visualization
Graphical representation of data
Activity Monitoring
Track and report on everything that happens within the system or network
Network Scanning
Scanning networks to identify security threats
Event Logs
A chronological record of actions or occurrences within a network, software, or process
Monitoring
Observe and track the demand, usage, progress or quality of a system, product, or user
Server Monitoring
Continuously scan servers on a designated network to monitor health and search for any irregularities or failures
Vulnerability Scanning
Discover patch statuses and vulnerabilities
Incident Reporting
Report and update incidents related to health or workplace injuries that occur on a job or en route to a job site
Activity Tracking
Track and document all activities across devices, networks, and other systems
Reporting & Statistics
Collection, analysis, and representation of numerical data and generation of reports to understand various patterns
Network Provisioning
Set up and configure network resources to make them accessible for authorized users, devices and servers
Prioritization
Arrange tasks based on the level of priority or urgency
Threat Response
Identifying, analyzing, and mitigating security issues and taking appropriate action to protect systems and data from potential harm
Real-Time Data
Receive data and information in real time
IT Reporting
Tracking KPIs over a certain period to assess helpdesk issues, ticket status & resolution, costs and revenue stats, assets usage & more
