I appreciate how granular the logs are on the ThreatLocker Platform, as they show not only what file was run but also what process started it, along with certificate details and the hash. This makes it easy to identify if it matches the vendor's files without additional hidden changes. The audit function allows me to see every process that has run on the computer in a format that's more consumable than Windows logs. I also find the GUI to be easy to use when enabling applications intended to run. The setup was simple, and I like that it scales to the number of applications running on devices. It's a valuable second layer of defense against cyber threats and works well as part of our layered defense strategy, identifying configurations to set up in conjunction.

I prefer the deny all and only allow what we want to run.

I use ThreatLocker Platform primarily for application control, ensuring our clients' data is secured. I really like how it simplifies managing logs into one easily manageable location rather than manually reviewing them across different organizations. It's undoubtedly better than any other similar tools I've used before. The application control gives us insights into programs and files running on our client's computers and can even identify malicious files that initially appear safe. The network control and policy control features have been a huge help, especially without needing a domain. The integration with our Kaseya stack, providing alerts for application approval requests, has been beneficial. The initial setup was seamless with the help from the Cyber Hero team, and the Learning Mode has been great for gathering all necessary applications. Finally, I have to mention that the in-depth courses and regular trainings they offer make using the tools much easier to learn and manage.