Crowdstrike Alternatives

Quick overview of Crowdstrike issues and software that you NEED to move to.
00:00 - Why Move from Crowdstrike
03:19 - Alternatives .

[Dubious_Pastimes]

I have managed a few single and multi tenant Sentinel One instances over the past few years, and have been happy enough to choose them again at each company. It's been effective while not being a major ticket generation machine like other products I have used like Webroot, for example. Just thought I would chime in on the topic as a Systems Administrator, SSCP, blah, blah, blah.

[alphakamp]

Its time for more opensource EDR. Just like other disasters that were mitigated by open code, the crowdstrike thing could have been stopped before it was a problem

[tmk]

I'd suggest Seceon, has it's own EDR and is essentially Darktrace with remediation which can be automated, You feed it syslogs and flows from core switches and firewalls to get insights and configurable actions. It also uses machine learning to compare behaviours with Mitre ATT&ck DB and many other features.

[injuneer]

Any producer of critical software should be personally and financially responsible for these kinds of errors. Their impact is so great it may be necessary for their to be an independently verified PRIOR to release

[wallyrogers]

All of this is spot on and I don't disagree with any of it. I use and manage both Crowdstrike and SentinelOne on the daily. Crowdstrike had been rock solid for the most part with updates for a LONG time. SentinelOne was more sketchy with updates to their agents, but it inherently noisy. I use Huntress and have it manage Windows Defender, and it's solid. I'd like to see it at a larger scale to compare it to both SentinelOne and Crowdstrike, but it's a solid solution. The "just move to Linux" argument I feel still needs a good look. A lot we do these days is web based, and I feel Microsoft is too big for it's own britches, they see vulnerabilities to their OS and don't patch them sometimes for months, and just assume...what are you going to do, move to another OS?! HAHAHAHA

[UltraZelda]

The fact that this software digs its roots deep into kernel space is reason enough for a mass exodus from anyone competent who is capable of making a switch. Whether a Linux kernel panic or a Windows BSOD, I don't care--no software should attach itself to the kernel without *damn* good reason.

[netizenwatch]

McAfee EPO had a DOD Contract back in 2010. Learned a lot on that system. It was functional but unnecessarily complex.

[whou]

You confirmed the 'rumor' that I heard about the update ignoring tiered deployments (N-1). Thanks

[Kylian]

the biggest issue is that Crowstrike blindly pushes updates. any form of testing would have cought these issues.

[D.von.N]

I am not too skilled in this topic, but my business class PC has HP Surestart, which claims to heal any corruption at the boot level from its second encrypted copy right before booting the system. Couldn't companies have something similar on their servers or computers and only give user privileges to general staff?

[torspedia]

6:58 yes, more often then not it's an ID-10T error. 🤪

[karcinoma]

LOL who are the geniuses who think what you said was irresponsible. Thats hilarious.

[DickDekerson]

what you said about not following n-1 is not factual. It was a rapid response content update not a software update that caused the issue so n-1 doesn't apply and would be real bad security if you tried to follow n-1 for zero day exploits. i'm more concerned with the fact so many critical systems run on windows

[thepcformula]

I do like using the PEBKAC helpdesk jargon :)

[vadim_smilansky]

"just switch to Linux" I actually switched my customer 70+ PC's to ChromeOS - I have no tickets anymore for last 3 months 🤣😂😇

[tablettablete]

MS Defender for Linux!

Here is one hehehe

[RobertFlipWilson]

I guess CrowdStrike isn't going to send you a gift card after this video...lol

[unkownx]

there's always some one that will stay with them after that f up... or! hell companies don't care... they will keep crowdstrike. but hey... maybe if they lose 4 trillion dollars, they will drop them. if I were a CEO, I would drop them on a heartbeat

[baratarosa-lx]

Que vergonha, falta de consideração e respeito, 2000 pessoas assistiram ao vídeo e menos de 200 deram o like sabendo que esta é a remuneração do desenvolvedor do canal.

[Douglas_Blake_]

One other, less addressed, concern .... This outage may have been _deliberate_ ... a ticked off employee, external influences, making a point, whatever.
Nobody seems to want to ask the questions.