CrowdStrike Falcon Sandbox Reviews

Name: CrowdStrike Falcon Sandbox
Brand: CrowdStrike
Rating: 4.0 (4 reviews)

4.0 out of 5

4 reviews
100% willing to recommend

What is CrowdStrike Falcon Sandbox?

CrowdStrike Falcon Sandbox detects threats without impacting endpoint performance, providing users with a seamless experience. It delivers detailed reports for collaboration and offers malware analysis capabilities, identifying potential breaches and suspicious files.

Get the Anti-Malware Tools Buyer's Guide and find out what your peers are saying about CrowdStrike Falcon Sandbox, Microsoft Defender for Endpoint, VirusTotal and more!

CrowdStrike Falcon Sandbox is the #26 ranked solution in top Anti-Malware Tools. PeerSpot users give CrowdStrike Falcon Sandbox an average rating of 8.0 out of 10. CrowdStrike Falcon Sandbox is most commonly compared to Microsoft Defender for Endpoint: CrowdStrike Falcon Sandbox vs Microsoft Defender for Endpoint. CrowdStrike Falcon Sandbox is popular among the large enterprise segment, accounting for 68% of users researching this solution on PeerSpot. The top industry researching this solution are professionals from a financial services firm, accounting for 14% of all views.

Buyer's Guide

Anti-Malware Tools

December 2024

Get the category report

Helped 831,158 peers since 2012

Featured reviews

Valarie

SOC Technical Lead at a educational organization with 1,001-5,000 employees

It provides a safe way to analyze and review documents that may have sensitive information without uploading them to a public platform. Additionally, provides an easy way to spin up a VM without requiring additional resources and patching of personal or team-managed virtualization. This empowers analysts to fully analyze and understand the behaviors of varying executables and sites. This has enabled our team to provide a better experience to our users by identifying any false positives from our email gateway and promoting security hygiene by reporting phishing emails. An analyst will personally reply to the report with their findings after sandboxing the artifacts.

Read full review

Mahmoud_Yassin

CTSO at Cyb3r

Falcon Sandbox is used to quarantine files, scan them, and ensure there are no malicious threats or IOCs related to these files. It provides threat feed to the CrowdStrike endpoint, assisting in detection and response. It is used in the client's environment, where Mahmoud's team implements and…

Read full review

Zuhair Hasan

Manager, Information Technology Security at Nesma

The technical support is medium - they could improve, as communication is sometimes slow or late. There are missing detections that other tools catch. For improvements, we need easier ways to view full incident information and better presentation of data. Adding risk indicators for incidents would help decide on immediate actions. The platform should provide more information about incident risks to help less knowledgeable staff make decisions.

Read full review

CrowdStrike Falcon Sandbox mindshare

As of January 2025, the mindshare of CrowdStrike Falcon Sandbox in the Anti-Malware Tools category stands at 1.4%, up from 0.3% compared to the previous year, according to calculations based on PeerSpot user engagement data.

Anti-Malware Tools

Key learnings from peers

Last updated Dec 4, 2024

Valuable Features

CrowdStrike Falcon Sandbox excels in detecting threats without affecting endpoint performance. It delivers detailed reports and enables interactivity essential for incident response. It effectively analyzes malware, recording network connections, processes, and file behaviors. Users appreciate its ability to study metadata, determine threat ratings for files, and provide threat feeds. Its comprehensive resource supports seamless file analysis from diverse sources like emails and cloud drives, aiding in understanding potential breaches.

"The most valuable features include malware detection, threat rating related to files, studying the metadata of the files, and providing threat feeds to the endpoint."
"The tool helps to obtain information about potential company breaches. The malware analysis capability is very effective. We check files from various sources, such as emails, USBs, and cloud drives."
"It provides a safe way to analyze and review documents that may have sensitive information without uploading them to a public platform. Additionally, provides an easy way to spin up a VM without requiring additional resources and patching of personal or team-managed virtualization."

Room for Improvement

CrowdStrike Falcon Sandbox could improve by addressing false positives, incorporating additional operating systems like MacOS and Windows 11, and enhancing technical support responsiveness. Aesthetic formatting of reports would benefit stakeholders. More intuitive data presentation and risk indicators for incidents would assist less experienced staff. Integration with SOAR products, combined with behavior detection alongside IOCs and threat detection, would provide broader integration capabilities for clients.

"The product needs integration with SOAR products to add more integration points, which is important for various clients."
"The technical support is medium - they could improve, as communication is sometimes slow or late. There are missing detections that other tools catch. For improvements, we need easier ways to view full incident information and better presentation of data. Adding risk indicators for incidents would help decide on immediate actions. The platform should provide more information about incident risks to help less knowledgeable staff make decisions."
"The detailed report is very valuable, but not always accurate. This is a great resource to share amongst team members and stakeholders after analysis."

Pricing

"Price-wise, the tool is a bit above mid-range, maybe 7 out of 10, where 10 is the most expensive."
"CrowdStrike Falcon Sandbox is not cheap; however, whether it should be more affordable is a decision best left to the company."

Popular Use Cases

CrowdStrike Falcon Sandbox is primarily utilized to detect hidden malicious programs by identifying unknown threats. It assists in investigating URLs and potential malware, helping users check if files are malicious. By scanning and quarantining files, users ensure safety from threats or IOCs. High email volumes necessitate sandboxing links and attachments. It provides threat feeds to CrowdStrike endpoints, aiding in detection and response across diverse environments with various document formats.

These insights are based on the in-depth reviews provided by peers to help you make a better buying decision.

Download our Anti-Malware Tools Buyer's Guide for additional reliable information.

Top industries

By visitors reading reviews

Financial Services Firm

14%

Comms Service Provider

13%

Government

10%

Media Company

10%

Educational Organization

Healthcare Company

University

Computer Software Company

Manufacturing Company

Leisure / Travel Company

Hospitality Company

Retailer

Real Estate/Law Firm

Wholesaler/Distributor

Construction Company

Energy/Utilities Company

Logistics Company

Outsourcing Company

Pharma/Biotech Company

Recruiting/Hr Firm

Security Firm

Transportation Company

Compare CrowdStrike Falcon Sandbox with alternative products

Learn more about CrowdStrike Falcon Sandbox

CrowdStrike Falcon Sandbox is designed for threat detection, offering a comprehensive approach to identifying hidden malicious programs and analyzing harmful URLs. Its integration allows for seamless evaluation of files and sandboxing of email links and attachments, supporting threat detection and response. Users value its capabilities in network connection recording, metadata analysis, and threat ratings, although some express a need for MacOS and Windows 11 support and improved SOAR integration.

What are the key features of CrowdStrike Falcon Sandbox?

Executive Detonation: Provides a simulated environment for realistic threat analysis.
Human-like Interaction: Emulates user actions for accurate threat identification.
Comprehensive Recording: Tracks network connections, processes, hashes, and fingerprints.
Threat Feeds: Supplies vital information for detecting emerging threats.

What benefits should users expect?

Malware Detection: Effectively identifies and quarantines malware.
Detailed Reports: Facilitates sharing among teams and stakeholders.
Threat Analysis: Assists in evaluating potential breach data.
Efficient Threat Handling: Offers timely identification of suspicious activities.

CrowdStrike Falcon Sandbox is implemented by organizations to strengthen security across email systems and endpoint devices. It is particularly valuable in industries needing thorough threat investigations and rapid responses to potentially harmful content, empowering users with essential threat intelligence.