Who Has Installed CrowdStrike? Question on "Medium" Severity Detections

egrizzlyegrizzly Member Posts: 533 ■■■■■□□□□□
in Incident Response
Has anybody here installed or used CrowdStrike - the popular EDR tool? It was recently deployed in our environment but I don't think it's working correctly.

On the "Detections" dashboard the True Positive/False Positive ratio on what we're seeing on Medium severity is 2/8.

So typically, are Medium severity detections set to "Prevent" (Blocked) or just to Detect? Where are the back-end can you adjust this setting?
B.Sc (Info. Systems), CISSP, CCNA, CCNP, Security+
Tagged:
· Share on FacebookShare on Twitter

Comments

Sign In or Register to comment.