Crowdstrike on Linux

[kmand]

Is anyone running this security product, especially on Ubuntu servers, and can comment on their experience? Our central IT organization wants us to run it on the servers in our department datacenter, and I'm wary about introducing proprietary software that runs as root and reports to others.

 

[f33dm3bits]

Never heard of the product, you will be better of getting an opinion else where since most of the users here are desktop users.

 

[KGIII]

I will add that if it comes down from corporate, you probably don't really have any choice in the matter - assuming you wish to keep working there.

 

[kmand]

Where are university,

I will add that if it comes down from corporate, you probably don't really have any choice in the matter - assuming you wish to keep working there.

We are a CS department in a University, so a little looser than in a more corporate environment.

 

[whitehat007]

Is anyone running this security product, especially on Ubuntu servers, and can comment on their experience? Our central IT organization wants us to run it on the servers in our department datacenter, and I'm wary about introducing proprietary software that runs as root and reports to others.

run clamapp o

 

[dcbrown73]

CrowdStrike is a EDR solution (End-Point Detection and Response) which is basically a Next Generation Anti-Virus Solution. While CrowdStrike doesn't explicitly have an Anti-Virus solution, it does have a HIPS (Host Intrusion Prevention System) which is very good.

CrowdStrike makes a very good solution, though I went with a competitor who is near the same standing, but substantially lower priced. Not to mention the other solution actually does also have built-in Anti-Virus scanning.

You do not have anything to worry about by installing CrowdStrike. Your system will actually be more secure by using it. Not less secure.

 

[LorenDB]

I can confirm that it works, since I have it on my work PC (openSUSE Tumbleweed).

(Yes, I realize that this is an older thread, but thought I'd add my $0.02 since this thread was recently active.)

 

[Sirguy]

I can confirm that it works, since I have it on my work PC (openSUSE Tumbleweed).

(Yes, I realize that this is an older thread, but thought I'd add my $0.02 since this thread was recently active.)

I have a colleague attempting to install Crowdstrike on a Tumbleweed System. She is getting dependency errors for things already on the system. Did you have that problem? We have Crowdstrike version 6.32.12905.

 

[LorenDB]

I have a colleague attempting to install Crowdstrike on a Tumbleweed System. She is getting dependency errors for things already on the system. Did you have that problem? We have Crowdstrike version 6.32.12905.

I never had dependency issues. I'm away from the office right now, but I'll try to remember to check the version next time I'm in.

 

[Sirguy]

I never had dependency issues. I'm away from the office right now, but I'll try to remember to check the version next time I'm in.

Thanks

 

[LorenDB]

@Sirguy:

Spoiler

[email protected]:~$ zypper if falcon-sensor  
Loading repository data...
Reading installed packages...


Information for package falcon-sensor:
--------------------------------------
Repository     : @System
Name           : falcon-sensor
Version        : 6.20.0-11711.suse15
Arch           : x86_64
Vendor         :  
Installed Size : 9.7 MiB
Installed      : Yes
Status         : up-to-date
Source package : falcon-sensor-6.20.0-11711.suse15.src
Upstream URL   : crowdstrike.com
Summary        : Crowdstrike Falcon Sensor
Description    :  
    The falcon-sensor package provides the Crowdstrike Falcon Sensor daemon and kernel modules.

[email protected]:~$

Maybe I have an older version. Hmm.