Licenciamiento y capacidades activables
Modulos PMDefender por licencia
Administra las capacidades que se activan por plan: NGAV, EDR, IOA/IOC, Threat Intel, OverWatch, Discover, Identity, Cloud, Fusion y APIs.
Inventario de licencia
10 modulos y capacidades
| Modulo | Categoria | Licencia | Estado | Madurez | Acciones |
|---|---|---|---|---|---|
| Consola unificada y APIs | Platform | core | 93% |
Ver Editar | |
| Falcon Prevent (NGAV) | Endpoint prevention | core | 90% |
Ver Editar | |
| Falcon Insight (EDR) | Endpoint detection response | professional | 92% |
Ver Editar | |
| Custom IOA & IOC Management | Detection engineering | enterprise | 88% |
Ver Editar | |
| Falcon Discover (IT/Hygiene & Visibility) | Asset hygiene | enterprise | 84% |
Ver Editar | |
| Falcon Fusion (automation / mini-SOAR) | Automation | enterprise | 91% |
Ver Editar | |
| Falcon Identity Protection | Identity security | enterprise | 90% |
Ver Editar | |
| Falcon X (Threat Intelligence) | Threat intelligence | enterprise | 86% |
Ver Editar | |
| Falcon Cloud Security / CSPM / CWPP | Cloud security | elite | 89% |
Ver Editar | |
| Falcon OverWatch (Threat Hunting gestionado) | Managed detection | managed | 94% |
Ver Editar |
Modificar modulo
Custom IOA & IOC Management
Detection engineering
Custom IOA & IOC Management
Reglas avanzadas de comportamiento y gestion de hashes, dominios, IPs y procesos con allow/block.
endpoint.processendpoint.filethreat_intelligence
Capacidades
Lo que habilita la licencia
Custom IOA
IOC blocklist
IOC allowlist
hash/domain/IP/process controls
Configuracion
Controles disponibles
process names
command arguments
file paths
registry events
host groups
Ecosistema
Integraciones y dependencias
Integracionesthreat intel feedsMISPVirusTotal
Dependenciasfalcon_insight_edr