Licenciamiento y capacidades activables
Modulos PMDefender por licencia
Administra las capacidades que se activan por plan: NGAV, EDR, IOA/IOC, Threat Intel, OverWatch, Discover, Identity, Cloud, Fusion y APIs.
Inventario de licencia
10 modulos y capacidades
| Modulo | Categoria | Licencia | Estado | Madurez | Acciones |
|---|---|---|---|---|---|
| Consola unificada y APIs | Platform | core | 93% |
Ver Editar | |
| Falcon Prevent (NGAV) | Endpoint prevention | core | 90% |
Ver Editar | |
| Falcon Insight (EDR) | Endpoint detection response | professional | 92% |
Ver Editar | |
| Custom IOA & IOC Management | Detection engineering | enterprise | 88% |
Ver Editar | |
| Falcon Discover (IT/Hygiene & Visibility) | Asset hygiene | enterprise | 84% |
Ver Editar | |
| Falcon Fusion (automation / mini-SOAR) | Automation | enterprise | 91% |
Ver Editar | |
| Falcon Identity Protection | Identity security | enterprise | 90% |
Ver Editar | |
| Falcon X (Threat Intelligence) | Threat intelligence | enterprise | 86% |
Ver Editar | |
| Falcon Cloud Security / CSPM / CWPP | Cloud security | elite | 89% |
Ver Editar | |
| Falcon OverWatch (Threat Hunting gestionado) | Managed detection | managed | 94% |
Ver Editar |
Modificar modulo
Falcon Identity Protection
Identity security
Falcon Identity Protection
Proteccion de AD e identidades contra abuso de credenciales, Kerberoasting y movimiento lateral.
identityactive_directoryendpoint.process
Capacidades
Lo que habilita la licencia
AD integration
credential abuse detection
Kerberoasting detection
lateral movement analytics
Configuracion
Controles disponibles
privileged account policies
risky sign-in thresholds
identity containment
service account baselines
Ecosistema
Integraciones y dependencias
IntegracionesADEntra IDOkta
Dependenciasfalcon_insight_edr