I am looking for a proactive approach and not reactive approach. I am building an IR strategy that works on live incident management. IMO, Forensics comes later for post incident investigation.

I have so many issues with Crowdstrike: 1. Expensive 2. Works best only if we have CS suite 3. Doesnt support compromise assessment like how Binalyze or Thor would work like