CrowdStrike Falcon vs. Splunk Enterprise Security

CrowdStrike Falcon

Splunk Enterprise Security

Overview
Product	Rating	Most Used By	Product Summary	Starting Price
CrowdStrike Falcon	Score 9.0 out of 10	N/A	CrowdStrike offers the Falcon Endpoint Protection suite, an antivirus and endpoint protection system emphasizing threat detection, machine learning malware detection, and signature free updating. Additionally the available Falcon Spotlight module delivers vulnerability assessment with no performance impact, no additional agents, hardware, scheduled scans, firewall exceptions or admin credentials.	$59.99 per endpoint/month (minimum number of endpoints applies)
Splunk Enterprise Security	Score 9.6 out of 10	N/A	Splunk Enterprise Security is an analytics-driven SIEM that helps to combat threats with actionable intelligence and advanced analytics at scale.	N/A

Pricing

CrowdStrike Falcon

Splunk Enterprise Security

Editions & Modules

Falcon Go (Small Business): $59.99
per endpoint/month (minimum number of endpoints applies)
Falcon Go (Small Business): $59.99
Falcon Pro: $99.99
per endpoint/month (for 5-250 endpoints, billed annually)
Falcon Enterprise: $184.99
per endpoint/month (minimum number of endpoints applies)

No answers on this topic

Offerings

Pricing Offerings
CrowdStrike Falcon	Splunk Enterprise Security
Free Trial
Yes	No
Free/Freemium Version
No	No
Premium Consulting/Integration Services
No	No

Entry-level Setup Fee

No setup fee

Additional Details

—

More Pricing Information

Community Pulse
	CrowdStrike Falcon	Splunk Enterprise Security
Considered Both Products	CrowdStrike Falcon Verified User Anonymous Chose CrowdStrike Falcon Sentinelone is bit complicated language use in there console in compare to CrowdStrike Falcon. CrowdStrike Falcon have much big modules and features but sentinelone don't. CrowdStrike Falcon have one single unified agent and in sentinelone bit confused in selection of agent … Incentivized Helpful? Verified User Anonymous Chose CrowdStrike Falcon CrowdStrike is by far the superior product as we have had zero problems since installing compared to Trend where is positively failed us. We switched and again have had zero issues with the product and it protects our environment as it should without much interaction. Incentivized Helpful? Verified User Anonymous Chose CrowdStrike Falcon CrowdStrike Falcon is way ahead of Symantec, and covers features that defender XDR doesn't, even if you purchase all the addons. I think the only real competitors are Sentinel One, maybe Palo Alto or Huntress, or Carbon Black. Incentivized Helpful? Verified User Anonymous Chose CrowdStrike Falcon In my opinion, CrowdStrike Falcon provides superior detection and prevention capabilities over Jamf Protect. At the time we purchased (2017) CrowdStrike Falcon was more advanced than SentinelOne and Microsoft Defender for Endpoint. Incentivized Helpful? Verified User Anonymous Chose CrowdStrike Falcon CrowdStrike Falcon is far superior in all aspects. I love the features and support they provide. Incentivized Helpful? Verified User Anonymous Chose CrowdStrike Falcon CrowdStrike Falcon is an industry leader in this sector and is superior in its low overhead agent, having minimal impact on end-users. We plan to migrate our macOS fleet when our existing contract expires. Incentivized Helpful? Verified User Anonymous Chose CrowdStrike Falcon We felt that CrowdStrike had a more comprehensive security tool set and the overall cost for CrowdStrike was less than those other solutions. Incentivized Helpful? Verified User Anonymous Chose CrowdStrike Falcon Advance detection capability.Overwatch threat hunt team which proactively hunts your environment Interactive sandbox. Reduced false positives & ease of whitelisting to granular level.AI and ML can analyze events to identify subtle patterns that might indicate malicious … Incentivized Helpful? Verified User Anonymous Chose CrowdStrike Falcon In my opinion, CrowdStrike Falcon does a better job of detection than Carbon black in all forms. Compared to SentinelOne XDR, CrowdStrike Falcon does a better job of finding potential threats even though the machine learning based detection cause more False Positives than the … Incentivized Helpful? Verified User Anonymous Chose CrowdStrike Falcon It is superior on the following two: Advanced threat detection because AI and ML can analyze vast amounts of data to identify subtle patterns that might indicate malicious activity, even zero-day attacks (previously unknown threats).Reduced false positives because it can help … Incentivized Helpful? Verified User Anonymous Chose CrowdStrike Falcon It’s provides all of what the other solutions offered individually and at a better price. Incentivized Helpful? Verified User Anonymous Chose CrowdStrike Falcon At the time of purchase CrowdStrike provided the best featureset and value proposition for the organisation. The cloud first nature of the product and the mix of heuristic and behaviour based detection technologies was better than anything else that we looked at. Incentivized Helpful? Verified User Anonymous Chose CrowdStrike Falcon we felt that this was a new refresh as what we had prior was best at the time and there are new and modern approaches to keep the end points secure Incentivized Helpful? Verified User Anonymous Chose CrowdStrike Falcon CrowdStrike Falcon is the market leader so is head and shoulders above these products. These products work of old school methodologies of detecting malware which are no longer fit for purpose. Incentivized Helpful? Chris Stutzman IT Manager Chose CrowdStrike Falcon Although the other products were good, CrowdStrike Falcon Complete had more to offer and had a much cleaner, more intuitive interface. Incentivized Helpful? Humayoon Khan Team Lead Cyber Security Chose CrowdStrike Falcon It was the easiest to deploy and manage, while the dashboard was also very clear and precise in terms of useful information. Another major reason in selection CrowdStrike Falcon was its AI and ML detection capabilities which really impressed us during evaluation. Other tools … Incentivized Helpful? Verified User Anonymous Chose CrowdStrike Falcon Better tool and it was used by our Incident response team on a real incident. Incentivized Helpful? Verified User Anonymous Chose CrowdStrike Falcon Managed service for EDR operation Incentivized Helpful? Verified User Anonymous Chose CrowdStrike Falcon We moved on from Symantec and compared with Sophos - the impact (performance) to the endpoint is very minimal - our engineers always fight new security tools. During testing, they were running CrowdStrike for 2 weeks when they asked when we would install the new EDR tool to … Incentivized Helpful? James Dilley System Administrator Chose CrowdStrike Falcon Before choosing CrowdStrike Falcon, we evaluated alternative solutions such as Symantec and McAfee. However, CrowdStrike Falcon's cloud-native approach, advanced threat hunting capabilities, and real-time visibility into endpoint activities set it apart as the optimal choice … Incentivized Helpful? JA Javier Aguado Security Consultant Chose CrowdStrike Falcon High ENS compliance and client requirements. Incentivized Helpful? Verified User Anonymous Chose CrowdStrike Falcon Next Gen antivirus solution. You don't need your own infrastructure for the service. Deployment is very easy and fast. Only one sensor on the clients with very low CPU impact. Easy multi factor deployment. Good overview in the console over your entire envirement. Very good and … Incentivized Helpful? Verified User Anonymous Chose CrowdStrike Falcon At the time we evaluated the products, CrowdStrike was clearly leading in this space. It's possible since that time so other products have added additional features and may be equivalent. Incentivized Helpful? Verified User Anonymous Chose CrowdStrike Falcon CrowdStrike Falcon's cloud-native architecture gives it an edge in terms of scalability, ease of deployment, and real-time threat intelligence updates. The user interface of Falcon is intuitive and offers clear visibility into our organization's threat landscape. Our team felt … Incentivized Helpful? Verified User Anonymous Chose CrowdStrike Falcon When we looked, we narrowed to two choices Sentinel One and CrowdStrike. We chose CrowdStrike due to the use of AI backed up with Human Security experts to investigate detections and issues. Incentivized Helpful?	Splunk Enterprise Security Verified User Anonymous Chose Splunk Enterprise Security LogRhythm is good for a team comprising mostly non-technical IT users. Unlike Splunk, it has a GUI log search and a good ticketing system. Splunk is better than Logrhythm for me as it provides me with the ultimate flexibility to write custom queries. Scalyr is a good tool and … Incentivized Helpful? Sam Babbitt System/Network Administrator Chose Splunk Enterprise Security Imperva Web Application Firewall (WAF), Juniper Mist Edge, Wazuh Incentivized Helpful? Verified User Anonymous Chose Splunk Enterprise Security I did not choose this product. Overall although I like ES, I think Sentinel in certain ways is the superior product. The Kusto Query language is a lot easier to use. For instance anything that requires manual parsing in query can be more difficult with this product. Also some … Incentivized Helpful? Verified User Anonymous Chose Splunk Enterprise Security Splunk Enterprise Security (ES) is much faster and easier to integrate logs and work on alerts to detect suspicious security events. Incentivized Helpful? Verified User Anonymous Chose Splunk Enterprise Security AlienVault is much more user and beginner friendly, however Splunk ES very much so provides more capability for mass data manipulation, report and dashboard customization, and trend analytics. Incentivized Helpful? Verified User Anonymous Chose Splunk Enterprise Security These two really helps in better way and low cost and high productivity. Automatic detection ML help you to detect many ways and create cases based on risk score GRS UBA helps to protect organization from data ,via sharing through emails and USB s . Gurucu product license once … Incentivized Helpful? JC Joe Contreras Senior Security Specialist Chose Splunk Enterprise Security Splunk is way better. Support is awesome too Incentivized Helpful? Verified User Anonymous Chose Splunk Enterprise Security Splunk enterprise is the only solution that we’ve been able to identify that provides risk based alerting, which allows our SOC to reduce analyst fatigue which would be a huge problem without it. Before RBA, there were thousands of alerts a day and it was impossible to review … Incentivized Helpful? Verified User Anonymous Chose Splunk Enterprise Security I believe it is definitely a leader in the security space Incentivized Helpful? Verified User Anonymous Chose Splunk Enterprise Security I consider Splunk Enterprise Security to have the strongest deployment methodology and troubleshoot features. Other products also provide good solutions such as Riverbed, Broadcom and Solarwinds but I think Splunk Enterprise Security is a great and trustable option to use for … Incentivized Helpful? Verified User Anonymous Chose Splunk Enterprise Security Even though Splunk ES is not the cheapest solution on the markt, we found it was still cheaper compared to Secureworks we had before. Also the level of flexibility and "thinking with the customer" is much better now. Incentivized Helpful? Ramu S R Junior Network Administrator Chose Splunk Enterprise Security Traditional hardware logging mechanisms do not provide in-depth research data on the threats and signatures, while Splunk Enterprise Security could easily achieve this feat. Incentivized Helpful? AMJITH LAL S Senior Network Administrator Chose Splunk Enterprise Security FortiAnalzer is a hardware solution, but with Splunk, we could identify as well get the correct solution for the active threats and too with accurate and precise detailing. Incentivized Helpful? Verified User Anonymous Chose Splunk Enterprise Security - Schema on the fly indexing --> Gives you faster index searches. Even if you use Datamodes, it's 100x time faster as well. - Correlation with other domains easily gives you total visibility and reduces the time to investigate and understand the problem. - With lookups and trust, … Incentivized Helpful? Verified User Anonymous Chose Splunk Enterprise Security Securonix does not nearly meet the scale, extensibility, and maturity that Splunk ES offers. However, when looking at the MSP architecture options, Securonix is a much more flexible platform for multi-tenanting. So, Splunk ES for captive SOC platforms and Securonix for … Incentivized Helpful? Saibal Banerjee Cyber Security Consultant Chose Splunk Enterprise Security Splunk ES is by far the best solution in the market as per flexibility, features and support. Cost-wise, it is the most expensive option to go with, but that has its own advantages as the product that we get is premium and superior to other SIEM. The best thing about Spunk ES … Incentivized Helpful? Jacob Gonzales IDS/SIEM Engineering Supervisor Chose Splunk Enterprise Security Splunk Enterprise Security allows for data normalization that does not compare to other SIEMs such as QRadar or Trustwave. QRadar requires custom dsm parsers before the data can be onboarded. I appreciate that Splunk Enterprise Security can ingest any source of data and … Incentivized Helpful? Ernesto J. Meléndez Sr. Security Engineer Chose Splunk Enterprise Security All Splunk products are easy to integrate, and they collaborate in the security of our organization. Incentivized Helpful? Verified User Anonymous Chose Splunk Enterprise Security N/A - Have only used Splunk Enterprise Security since coming to Deloitte Incentivized Helpful? Verified User Anonymous Chose Splunk Enterprise Security LogRhythm is a superior SIEM from a purely security/SOC perspective in my opinion. However, Splunk shines if you have an expert behind the wheel or if the organization is quite large - as my experience with LogRhythm indicated it couldn't handle large-size organizations. Incentivized Helpful? ME Matt Esolen Cyber Security Engineer Chose Splunk Enterprise Security Microsoft Defender for Endpoint Incentivized Helpful? Verified User Anonymous Chose Splunk Enterprise Security Splunk does not hide its correlation and analytics logic from users as much as other solutions in the same space. While some features are harder to access the underlying information is all accessible and tunable. This gives Splunk an edge over other solutions that lock the … Incentivized Helpful? Shilpi Jain Intermediate Enterprise Support Analyst Chose Splunk Enterprise Security We have both of these instances in our organization. Incentivized Helpful? Verified User Anonymous Chose Splunk Enterprise Security Splunk enterprise security works great in Splunk Cloud. Incentivized Helpful? Verified User Anonymous Chose Splunk Enterprise Security Splunk Enterprise Security is superior in the logging aspect and searching. That’s why it was easier to pick switch to Splunk Enterprise Security. Arcsight is however superior in the correlation and stability aspect. It’s very reliable and stable that we sometimes forget that … Incentivized Helpful?

Features

CrowdStrike Falcon

Splunk Enterprise Security

Endpoint Security

Comparison of Endpoint Security features of Product A and Product B
	CrowdStrike Falcon 9.1 Ratings 6% above category average	Splunk Enterprise Security - Ratings
Anti-Exploit Technology	9.50 Ratings	00 Ratings
Endpoint Detection and Response (EDR)	9.70 Ratings	00 Ratings
Centralized Management	9.70 Ratings	00 Ratings
Hybrid Deployment Support	8.20 Ratings	00 Ratings
Infection Remediation	9.30 Ratings	00 Ratings
Vulnerability Management	7.70 Ratings	00 Ratings
Malware Detection	9.40 Ratings	00 Ratings

Security Information and Event Management (SIEM)

Comparison of Security Information and Event Management (SIEM) features of Product A and Product B
	CrowdStrike Falcon - Ratings	Splunk Enterprise Security 8.4 Ratings 8% above category average
Centralized event and log data collection	00 Ratings	9.30 Ratings
Correlation	00 Ratings	8.60 Ratings
Event and log normalization/management	00 Ratings	8.50 Ratings
Deployment flexibility	00 Ratings	8.30 Ratings
Integration with Identity and Access Management Tools	00 Ratings	7.80 Ratings
Custom dashboards and workspaces	00 Ratings	9.20 Ratings
Host and network-based intrusion detection	00 Ratings	7.90 Ratings
Data integration/API management	00 Ratings	8.40 Ratings
Behavioral analytics and baselining	00 Ratings	7.70 Ratings
Rules-based and algorithmic detection thresholds	00 Ratings	8.50 Ratings
Response orchestration and automation	00 Ratings	7.00 Ratings
Reporting and compliance management	00 Ratings	8.60 Ratings
Incident indexing/searching	00 Ratings	9.20 Ratings

Best Alternatives
	CrowdStrike Falcon	Splunk Enterprise Security
Small Businesses	ThreatLocker Score 9.5 out of 10	LevelBlue USM Anywhere Score 3.7 out of 10
Medium-sized Companies	BlackBerry Protect (CylancePROTECT) Score 9.1 out of 10	Sumo Logic Score 9.4 out of 10
Enterprises	BeyondTrust Endpoint Privilege Management Score 9.8 out of 10	Sumo Logic Score 9.4 out of 10
All Alternatives	View all alternatives	View all alternatives

User Ratings
	CrowdStrike Falcon	Splunk Enterprise Security
Likelihood to Recommend	9.6 (0 ratings)	8.9 (0 ratings)
Likelihood to Renew	10.0 (0 ratings)	9.0 (0 ratings)
Usability	10.0 (0 ratings)	7.5 (0 ratings)
Availability	- (0 ratings)	9.1 (0 ratings)
Performance	- (0 ratings)	8.2 (0 ratings)
Support Rating	10.0 (0 ratings)	6.6 (0 ratings)
In-Person Training	9.0 (0 ratings)	9.1 (0 ratings)
Online Training	- (0 ratings)	8.2 (0 ratings)
Implementation Rating	10.0 (0 ratings)	9.1 (0 ratings)
Configurability	- (0 ratings)	7.3 (0 ratings)
Ease of integration	- (0 ratings)	6.4 (0 ratings)
Product Scalability	- (0 ratings)	9.3 (0 ratings)
Vendor post-sale	- (0 ratings)	8.2 (0 ratings)
Vendor pre-sale	- (0 ratings)	8.2 (0 ratings)

User Testimonials
	CrowdStrike Falcon	Splunk Enterprise Security
Likelihood to Recommend	CrowdStrike Falcon is well suited for any size of environment. Large to small, CrowdStrike Falcon does an amazing job. The ability to have the same security as a fortune 500 company and have a solution that sees the same threats that they are seeing is amazing. I do not think that there is a company or environment that wouldn't benefit from the CrowdStrike Falcon solution. Incentivized Verified User Anonymous Read full review	Well-Suited Scenarios: Real-Time Threat Response: ES excels in swiftly detecting and responding to security threats through data correlation. Compliance Management: ES streamlines compliance with detailed logs and reports, ideal for regulated industries. User Behavior Analytics: Effective in monitoring user and entity behavior, particularly for insider threat detection. Large-Scale Environments: Valuable for organizations with diverse data sources and high volumes of data. Incident Investigation: ES aids in post-incident analysis, reconstructing events to understand root causes. Less Appropriate Scenarios: Smaller Organizations: For simpler setups, ES may be complex and costly. Static Environments: In low-risk settings, ES's advanced features may be unnecessary. Limited Resources: Tight budgets or sparse IT resources may hinder effective ES use. Lack of In-House Expertise: Without security experts, optimizing ES can be challenging. Budget Constraints: ES may be cost-prohibitive for budget-conscious organizations, prompting consideration of more affordable alternatives. Incentivized Verified User Anonymous Read full review
Pros	The Log analysis is very detailed and easy to use. Prevent and block all type of malwares. Great threat intelligence which is very up-to-date with the recent cyber attacks very user friendly in access and management Automated feature of detecting, taking action and closing incidents using fusion workflow. Incentivized Verified User Anonymous Read full review	Its best feature is its user interface, which is easy to navigate and understand. All you need is a little tutorial on how to use the Splunk query language and you're done. Logs can be easily uploaded or shared across multiple platforms and display a highly insightful graphical representations of data using graphs, tables, and many other formats. Incentivized Verified User Anonymous Read full review
Cons	The Dashboard can become overwhelming at times, too much information to absorb Computers that may have made it out into the field without the endpoint sensor are very difficult to find As with all systems that rely on machine learning false positives occurr Incentivized Verified User Anonymous Read full review	To identify User Behaviour analysis is lacking component which we get in Splunk UBA. The documentation part is hard to work on because if the new user tries to learn ES then the documentation is not user-friendly. ES must ass more Knowledge objects by default to make security-related aspects more reliable and enhance the details. Incentivized Verified User Anonymous Read full review
Likelihood to Renew	Crowdstrike has a large suite of tools built for helping the engineers triage and respond to security event whenever identified. The ability to customize the security policies and implement more granular policies to different devices based on the functionality is unmatched. Crowdstrike provides so much of ability in a decent budget which ascertains the value for money or ROI. Incentivized Verified User Anonymous Read full review	We are very happy with Splunk and would advise anyone to take a serious look at it. It might look pricey but the rewards Splunk offers seem endless. Incentivized Verified User Anonymous Read full review
Usability	I think it is a complete and very trustful XDR platform, with very few False Positives. It is very well supported by highly skilled professionals on all levels: from pre-sales engineers, Customer Account Managers and support engineers. Incentivized FM Fotis Mastakas Fotis Mastakas Read full review	You definitely need to learn how to use Splunk to get the most of the tool. There are many courses available for free to get up to speed on the usability of the tool but it's not that simple. It will take time to digest all the data and to understand how to query for what you are looking for. Incentivized Verified User Anonymous Read full review
Reliability and Availability	No answers on this topic	I'm not an ES user, but, in my implementation I usually try to prevent all service stops to guarantee High availability to the final customers. Incentivized Giuseppe Cusello GRC Director Read full review
Performance	No answers on this topic	ES requires a very performant infrastructure: if it has it's performant, otherwise not. I had situation with a very performant infrastructure and I didn't notized that it was a distributed architecture, it seemed that there ware few data on my PC, othewise I experienced less performant infrastructures with less performaces. Incentivized Giuseppe Cusello GRC Director Read full review
Support Rating	Support is generally pretty fast and gets right to the issue. We haven't had to use them much, fortunately, but the issues and questions we've had are usually answered quickly. The customer success manager/account manager you're assigned will also follow up with you on a regular cadence to ensure you're getting the most out of the subscription. There's not a whole lot of room to improve, other than the general confusion about what is/what is not covered in custom packages you're subscribed to. The initial purchase took much longer because of a package name changes and realignments of different modules into those packages. Incentivized Randy Munroe Information Security Analyst Read full review	It's good when it's responsive, but I've had times where I had to wait quite a while for a response. But these are typically the exceptions rather than the rule. When you do get a response it is always well-informed and appropriate. I would say they've been trending better over time with this. Incentivized AE Allan Crittenden Edwards Security Analyst Read full review
In-Person Training	There is limited amount of learning that can be completed in an in-person training available. In my opinion, the self-paced learning provided by Falcon portal is more useful over in-person training. The support from Falcon is great and useful to overcome difficulties, if any. Incentivized Verified User Anonymous Read full review	I experienced only on-line training, but the trainers were very professional and competent. Maybe it could be more useful if they also have an experience in projects because sometimes they didn't have a real project experience to communicate to the students. Anyway, it was very interesting and I learned many thing that's very difficoult (or maybe impossible!) to have by myself, aven if I have more than 10 years of Splunk activity experience. Incentivized Giuseppe Cusello GRC Director Read full review
Online Training	The training provided by Crowdstrike Falcon is complete in terms of the depth of technical knowledge and teaches the users about going through with the platform. There are lots of jargons for different tools that Crowdstrike Falcon has and this training teaches them all which helps in managing the platform better. Plus, the regular knowledge checks are also very helpful for the end user. Incentivized Verified User Anonymous Read full review	It was very interesting and I learned many thing that's very difficoult (or maybe impossible!) to have by myself. The only problem was that, when I worked with the Splunk Professional Services, I found some difference between the training contents and the information from PS. In addition is required a long experience on Splunk Enterprise for the data ingestion part, in other words I'm able to work with ES because I'm worling on Splunk since 11 years, otherwise I'd some problem. Incentivized Giuseppe Cusello GRC Director Read full review
Implementation Rating	Read the documentation Incentivized Verified User Anonymous Read full review	It's a fantatic product and it was very useful the presence of Splunk Professional Services for the Design Phase and the final Health Check. Incentivized Giuseppe Cusello GRC Director Read full review
Alternatives Considered	We were a former Arctic Wolf customer and feel like they worked more as a team with us. Cylance is what we're looking at possibly migrating to. Incentivized Verified User Anonymous Read full review	LogRhythm is good for a team comprising mostly non-technical IT users. Unlike Splunk, it has a GUI log search and a good ticketing system. Splunk is better than Logrhythm for me as it provides me with the ultimate flexibility to write custom queries. Scalyr is a good tool and quite frankly lot faster than Splunk. However, I prefer Splunk because of its better Dashboards and panel customization abilities. Elastic is another amazing tool. It is hard to choose between the two especially because both have different sets of logs on them. I use both. Elastic for internal server logs, Splunk for everything else. Incentivized Verified User Anonymous Read full review
Scalability	No answers on this topic	We have on prem splunk and it’s mostly east to setup, but we have issues keeping data separated between customer splunk deployments while at the same time only having to look at one SIEM to address events in every environment Incentivized Verified User Anonymous Read full review
Return on Investment	CrowdStrike Falcon's proactive threat mitigation has significantly reduced the risk of successful cyber attacks, resulting in tangible savings related to potential data breaches or system compromises. The cloud-native architecture and automated features have improved operational efficiency. The platform's real-time visibility and threat hunting capabilities have drastically improved incident response times. Incentivized James Dilley System Administrator Read full review	We have a 100% success rate on all our ES implementations due to the amazing documentation and Splunk enablement on the subject. Our Splunk ES business has grown 100% YoY for the last 3 years. In terms of long term management and maintenance, ES has been highly stable and predictable, reducing our overhead on costly services team for ad hoc maintenance work. Verified User Anonymous Read full review
ScreenShots