ActivTrak vs. Splunk User Behavior Analytics (UBA)

A scenario where it is well suited is determining why a certain task was not accomplished as it shows time spent on certain websites and if the usage was appropriate. I think less appropriate is the idle time as there are some scenarios where a computer is not necessary, and the task may be a manual one

Incentivized

Splunk User Behavior Analytics application is necessary when any company wants to capture the threat based on user behavior instead of just counting the number of occurrences of particular event. With Splunk UBA, we can analyse number of anomalies captured and which in turn creating threats which are nearly true positive.

Incentivized

• ActivTrak gives me a breakdown of hours during which my employees were actively working, when they were active online but unproductive, when they were inactive, and when they were not online.
• ActivTrak gives me a detailed breakdown of the software, platforms, and programs my employees worked on/in during each block of the day.
• ActivTrak provides a detailed breakdown of how I spend my time each day to help me improve my productivity.

Incentivized

• Monitor and troubleshoot for any system errors.
• Get the insights on application data sets and do some predictive analysis.

Incentivized

• We had to really dig to figure out how to find the alarms for the potential mouse jiggler. Had I not really researched, I wouldn't have known that one of my employees was using it. The alerts should be more visable
• The software is expensive, and I didn't like that I had to pay even more money to get screenshots of my employee who was using a mouse jiggler. While I really appreciate that I had the option, and it gave me the proof I needed, I think it should be included in the upfront cost.

Incentivized

• Performance-wise, it can be improved. Queries take a long time.
• Dataset exploration - More data visualization charts can be added.

Incentivized

We are in agreement that the tool is very handy as a security companion. The system collects and retain relevant historical data to be queried when you desire e.g. in security reviews once a week.

Incentivized

ActivTrak is a great product that just keeps growing. Having used it for quite some time, we have been able to see ActivTrak grow and evolve as a product. The ActivTrak webinars are also helpful to get to know and learn the product. ActivTrak really just works with little effort needed after the initial installation

Incentivized

It's never been down.

Incentivized

Have not received any issues with Activtrak's performance in regard to loading pages, reports, or other systems.

Incentivized

Support is always fast and the agents are ready at all times to help when an issue arises, if the tier 1 agent isn't able to provide a solution to the issue they're asked about they quickly escalate the issue to tier 2 or 3 to ensure that the appropriate support is given to the issue at hand to have it quickly solved. No issue we've had so far has taken more than two days to be solved.

Incentivized

There should be a way to automatically implement the system without giving users the opportunity to accept or deny the program on their computers.

Incentivized

We evaluated a few, the only one I remember was Controlio which was a bit easier to use, we just didn't like the name. We went with ActivTrak because another company used it and it seemed to work for them.

Incentivized

Easier we were using Splunk Enterprise on heavy forwarder on which all the add-on were installed and were using Splunk Cloud with respect to search head and indexers stack. And with Splunk Enterprise Security premium app, we were relying on correlation rules which were throwing more number of false positive but after implementing Splunk UBA, we are now getting real-time true positive threat or incidents.

Incentivized

The product's overall scalability is good as our team grows. We would like to see updates to meet market demands.

Incentivized

• It has helped us improve workflows of our team.
• It has helped us see that we needed to replace underperforming staff even after being coached and having their issues addressed.
• It helped us know that we had a few ROCKSTARS burning out from overworking.
• The screen capture has saved our butts when we had processed some things on other websites only to have them come back and say it didn't happen. We had visual proof.
• While it was a bit nervous to implement because there is a negative about employees being monitored, it has provided us with coaching opportunities to help our team improve.

Incentivized

• Fewer team members to work on real threats.
• Less time required to deal with real incidents.
• Easy to implement across the network.

Incentivized