Anomali ThreatStream vs. Digital Shadows

Anomali ThreatStream is excellent in scenarios where we deliver Managed Security Services to customers. It offers exhaustive volumes of information in the form of threat bulletins, IOCs, Threat Actor profiling, and details related to campaigns in the wild which can be used to a great extent by MSSPs. For an enterprise SOC, I believe it is a little less suited purely because of the pricing aspect as it is slightly towards the expensive side of the spectrum.

Incentivized

DS is fantastic for big and large-medium companies, it has many very featured functions and works very well. It's a little bit expensive for small and little-medium companies.

Incentivized

• Indicators of Compromise
• Signatures
• Community Sharing

Incentivized

• We found company emails used for personal uses.
• We found internal documents in deep web.
• We found news and information about the company managers on social media not delivered by the company.

Incentivized

• The user interface, perhaps there is some room for improvement although it is good already.
• Confidence assigning process for IOCs needs to be more robust and transparent.
• While integration with SIEM solutions is a cakewalk, there is definitely added value if SIGMA rule conversion and YARA rule creation are provided from the platform.

Incentivized

• I'd like to have still more features for searching on social media.
• I'd like to have a better interface for configuration.
• It's expensive for middle and small companies, I'd like to have a reduced-features version for them.

Incentivized

Solved the problems of my customers and permitted to clearly demonstrate these problems to management.

Incentivized

It's very easy to use, also non-technical users can understand the information to use for search and results, initial configuration is less easy to configure but just a little.

Incentivized

They are very available and competent, in addition, they used people with a good knowledge of the Italian language that helped very much, especially with the first customer.

Incentivized

As I said: ease of use, scanningg of deep web and social media, results easy to understand and use.

Incentivized

Many of the products that can be used to be ingested into a security event management software can be cumbersome with threat streamThere are many opportunities to continue fine-tuning the environment and providing great context in regards to threat research. When compared to other products threat stream stands out from usability and features.

Incentivized

The other product didn't have searches on Social Media.

Incentivized

• After the Initial startup cost, it has overall had a positive impact by increasing efficiency of the team and freeing up analysts to do manual threat hunting

Incentivized

• DS gave more visibility on the company cyber exposure.
• Results of DS searches helped to solve security holes in people's behaviour.
• Company management reached more awareness about company cyber exposure.

Incentivized