Anomali ThreatStream vs RSA NetWitness Platform

Likelihood to Recommend

Being the best threat intelligence platform/tool on the market, it is fantastic in terms of performance and it has taken a lot of burden of curating and weeding through false positives off of our team freeing them up to focus on manual threat hunting and content building.

Read full review

Verified User

Engineer in Information Technology

Non-Profit Organization Management Company, 501-1000 employees

View all 1 answers on this topic

It is really a robust platform that can be heavily customized to suit requirements. Good for advanced hunting and forensics. Robust automation features.

Read full review

Verified User

Manager in Information Technology

Banking Company, 1001-5000 employees

View all 1 answers on this topic

Feature Rating Comparison

Anomali ThreatStream

RSA NetWitness Platform

Centralized event and log data collection

Correlation

Event and log normalization

Deployment flexibility

Integration with Identity and Access Management Tools

Custom dashboards and views

Host and network-based intrusion detection

Pros

Fantastic UI
STAXXX for sharing intelligence
Threat Intelligence feeds
Automation and collaboration cuts work down for the analysts

Read full review

Verified User

Engineer in Information Technology

Non-Profit Organization Management Company, 501-1000 employees

View all 1 answers on this topic

Log collection and parsing.
Packet collection and parsing.
Enhanched analytics and alerting.
Robust integration.

Read full review

Verified User

Manager in Information Technology

Banking Company, 1001-5000 employees

View all 1 answers on this topic

Cons

No answers on this topic

Lacking out of the box best practice templates etc. It relies heavily on customization.
Lack of up to date threat feeds.
Difficult to learn and use initially.

Read full review

Verified User

Manager in Information Technology

Banking Company, 1001-5000 employees

View all 1 answers on this topic

Alternatives Considered

No answers on this topic

Best in Class for us, and was a good choice since we already are using a lot of other RSA products(DLP, Archer etc.)

Read full review

Verified User

Manager in Information Technology

Banking Company, 1001-5000 employees

View all 1 answers on this topic

Return on Investment

After the Initial startup cost, it has overall had a positive impact by increasing efficiency of the team and freeing up analysts to do manual threat hunting

Read full review

Verified User

Engineer in Information Technology

Non-Profit Organization Management Company, 501-1000 employees

View all 1 answers on this topic

Hard to calculate ROI since it is not revenue based.
It is a expensive solution, bit very capable.

Read full review

Verified User

Manager in Information Technology

Banking Company, 1001-5000 employees

View all 1 answers on this topic

Pricing Details

General

Free Trial

—

Free/Freemium Version

—

Premium Consulting/Integration Services

—

Entry-level set up fee?

No

General

Free Trial

—

Free/Freemium Version

—

Premium Consulting/Integration Services

—

Entry-level set up fee?

No

Rating Summary

Anomali ThreatStream

RSA NetWitness Platform

Anomali ThreatStream vs RSA NetWitness Platform