Anomali ThreatStream vs. Webroot DNS Protection

Anomali ThreatStream is excellent in scenarios where we deliver Managed Security Services to customers. It offers exhaustive volumes of information in the form of threat bulletins, IOCs, Threat Actor profiling, and details related to campaigns in the wild which can be used to a great extent by MSSPs. For an enterprise SOC, I believe it is a little less suited purely because of the pricing aspect as it is slightly towards the expensive side of the spectrum.

Incentivized

If you already have Webroot AV, it makes sense to continue with the same vendor. It's pretty cheap compared to some solutions, so it might be the case that it's this or nothing, in which case this is a no brainer. If you are an MSP, this is an easy product to sell, and requires very little maintenance. you do need to monitor it but it runs itself most of the time. If you are a customer with >50 users, you should really be looking for a product that is a bit higher up the food chain

Incentivized

• Indicators of Compromise
• Signatures
• Community Sharing

Incentivized

• Enforcing organisational policies regarding internet usage, such as blocking access to certain types of websites (e.g., gambling, social networking, etc.)
• Prevent malware infections
• Protection from various phishing attempts

Incentivized

• The user interface, perhaps there is some room for improvement although it is good already.
• Confidence assigning process for IOCs needs to be more robust and transparent.
• While integration with SIEM solutions is a cakewalk, there is definitely added value if SIGMA rule conversion and YARA rule creation are provided from the platform.

Incentivized

• Integration with G-Suite, O365, Active Directory, SIS, etc.
• Increase the number of third-party integrations.
• It can be expensive to implement, depending on the size of the network.
• It does not offer additional features and options beyond basic protection.

Many of the products that can be used to be ingested into a security event management software can be cumbersome with threat streamThere are many opportunities to continue fine-tuning the environment and providing great context in regards to threat research. When compared to other products threat stream stands out from usability and features.

Incentivized

Webroot stacks right up with the top vendors in this tier. Priced right and MSP ready.

Incentivized

• After the Initial startup cost, it has overall had a positive impact by increasing efficiency of the team and freeing up analysts to do manual threat hunting

Incentivized

• Much reduced time spent on malware issues at small business customers
• Slightly increased revenue as this fills a space that didn't used to exist in our stack
• Customers satisfaction went up due to the added ability to block certain content quickly and easily

Incentivized