Attivo Endpoint Detection Net (EDN) vs. Microsoft Defender XDR

Attivo Endpoint Detection Net (EDN) is a suitable option in mid level and large companies to detect insider threats and stealthy attackers. It is highly recommended where data is highly sensitive and there are chances of attack to get access to critical revers to get saves credentials and stored files. for small and medium business this solution is not recommended where perimeter security is already configured.

Incentivized

Suit Really in everything, what is modern cloud work especially really if you work in a global company where your IT team is not always operational hour of the business users so that everything is really in the cloud can be managed from everywhere, but we do not access to local resources anymore. That's really a good point. What is always a little bit the pressure point is that general things in cloud things are moving fast so it's always difficult to keep the teams that is using these words up to date

Incentivized

• To mimic production servers to deceive attackers
• To detect the lateral movements of adversary through machine learning algorithms
• To feed dummy data on production servers through threat strike feature

Incentivized

• The software uses advanced AI and machine learning algorithms to monitor activities and detect any anomalies immediately, protecting our financial data.
• Automated responses to known threats reduce the impact of possible incidents and improve our security posture.
• Microsoft 365 Defender easily combines with other Microsoft 365 services and external security solutions, providing a complete and unified security solution.

Incentivized

• Attivo Endpoint Detection Net (EDN) should have capability for getting forensics packages from compromised systems in my opinion.
• I believe Auto phishing email detection capability should be improved to meet industry requirements to tackle phishing attack vector
• Malware detection capabilities should be improved to work to kernel level for better visibility in my opinion.

Incentivized

• Enhanced False Positive Mitigation:
• Improved algorithms to minimize false positives in threat detection, reducing the impact on security teams and preventing unnecessary investigations into non-threatening incidents.
• Advanced User-Friendly Interface:
• Streamlined and intuitive user interface for the centralized dashboard, making it more accessible for security professionals with varying levels of expertise.
• Greater Third-Party Integration:
• Increased compatibility and integration capabilities with a broader range of third-party security tools

Incentivized

We are likely to renew our used of Microsoft defender XDR due to its comprehensive security features, integration capabilities, and the proactive approach to threat detection and response it enables. It’s often seen as a valuable asset in maintaining robust cybersecurity defenses. The automated responses aids the IT team in our business to respond to threats as soon as they appear.

Incentivized

integrated with windows OS, so pre installed and no mucking around afterwards

Incentivized

Their support throughout our onboarding of the product was fabulous. They not only took the time to carefully explain to teams not as well equipped with the lingo but explained to the tech team how to teach the other teams to be successful. They never once seemed impatient or annoyed with basic questions and didn’t pretend to know something when they needed to research an answer

Incentivized

Good and hard to find someonme who can explain everything for you beside Microsoft they provide you everything you need.

Incentivized

Microsoft Provides a good training for the Microsoft 365 Defender and has a good learning paths to learn and take the exams and get your Certifications.

Incentivized

seemless and almost transparent. can be deployed by script if needed so every endpoint on our system get's it. if you have intune it gets dumped on the the endpoint by policy so nothing escapes it

Incentivized

Attivo provides a user friendly management with a centralized manager. We can do configuration of Attivo Endpoint Detection Net (EDN) from a centralized console and deploy the Attivo Endpoint Detection Net (EDN) very easily. In other deception tool like forti deceptor etc, they have a bit poor user interface in my opinion and use-ability feature are improved in Attivo as compared to its competitors solutions I believe

Incentivized

We used the MS XDR as this is a bundle that we bought when we subscribed to the M365 platform, so having it was a bonus as we stated earlier, but due to limitation on licenses in Sentinelone, having this is just a blessing for us, so we can reduce around 200 licenses and can utilize it for other users

Incentivized

• Attivo Endpoint Detection Net (EDN) helps to protect information hence Attivo Endpoint Detection Net (EDN) is securing sensitive data therefore ROI is better as loosing the data is much more costlier as per Business Impact Analysis.
• In small organization ROI is not effective as cost of Attivo Endpoint Detection Net (EDN) is a bit high and data being protected through EDN is not high value asset in my opinon.
• It is a better technology to detect cyber threats so anyway it is recommended to use for better security posture.

Incentivized

• Depending on the licensing you pay for, Defender is included and a great ROI cost wise
• In terms of time spent, Defender can be a large time suck but yield positive results for end users
• Generally, it pays to learn and train in Defender BEFORE there is a problem and you need to really use it.

Incentivized