Attivo IDEntitleX vs. Microsoft Defender for Cloud

Attivo IDEntitleX does the job but with a high chance of generating false positives. Attivo IDEntitleX is well suited to setup monitoring on user account roles and permissions or if there is a sudden change in the permissions for a user account which seems to be suspicious. Attivo IDEntitleX is useful for both on premise infrastructure and hybrid cloud environment but the results cannot be trusted 100%

Incentivized

Microsoft Defender is very good while we are enhancing our organization's security, and it is very useful in getting threat alerts and vulnerabilities that can harm our system and users. It is recommended to use this to improve overall security and threat protection of our users and organization. With the help of Microsoft Defender, we get fully covered and secured.

• Monitoring account activities
• Visibility into account roles and permissions
• Service account management
• Password rotation and tracking for Kerberos account

Incentivized

• detect and respond to security threats in the cloud environment, reducing the risk of data breaches and unauthorized access.
• The product assists our organization dealing with sensitive data in achieving and maintaining compliance with data protection rules.
• The product provides real-time visibility into the cloud environment, offering insights into ongoing security activities.
• It guarantees that security teams can actively handle possible threats by delivering real-time monitoring and notifications, reducing the impact on business operations.

Incentivized

• Reduce the false positives
• The UI is very slow and resource intensive
• The support team needs more technical depth to rectify the issues

Incentivized

• 'Regulatory Compliance' is definitely an area of improvement for MDC. The complex and high number of controls within a specific framework should allow a more helpful and detailed guidelines in order to tackle them.
• The limitation of options in the incident management menu of MDC has proven to be a hassle while managing security alerts. For example, an analyst cannot even provide a comment about the actions taken on an incident.
• There is a missing functionality of connecting other EDR or XDR solutions to MDC which I think should be there for a CSPM tool.

Incentivized

We used to use Symantec and McAfee. It's been mostly defenders since, gosh, the last eight to 10 years. So we're a small organization. We don't have a lot of folks, so single-painted glass is really important to be able to see the whole environment in a single place. And the Microsoft tooling gives us that.

Incentivized

• The false positive results are a downside
• Relatively less expensive identity monitoring tool
• Integrates well with other vendor tools

Incentivized

• It creates a great insight in all assets that are available
• The CSPM makes sure that certain risk that might have been missed are addressed
• Being able to query across the data gives great insights in threats and possible vulernabilties for CVEs