AWS CloudTrail vs. Cybereason Defense Platform

Overview
ProductRatingMost Used ByProduct SummaryStarting Price
AWS CloudTrail
Score 9.0 out of 10
N/A
AWS CloudTrail is a service that enables governance, compliance, operational auditing, and risk auditing of an AWS account. With CloudTrail, users can log, continuously monitor, and retain account activity related to actions across AWS infrastructure. CloudTrail provides event history of AWS account activity, including actions taken through the AWS Management Console, AWS SDKs, command line tools, and other AWS services. This event history simplifies security analysis, resource change tracking,…N/A
Cybereason Defense Platform
Score 9.4 out of 10
N/A
Cybereason EDR consolidates intelligence about each attack into a Malop (malicious operation), a contextualized view of the full narrative of an attack. Each Malop organizes the relevant attack data into an easy-to-read, interactive graphical interface, providing a complete timeline, the flow of the attack in the network, and any malicious communications. Remediation actions can be automated or accomplished remotely with a click. The Cybereason Defense Platform empowers analysts of all…N/A
Pricing
AWS CloudTrailCybereason Defense Platform
Editions & Modules
No answers on this topic
No answers on this topic
Offerings
Pricing Offerings
AWS CloudTrailCybereason Defense Platform
Free Trial
YesNo
Free/Freemium Version
YesNo
Premium Consulting/Integration Services
YesNo
Entry-level Setup FeeNo setup feeNo setup fee
Additional DetailsYou can view, filter, and download the most recent 90 days of your account activity for all management events in supported AWS services free of charge. You can set up a trail that delivers a single copy of management events in each region free of charge. Once a CloudTrail trail is set up, Amazon S3 charges apply based on your usage. You will be charged for any data events or additional copies of management events recorded in that region. In addition, you can choose CloudTrail Insights by enabling Insights events in your trails. CloudTrail Insights analyzes write management events, and you are charged based on the number of events that are analyzed in that region.
More Pricing Information
Community Pulse
AWS CloudTrailCybereason Defense Platform
Features
AWS CloudTrailCybereason Defense Platform
Endpoint Security
Comparison of Endpoint Security features of Product A and Product B
AWS CloudTrail
-
Ratings
Cybereason Defense Platform
9.1
2 Ratings
7% above category average
Anti-Exploit Technology00 Ratings8.32 Ratings
Endpoint Detection and Response (EDR)00 Ratings9.62 Ratings
Centralized Management00 Ratings9.62 Ratings
Hybrid Deployment Support00 Ratings6.01 Ratings
Infection Remediation00 Ratings10.02 Ratings
Vulnerability Management00 Ratings10.01 Ratings
Malware Detection00 Ratings10.02 Ratings
Best Alternatives
AWS CloudTrailCybereason Defense Platform
Small Businesses
Armor
Armor
Score 6.0 out of 10
ThreatLocker
ThreatLocker
Score 9.4 out of 10
Medium-sized Companies
Druva Security Cloud
Druva Security Cloud
Score 9.5 out of 10
CrowdStrike Falcon
CrowdStrike Falcon
Score 9.1 out of 10
Enterprises
Druva Security Cloud
Druva Security Cloud
Score 9.5 out of 10
BeyondTrust Endpoint Privilege Management
BeyondTrust Endpoint Privilege Management
Score 10.0 out of 10
All AlternativesView all alternativesView all alternatives
User Ratings
AWS CloudTrailCybereason Defense Platform
Likelihood to Recommend
8.0
(4 ratings)
8.7
(2 ratings)
User Testimonials
AWS CloudTrailCybereason Defense Platform
Likelihood to Recommend
Amazon AWS
It is necessary to enable [AWS] Cloudtrail when using AWS in a production environment, otherwise you will not have any idea what is happening within your accounts. Third party monitoring applications will all require [AWS] CloudTrail to be enabled as well. I would not recommend it solely as a monitoring tool, to get the most out of it you must send the logs elsewhere. Either to Cloudwatch logs or a third party product.
Read full review
Cybereason
I'd recommend Cybereason due to it's efficacy, low TCO, low false/positive rate. The product was easy to implement and maintain. One of the major advantages of using Cybereason is that it requires minimal training for level 1 users to use the tool.
Read full review
Pros
Amazon AWS
  • API Log
  • User activity tracking
  • Real-time alerts
Read full review
Cybereason
  • EDR
  • Forensics
  • Mitigation
  • Response
Read full review
Cons
Amazon AWS
  • [In my experience] Cost can easily get out of control with multiple trails on full logging
  • Logs can be difficult to decipher
Read full review
Cybereason
  • Slow support
  • Bugs on their interface
  • Log extraction
Read full review
Alternatives Considered
Amazon AWS
I think in the end, CloudTrail has more features and you can dive deeper inside the logs so it depends on your usage and what you expect in the end to make the right choice, I would say that both tools are really useful and bring a lot of benefits to I.T. companies.
Read full review
Cybereason
Cybereason provides superior protection than either Microsoft or CrowdStrike and a better TCO. We receive less false positives than with Microsoft Defender and Cybereason is easier for level 1 users to use.
Read full review
Return on Investment
Amazon AWS
  • Allows us to investigate any strange api actions
  • Increases security
  • Audit trail of changes made in AWS
Read full review
Cybereason
  • Helps on threat hunting
  • MalOps is very good
  • When we face a bug, it takes too much time for them to respond
Read full review
ScreenShots

AWS CloudTrail Screenshots

Screenshot of CloudTrail Insights: Identify and respond to unusual operational activity
•Unexpected spikes in resource provisioning
•Bursts of IAM management actions
•Gaps in periodic maintenance activity
•Automatic analysis of API calls and usage patterns
•Alerts when unusual activity is detected