Barracuda Forensics and Incident Response vs. VMware Carbon Black EDR

The Barracuda Forensics and Incident Response is best suited as an addition to the Barracuda Sentinel. After Barracuda Sentinel discovers a phishing email or account takeover, the Barracuda Forensics and Incident Response allows you to quickly dive into the details of the email(s) to determine if the email is legitimate or not. It does a very good job finding and deleting any and all emails related to the attack.

Incentivized

We are able to check if any phishing link was visited by the user or not. To check for the whether any file is executed on the machine or not. To check on which port connections are being made by the machine. To create custom watchlist for alert to be investigated by an analyst. To check every process executed in the machine for a specified range.

Incentivized

• Easy user interface
• Simple application with 2 tasks only
• Integrated in the Barracuda Total Email Security Suite

Incentivized

• Process tree view of endpoint activity
• Ability to pull files from host
• Threat Intelligence integration
• Isolate a host

Incentivized

• If you own the total security suite, the use of the app becomes less important
• It would be nice to post a mail yourself in order to delete this mail from other mailboxes. If possible, it is not clear how to do this.

Incentivized

• Number of false positive which are triggered due to threat feeds are sometimes more needs to be fine tuned by the client.
• In very rare scenarios processes are not captured properly.

Incentivized

The dashboard is intuitive and easy to use. One can create a remediation in a minute and have it deployed to remove a threatening email(s) in minutes, instead of hours, across your Exchange network.

Incentivized

Barracuda has always been known for its support team. I have experienced that if you ever have any questions, issues, or problems with any of the Barracuda software, their support team is always available to help resolve your issue.

Incentivized

CB Response allows for a better view of what happened on the endpoint and provides more functionality out of the box then the FireEye Endpoint Security Product. CB Response allows you to basically have a remote connection into the CLI of an endpoint. This allows you to view the file system, run programs/scripts on the host, etc. FireEye Endpoint Security does not have this functionality.

Incentivized

• It provides a uniform way of reporting bad mail.
• Without scripting knowledge, you can eliminate bad mail from users mailboxes.

Incentivized

• It is helping to protect us from potential loss of revenue that would be caused by malware or a compromised account.
• It took some time in deploying in the environment , but that time is much worth it because of the results we are getting now.
• It helps in hunting, which help us check and protect our environment from any cyber attacks.

Incentivized