Carbon Black EDR vs. CyberCPR

We are able to check if any phishing link was visited by the user or not. To check for the whether any file is executed on the machine or not. To check on which port connections are being made by the machine. To create custom watchlist for alert to be investigated by an analyst. To check every process executed in the machine for a specified range.

Incentivized

[We use CyberCPR] for investigations on IT that are totally compromised. Using the cloud solution, you can be up and running in minutes with the advantage of being able to access the tool from anywhere on the internet. New users are onboarded quickly and can pick it up fast. It scales well from 3 users to 500 and the server load looks low.

• Process tree view of endpoint activity
• Ability to pull files from host
• Threat Intelligence integration
• Isolate a host

Incentivized

• Clean UI
• Easy to use
• Fast user onboarding
• Managed communications well

• Number of false positive which are triggered due to threat feeds are sometimes more needs to be fine tuned by the client.
• In very rare scenarios processes are not captured properly.

Incentivized

• API development has been a long time coming

CB Response allows for a better view of what happened on the endpoint and provides more functionality out of the box then the FireEye Endpoint Security Product. CB Response allows you to basically have a remote connection into the CLI of an endpoint. This allows you to view the file system, run programs/scripts on the host, etc. FireEye Endpoint Security does not have this functionality.

Incentivized

It's simpler to use, doesn't cost vast sums (it's about 1/10 of the others looked at). Users like the cleaner UI and it's not complicated

• It is helping to protect us from potential loss of revenue that would be caused by malware or a compromised account.
• It took some time in deploying in the environment , but that time is much worth it because of the results we are getting now.
• It helps in hunting, which help us check and protect our environment from any cyber attacks.

Incentivized

• It's low cost means the ROI is higher
• The security means when needed, its there and ready to be used.
• The deployment options mean you can choose one to match budget.