Carbon Black EDR vs. Informatica Data Archive (legacy)

We are able to check if any phishing link was visited by the user or not. To check for the whether any file is executed on the machine or not. To check on which port connections are being made by the machine. To create custom watchlist for alert to be investigated by an analyst. To check every process executed in the machine for a specified range.

Incentivized

To manage users, go to the admin dashboard, here is a section for users. In this users section here you can see which users are configured and you have the ability to suspend a user. If you want to edit or add users, you need to go to the Organization section, then click on another user section there, which then gives you the ability to edit or add users.

Incentivized

• Process tree view of endpoint activity
• Ability to pull files from host
• Threat Intelligence integration
• Isolate a host

Incentivized

• Works well with curated data
• Allows you to monitor data movements within an organisation
• Advisable to use ILM if already using Informatica PowerCenter

Incentivized

• Number of false positive which are triggered due to threat feeds are sometimes more needs to be fine tuned by the client.
• In very rare scenarios processes are not captured properly.

Incentivized

• As we are still piloting the product at our company at this time the feedback is highly limited.

Incentivized

CB Response allows for a better view of what happened on the endpoint and provides more functionality out of the box then the FireEye Endpoint Security Product. CB Response allows you to basically have a remote connection into the CLI of an endpoint. This allows you to view the file system, run programs/scripts on the host, etc. FireEye Endpoint Security does not have this functionality.

Incentivized

[The] customer support is quite good. Cost also has another point to add, along with process integration and ease of using new tool.

Incentivized

• It is helping to protect us from potential loss of revenue that would be caused by malware or a compromised account.
• It took some time in deploying in the environment , but that time is much worth it because of the results we are getting now.
• It helps in hunting, which help us check and protect our environment from any cyber attacks.

Incentivized

• it is also fully integrated with all other AWS services
• manages the entire life cycle of the Certificates by itself, so it will reduce your work by a really big amount
• it can also be easily integrated with ELB and front-end cloud services.

Incentivized