Cybereason Defense Platform vs. Microsoft Defender for Endpoint

I'd recommend Cybereason due to it's efficacy, low TCO, low false/positive rate. The product was easy to implement and maintain. One of the major advantages of using Cybereason is that it requires minimal training for level 1 users to use the tool.

Incentivized

if you have significant no. Microsoft products in your ecosystem then Defender works extremely well. We onboarded defender as part of M365, which includes MDO and MDE both. If your customers are spread across multiple geographies, then Defender can help you setup Compliance policies based on each reason which reduces the efforts from DPO significantly. Apart from these, I feel it is a feature rich and stable EDR product.

Incentivized

• EDR
• Forensics
• Mitigation
• Response

Incentivized

• I really enjoy the level that we get with our licensing for the timeline on devices, being able to see what happened when it happened down to the millisecond to know exactly what happened when someone clicked something, did something bad, installed something bad, or whichever. And the alert monitoring is really useful for sending emails whenever there's anything that's remotely detected, even if it's a false positive.

Incentivized

• Slow support
• Bugs on their interface
• Log extraction

Incentivized

• Hard to integrate with third party SIEM solution
• Not available for OS other than Windows
• It is a little hard to do threat analysis or investigation when you try to correlate the detection with other security control systems like firewalls, web proxies, etc.

Ease of use

Incentivized

The first time I tried to onboard my macOS endpoints to MDE I struggled for quite a bit. I had to reach out to Microsoft's MDE support team. The tech was very helpful in walking me through the steps during a screen share session

Incentivized

Cybereason provides superior protection than either Microsoft or CrowdStrike and a better TCO. We receive less false positives than with Microsoft Defender and Cybereason is easier for level 1 users to use.

Incentivized

This product does do a very good job of providing basic security protection for our client endpoints. We decided to go with this product because of the ease of setup and integration into the Windows server environment. We have not had any complaints from any of our clients using this product.

Incentivized

• Helps on threat hunting
• MalOps is very good
• When we face a bug, it takes too much time for them to respond

Incentivized

• Positive - Alot of money saved because of looming security threats today in Work from Home environments. Lesser IT cost because of its automation capabilities has made it a really good choice
• Positive - Because of enhanced security , downtimes are reduced thus profits are increased
• Negative- Training cost is something which could have been avoided if this defender had some integration with self training modules
• Negative - Too much costly. Integration cost, new setup cost, ongoing licensing cost etc is too high

Incentivized