IBM Security QRadar EDR vs. Microsoft Defender for Endpoint

IBM Security QRadaar EDR provides all the security features at one place with a reasonable price. Though for smaller organizations, the price may be quite high. Plus since it can detect threats and malwares in real time, every business should try them out.

Incentivized

Usually we had lots two platforms tasked with scanning exposures, anti-malware and provision for information and threat management. But with Microsoft Defender for Endpoint we have an all inclusive platform that even integrate with other Microsoft security apps such as Microsoft Defender for Cloud for enhanced threat insights and visibility.

Incentivized

• Detect known and unknown endpoint security threats
• Remediate these threats near real time
• Automation in threat detection
• Threat attack attack visualization storyboards
• Alert management authomation

Incentivized

• It provides a unified security experience when combined with other Microsoft products such as Microsoft Defender for 365 and Azure Defender.
• It has an excellent dashboard and centralized view that make it easy to see and control everything from one location.
• It's an EDR tool designed to help you understand incidents and alerts better.
• Real-time detection of attacks and prompt endpoint device responses. It effortlessly interacts with additional Microsoft security products.

Incentivized

• use AI to review previous false negatives that contributed wrongly in the AI suggestion on the follow alerts
• easily run a script based on values from an hash, ips, path inside the boxes on the behavioral tree
• apply the remediation to a range of endpoint instead to only the endpoint of the current alert
• use ajax for example to update the alert page automatically while actions are happening
• for api have profiles that allow only get actions, or just post on some actions
• create users in bulk

Incentivized

• Does not allow for remediation from the management console.
• The ticket system doesn't alert the person assigned to the ticket.
• You have to submit requests for whitelisting applications.
• Scanning exclusions are tricky to find.
• Adding devices, especially Apple devices, is very cumbersome.

Incentivized

The first time I tried to onboard my macOS endpoints to MDE I struggled for quite a bit. I had to reach out to Microsoft's MDE support team. The tech was very helpful in walking me through the steps during a screen share session

Incentivized

Bitdefender GravityZone combines multiple security services into a single platform to reduce the cost of building a trusted environment for endpoints. bit the IBM provides a vast support and always there to guide when in need With the majority of our users working in hybrid mode we needed a strong security control that could provide top-class protection with the minimum amount of False Positives (and, of course, of True Positives).

Incentivized

in an overall protection sentinelone is providing better protection for us, but as it comes with subscription's limitation, we have to be really careful in managing the licenses, the MS Defender for endpoint is providing us a decent protection which we are not complaining about, why we chose them ? as mentioned, this is coming with our subscription

Incentivized

• Positive impact is customizable detection strategy.
• Other positive impact is pin processes in the tree investigation.
• Negative impact is little bit expense.

Incentivized

• By providing robust threat protection, Defender for Endpoint can prevent downtime caused by security issues. Employees can work without interruptions, leading to increased productivity.
• By significantly decreasing the frequency of security incidents like malware infections and data breaches, Microsoft Defender for Endpoint can protect your network. The cost of incident response, cleanup, and potential regulatory fines are reduced as a result of the decrease in events.
• The implementation and configuration of Microsoft Defender for Endpoint may require an initial investment in licensing, training, and deployment, which can temporarily affect ROI.
• The cost of licensing can be substantial, especially for larger organizations. This cost needs to be factored into the ROI calculation.

Incentivized