IBM X-Force Incident Response and Intelligence Services (IRIS) vs. Recorded Future Intelligence Cloud

The application monitors data networks in the organization to generate positive infrastructure for controlling workflows. It enables my team to plan and collaborate from unified data connecting system that provides positive decision-making base. It has basic networking capacity of eliminating bottlenecks that slows workflows. The customer support team provides best technical support and leads for gaining maximum benefits. The cost and licensing terms can favor any business enterprise.

If you want a platform that is covering thousands of sources, and that includes deep, dark web, clear web forums, blogs, newspapers, social media networks, etc. Recorded Future is the most complete solution that I have seen. On the other hand, if you are looking for a really advanced platform with lot of human added value, research papers, advanced investigations, etc. Recorded Future might not be the ideal solution.

Incentivized

• Immediate recognition of possible conflicting interests within a field of view.
• Ability to assist users with Research and Development at an extraordinary rate.
• Real-Time feedback via neural pathways to analyze data and implement independent solutions that are tailored to the specific applications on-site.
• This entire review was written with the assistance of IRIS technology as a demonstrative of it's very real practical application. This took less than 2 minutes to write using my own hands.

• Gives latest threat reports regarding an artifact (IP, domain or hash).
• Browser extension provides a real-time information about an artifact.
• Accurate in identifying malicious domains and IPs.

Incentivized

• Suggestion 1) "RE:View" functionality.
• Suggestion 2) "ION = EYE-ON" in Language processing.
• Suggestion 3) Biological GUI+GPU integration.
• Suggestion 4) Ability to "RE:Quest" IRIS Up-link/Down-link interaction. (Inter-Act w/(EYE-ON))

• E-Mail reports can show unrelated content, especially sometimes you'll see alerts popping up for articles which have been published years ago but for some reason were just recently discovered by RF.
• Yara rules from their insikt blog sometimes are not syntactically correct and need to be manually edited to actually work. There's some proper QA missing.
• Their global and 3rd party risk reports could be more tailored towards the industries of their client. There is entries for totally unrelated security incidents. Of course a global list aims to find incidents on a global view, but it doesn't add much value at that point.

Incentivized

I've had an issue with their browser-plugin which didn't want to authenticate correctly. RF's support could arrange for a session with me and identify and solve the issue. I was very pleased how serious they took my problems and also how knowledgeable they are.

If I have more general questions they quickly reply and most likely also have a solution at hand.

Incentivized

Secure work environment with this platform has enhanced effective workflow infrastructure. The cost of deployment and configuration capabilities with other security applications lead to main decision of acquiring this tool. The security control dashboards gives reliable performance reports that leads to quick decision-making when there are malware attacks. It gives lifecycle report for most work processes and threat intelligence information that enables my team to track workloads effectively.

It is the most complete solution of these three, as the others are focused in specific areas and having really detailed analysis about threat actors, APT groups, etc. Recorded Future is not having this level of knowledge in really specific areas but doing a really good work covering thousands of sources and the most relevant forums.

Incentivized

• Recorded Future crashes my web browser in cases I have to open a web page containing hundreds of IPs. A quick disable feature for a particular tab would be beneficial for someone like me.

Incentivized