IBM X-Force Exchange vs. Trellix Threat Intelligence Exchange

IBM X-Force is well suited for organizations with medium to large SOC's and run IBM Qradar as their SIEM.

Incentivized

We use it to protect our workstations from outside the internet attacks and keep our data safe. It also restricts users not to visit malicious websites and block suspicious downloads to the system. But it does take a lot of memory and make the system slow. It is better to have an updated component PC for flawless usage. They can reduce the pricing of the product so even small-scale companies make use of this.

Incentivized

• Ready made security research on threats.
• Security Intel
• Integrate threat intel feeds with SIEMs.

Incentivized

• Provide good insights
• Summary of potential attacks
• Helps Prevents security braches

Incentivized

• Pruning of IOC to reduce false positives.
• Add more flexibility to integration on SIEMs to allow users to compare UserAgents, Compromised users/domains like HIBP.
• Only watch vulnerabilities for selected vendors.

Incentivized

• It is heavy on systems, If you have an outdated system then McAfee is not for them.
• It can consume lot of memory
• Scanning time might take longer then expected
• Pricing is bit high

Incentivized

IBM X-force is community-based and crowd strike is not. Community-based will always be best-effort quality.

Incentivized

We already have other McAfee products being used in our organization. Hence the partnership with McAfee has been made. The main reason is its easy to use, it keeps your data safe and priced effectively. What else we expect from a security software. I would definitely recommend this to everyone.

Incentivized

• Threat Intel - Low Confidence IOC - Overhead.
• Lack of integration with IBM Qradar+Vulnerability via X-Force.

Incentivized

• We do not have ROI on this product
• It does provide network and file security for the entire organization.

Incentivized