IBM X-Force Exchange vs. VirusTotal

IBM X-Force is well suited for organizations with medium to large SOC's and run IBM Qradar as their SIEM.

Incentivized

VirusTotal is perfectly suited as a tool to help security professionals analyze files and URLs that require further analysis to determine security risks in the environment. It truly is a must-have in this world we live in!

Incentivized

• Ready made security research on threats.
• Security Intel
• Integrate threat intel feeds with SIEMs.

Incentivized

• Fast file scanning
• No agent required
• Available from anywhere

Incentivized

• Pruning of IOC to reduce false positives.
• Add more flexibility to integration on SIEMs to allow users to compare UserAgents, Compromised users/domains like HIBP.
• Only watch vulnerabilities for selected vendors.

Incentivized

• I'm not sure VirusTotal can improve this themselves but just keeping up with the evolving "known" threat landscape is tough so even though VirusTotal is very good, nothing is 100% effective in this space.

Incentivized

IBM X-force is community-based and crowd strike is not. Community-based will always be best-effort quality.

Incentivized

Honestly, we have always used VirusTotal, its a leader in the industry and meets our needs perfectly so we have never had the need to look elsewhere

Incentivized

• Threat Intel - Low Confidence IOC - Overhead.
• Lack of integration with IBM Qradar+Vulnerability via X-Force.

Incentivized

• Extremely useful to confirm if a file is suspicious or not

Incentivized