Kaspersky Anti Targeted Attack Platform vs. Kaspersky EDR Expert

I would say it is less appropriate for an organization which is looking to implement a tool within a short period of time. However, we found support on the web forum as well as from support team and were given solutions always. It was somewhat a relief for the users. We were not in a position to provide further IT security resources. And Anti Targeted Attack Platform did not require such. The tool was able to identify and eliminate a critical threat right after the implementation.

Easy to learn, use and deploy. Kaspersky EDR Expert allows to automatically find unmanaged and rogue endpoints, remove previous agent from another vendor, install its agent, move endpoint to a group based on endpoint's characteristics, change security policies if for example endpoint is moved to another subnet or currently out-of-office, apply malware outbreak rules in case of attack

• Complex attacks are identified frequently.
• Advanced thread intelligence.
• Privacy of all data is very well maintained.

• Identify and automatically respond to end-point security threats
• Protect end-point systems against a broad range of cyber attacks
• Reduce operational costs to support EDR services

Incentivized

• False positives were identified frequently.
• Implementing rules are a very complex process.
• UI crashes were spotted randomly.
• Deployment needs to be much smoother.

• Linux-systems support on the same level like windows systems
• Untying from Kaspesky ATA
• AI add to ease the way of profiling the system (it requires 1 FTE to examine all the incidents on 10 000 hosts? too much)

Incentivized

I believe the Kaspersky EDR Expert systems represent significant cyber risks for government and commercial enterprise customers

Incentivized

Overall, the suite of benefits and more reasonable cost per user/license to the organization were the key components affecting our decision-making.

Incentivized

• Implementation did not go as planned. Therefore, time consumption was increased.
• Since we moved out of the tool, we had to consider another which costed time.

• Automating response task on suspicious activity
• Improving IT specialists skills and IS specialists skills
• Increased visibility of what malware really do on endpoint