Kaspersky EDR Expert vs. TheHive

Easy to learn, use and deploy. Kaspersky EDR Expert allows to automatically find unmanaged and rogue endpoints, remove previous agent from another vendor, install its agent, move endpoint to a group based on endpoint's characteristics, change security policies if for example endpoint is moved to another subnet or currently out-of-office, apply malware outbreak rules in case of attack

Managing incident response - it does exactly what it is supposed to do!

• Identify and automatically respond to end-point security threats
• Protect end-point systems against a broad range of cyber attacks
• Reduce operational costs to support EDR services

Incentivized

• Linux-systems support on the same level like windows systems
• Untying from Kaspesky ATA
• AI add to ease the way of profiling the system (it requires 1 FTE to examine all the incidents on 10 000 hosts? too much)

Incentivized

I believe the Kaspersky EDR Expert systems represent significant cyber risks for government and commercial enterprise customers

Incentivized

Overall, the suite of benefits and more reasonable cost per user/license to the organization were the key components affecting our decision-making.

Incentivized

• Automating response task on suspicious activity
• Improving IT specialists skills and IS specialists skills
• Increased visibility of what malware really do on endpoint