47 Ratings
<a href='https://www.trustradius.com/static/about-trustradius-scoring' target='_blank' rel='nofollow noopener noreferrer'>trScore algorithm: Learn more.</a>
Score 7.7 out of 100
21 Ratings
<a href='https://www.trustradius.com/static/about-trustradius-scoring' target='_blank' rel='nofollow noopener noreferrer'>trScore algorithm: Learn more.</a>
Score 7.8 out of 100

Likelihood to Recommend

LogRhythm NextGen SIEM Platform

I will say that the LogRhythm NextGen SIEM Platform is well suited for an organization that is not very big but has multiple log sources. Or a lot of non-technical employees who do not know how to code or do write custom queries. Typically it is a good fit for universities and mid-range startups. This has an excellent interface, dashboard, useful for managing roles, but it doesn't provide the level of customization that a technical person with knowledge of coding probably would prefer. Software like Splunk and Elastic Search are much more flexible in terms of the granularity of the search.
Anonymous | TrustRadius Reviewer

Microsoft Defender ATP

It would be well suited in an environment where most all your endpoints are Windows-based computers, as Windows Defender is already built into the operating system, so there is no client to have to worry about installing. It also will make the management of endpoints easier on the server side, if most all machines are Windows-based.It might be less of ideal solution if a company/organization were looking for something more robust, or had a lot more features/configuration settings. It also might be less ideal for a company/organization that was looking for a product that didn't have a high detection rate of false positives
Anonymous | TrustRadius Reviewer

Feature Rating Comparison

Security Information and Event Management (SIEM)

LogRhythm NextGen SIEM Platform
8.6
Microsoft Defender ATP
Centralized event and log data collection
LogRhythm NextGen SIEM Platform
9.5
Microsoft Defender ATP
Correlation
LogRhythm NextGen SIEM Platform
9.0
Microsoft Defender ATP
Event and log normalization
LogRhythm NextGen SIEM Platform
8.7
Microsoft Defender ATP
Deployment flexibility
LogRhythm NextGen SIEM Platform
8.3
Microsoft Defender ATP
Integration with Identity and Access Management Tools
LogRhythm NextGen SIEM Platform
7.9
Microsoft Defender ATP
Custom dashboards and views
LogRhythm NextGen SIEM Platform
9.2
Microsoft Defender ATP
Host and network-based intrusion detection
LogRhythm NextGen SIEM Platform
7.4
Microsoft Defender ATP

Endpoint Security

LogRhythm NextGen SIEM Platform
Microsoft Defender ATP
8.2
Anti-Exploit Technology
LogRhythm NextGen SIEM Platform
Microsoft Defender ATP
8.0
Endpoint Detection and Response (EDR)
LogRhythm NextGen SIEM Platform
Microsoft Defender ATP
8.3
Centralized Management
LogRhythm NextGen SIEM Platform
Microsoft Defender ATP
9.0
Hybrid Deployment Support
LogRhythm NextGen SIEM Platform
Microsoft Defender ATP
7.0
Infection Remediation
LogRhythm NextGen SIEM Platform
Microsoft Defender ATP
8.0
Vulnerability Management
LogRhythm NextGen SIEM Platform
Microsoft Defender ATP
8.7
Malware Detection
LogRhythm NextGen SIEM Platform
Microsoft Defender ATP
8.4

Pros

LogRhythm NextGen SIEM Platform

  • LogRhythm is a great SIEM to learn content on because the building blocks are very intuitive and easy to implement. All of the concepts relevant to content development are literally represented as drag and drop building blocks that can be easily manipulated.
  • The statistical building blocks contain powerful anomaly detection capabilities that are extremely difficult to implement in other SIEMs or not possible at all.
  • LogRhythm does better event classification than any other SIEM by far. My team typically drops all classification schemes from default installations of SIEMs and rebuilds them from scratch. I can actually use LogRhythms event classifications in rules without worrying about excessive partial matches or correlating unwanted events.
Joel Eng | TrustRadius Reviewer

Microsoft Defender ATP

  • Low impact on computer performance.
  • Easy-to-use interface.
  • Several settings that help you customize the software.
Danilo Soares Peres | TrustRadius Reviewer

Cons

LogRhythm NextGen SIEM Platform

  • While searching for log events is quick, the interface isn't as user-friendly as other SIEM products.
  • Many of the administrative/management functions are only available through the full LogRhythm desktop console, not through the web console.
  • The LogRhythm agent, when used for FIM and RIM, is very memory intensive.
Anonymous | TrustRadius Reviewer

Microsoft Defender ATP

  • Deployment: We've had some issues deploying, especially outside of the Windows environment.
  • Offboarding: There is currently no way to delete a computer. They disappear over time. We even renamed a computer, and it kept both the old and new name in there. Eventually, the older machines do go away, but there is no manual way to do this at the moment.
Anonymous | TrustRadius Reviewer

Likelihood to Renew

LogRhythm NextGen SIEM Platform

LogRhythm NextGen SIEM Platform 9.0
Based on 1 answer
LogRhythm is focused on SIEM. That is their core business. Cost of operations, feature set and ease of use. The Log Rhythm support team is outstanding. Overall reliability is good. Reporting module needs some improvement and LR is promising that there will be significant improvements in future releases.
James Harrison | TrustRadius Reviewer

Microsoft Defender ATP

No score
No answers yet
No answers on this topic

Usability

LogRhythm NextGen SIEM Platform

LogRhythm NextGen SIEM Platform 8.0
Based on 2 answers
LogRhythm does a rather decent job of making the functionality advanced (allowing for advanced keyword & field searching, use of "AND" as well as "OR" statements in the search bar) while keeping it accessible (by not requiring a specific syntax to do quick searches). This combined with a user interface that has headings and labels that are intuitive is very helpful.
Anonymous | TrustRadius Reviewer

Microsoft Defender ATP

No score
No answers yet
No answers on this topic

Support Rating

LogRhythm NextGen SIEM Platform

LogRhythm NextGen SIEM Platform 8.0
Based on 18 answers
Support has always been fantastic for this product compared to many other support providers I've worked with. They are always very friendly and seem to be well trained and knowledgeable and never have to wait long for a solution. We usually get the issue fixed in the first call, but also we really haven't had to use support a ton so that's also a plus
Anonymous | TrustRadius Reviewer

Microsoft Defender ATP

Microsoft Defender ATP 8.0
Based on 4 answers
I gave it a 7 out of 10 as I feel that there is still a lot of room for improvement. I remember how back in the day the software was looked down upon because of it being an unreliable and inefficient antivirus. But, Microsoft has really put in the hard work and made it worthy for it to be comparable to all the other security services out there.
Tanish Pruthi | TrustRadius Reviewer

Implementation Rating

LogRhythm NextGen SIEM Platform

LogRhythm NextGen SIEM Platform 8.0
Based on 3 answers
  • Buy professional services.
  • Buy and implement the system if possible.
  • Remember that the end point log configuration may require other teams in your company to assist you in getting the desired logs from all resources.
  • Attend the end user and daily operations training after a period of usage so you are not overwhelmed with information on concepts not yet seen.
  • Don't be afraid to call for help during your first months of use.
  • Don't close any ticket until you are sure the expected results are verified.
  • Use the community forums to discuss issues with your peers.
  • Watch the training videos offered by L R University.
James Harrison | TrustRadius Reviewer

Microsoft Defender ATP

No score
No answers yet
No answers on this topic

Alternatives Considered

LogRhythm NextGen SIEM Platform

LogRhythm was simpler to set up and configure as well as extract information from. It also was less intrusive in terms of how many appliances were needed to implement. We were up and running within 5 hours to start accepting log sources. We selected LogRhythm as well since support is based in the USA in Colorado.
Anonymous | TrustRadius Reviewer

Microsoft Defender ATP

MS ATP is lower on system resources and enables us to stretch out our endpoint hardware for an additional year. Also, MS ATP being an MS product fits in very nicely into MS remote management software and MS operating system. We have had little to no issues when hotfixes and roll updates are deployed, unlike 3rd party AV providers that we had experience with in the past.
Anonymous | TrustRadius Reviewer

Return on Investment

LogRhythm NextGen SIEM Platform

  • The ability to search through logs in a centralized location really helps us to provide RCA (Root Cause Analysis) to management for outages. This helps us to quickly identify the cause of outages and thus saves money due to reduced downtime.
  • Being able to configure the alarms to provide real-time notification (and responses) to security events helps to prevent potential loss due to compromises (such as a fraudulent wire transfer).
  • The initial investment in LogRhythm SIEM is somewhat expensive, however, the appliance is built to your specific needs so you won't have to constantly be upgrading the device as your company grows.
Anonymous | TrustRadius Reviewer

Microsoft Defender ATP

  • A positive impact has been to increase productivity for IT staff, as it saves them time from having to install/configure clients on every endpoint.
  • Another positive impact has been on the user/client side, as it helps the user to increase their productivity with working on their computer, as the Windows Defender client uses little resources to run on the system, and has a tendecy to not slowdown systems
Anonymous | TrustRadius Reviewer

Pricing Details

LogRhythm NextGen SIEM Platform

General

Free Trial
Free/Freemium Version
Premium Consulting/Integration Services
Entry-level set up fee?
No

Microsoft Defender ATP

General

Free Trial
Free/Freemium Version
Premium Consulting/Integration Services
Entry-level set up fee?
No

Rating Summary

Likelihood to Recommend

LogRhythm NextGen SIEM Platform
7.7
Microsoft Defender ATP
8.2

Likelihood to Renew

LogRhythm NextGen SIEM Platform
9.0
Microsoft Defender ATP

Usability

LogRhythm NextGen SIEM Platform
8.0
Microsoft Defender ATP

Support Rating

LogRhythm NextGen SIEM Platform
8.0
Microsoft Defender ATP
8.0

Implementation Rating

LogRhythm NextGen SIEM Platform
8.0
Microsoft Defender ATP

Add comparison