Logsign vs. Trellix Helix

Logsign SIEM is well suited for organizations that need quick deployment, and do not need very skilled specialists, everything is easy and intuitive. And with the new license model, it is a very affordable solution. It has everything that modern SOC needs nowadays, automated/semi-automated responses. There are also many plugins for the log source integration, possibilities to create custom your own plugin/logic

Incentivized

The UI displays wells the deviations and anomalies using advanced threat intelligence so you have full control of your security ecosystem. We've used it for two years to secure our servers and we easily customize threat detections to reduce the stressful false positives. We fill the XDR AI with data and it correlates with incident data to deliver unmatched frontline security intelligence.

Incentivized

• Google like search capabilities
• Very easy to create correlation/cross correlation rules
• In-house Rules and Behavioral lists
• Easy to update/upgrade the whole solution

Incentivized

• Detection of advanced threats.
• Easy integration with cloud resources and our existing security tools thus enhancing performance.
• Easy deployment with great threats intelligence capabilities.

• Overly complex platform
• Multiple logins needed for various tools--leads to confusion
• Costs can add up

Incentivized

We've been fairly happy with FireEye Helix support overall. Most issues are resolved the same day the case is opened.

Incentivized

I find Helix to be super-efficient and able to cut through the noise. Previous installations of LogRhythm and Splunk resulting in an overwhelming amount of noise (out of the gate), and we had to constantly tune out false positives. Helix is different. Out of the gate, Helix provided higher fidelity hits, and our teams don't spend half their day turning out the noise.

Incentivized

• Within the first days of implementation, you have the big picture of what is happening in the organization's environment
• The license model is very understandable and affordable for any organization even for the smaller ones who earlier could not afford robust SIEM solutions
• Support is very responsive and skilled

Incentivized

• Optimization of your security investments.
• Operations are seamless and better with easy integrations that enhance performance.
• Efficiency in running of incidences with enhanced case management for all its alerts.