Mandiant Advantage Threat Intelligence vs. Mimecast Threat Intelligence

Usually SOC leverages Intel from mutiple sources. The scenarios are: 1.Suitable: In large scale SOC where more than 5000 devices are being monitored and the tech stack is wide, Mandiant will play an excellent role in that scenario. 2.Not Suitable: In small scale SOCs wherein limited devices belonging to the same tech stack is being used then the analysts can rely on OSINT and it is not useful to buy the solution.

Incentivized

I think Mimecast is great for companies who want granular control over their email. Once it is setup, it really does just run along without IT needing to get involved too much. Any time we have 'issues' - such as incorrectly blocked emails or attachments, we can easily figure out what we need to do and how to fix it. Mimecast is great for teams who don't want to sit there all day and manage and look at emails. It would suit a large organisation who want deep control.

Incentivized

• accelerated threat response feature, prioritizing threats according to requirement.
• Optimization of the threat intelligence , and can be integrated with 3rd party tools.
• Features like - Breach ,Adversary, Machine and Operational Intelligence.
• Mandiant dynamic host and the malware views along with indicators.

Incentivized

• Because all incoming and outgoing (with journaling setup for internal email) go through Mimecast it is a one-stop-shop for searching out emails from past months or years. It is light years better than using local archives such as .pst files.
• Since they touch all incoming email Mimecast is excellent our filtering out spam, malware and virus emails before it even gets to your server whether on-premise or in the cloud.

Incentivized

• Paywalls exist throughout the data set and can halt an investigation without the right model
• Some data was incomplete or broken up between pay tiers
• Navigation through the data lacked a definitive trail or breadcrumbs to retrace steps during investigations

Incentivized

• The interface for the threat intel dashboard could use some updating
• Slowness in the console persists occassionally

Incentivized

It works perfectly and is really easy to manage when you understand the menu and how it works. It really is 'set and forget' with minor changes needed from time to time to blacklist and whitelist senders and domains. It makes our life really easy and gives us a lot of data to understand how or business and users operate.

Incentivized

Mandiant Advantage Threat Intelligence has a very usable platform, with well-differentiated sections for the analyst, as well as the possibility of cross-searching to obtain the desired results. All this is presented with an interface that is easy on the eye and not very messy, which increases productivity and the speed with which work is done.

Incentivized

Mimecast has a 24 hours phone hotline available to assist you with issues as they arise. This is the typical help desk situation where you reach level one and go to level two if this issue is extensive however I have found their level one techs to more than capable of dealing with most issues I have called about. The only negative I would mention is that their email support is less hardy when it comes to response time so I have grown to realize that calling is the only way to get timely support.

Incentivized

I was shown the areas we would need to use and understand, along with the settings. It was perfect as it didn't go too deep.

Incentivized

It gives more ways to analyze threats and options to fixed it. This device gives more visibility on vulnerability detection and its analysis. It provides detailed reports to have more information of all malwares which help us to increase overall security of our current organization

Incentivized

we were not using any other products before Mimecast. It is working perfectly as per our needs.

Incentivized

• Improved incident response time
• Specific investigations that have reduced the attack surface
• Technical reports on threats not controlled by the bank's local team

Incentivized

• Saves time and manpower as the console can easily be managed by 1 person
• Using the continuity feature could potentially save an email outage from preventing an organization from conducting business.

Incentivized