Mandiant Managed Defense vs. NetWitness Incident Response and Cyber Defense Services

Rapid identification & Neutralization : The Madiant Rapid Response team will get work right away often within hours to identify and eject the adversary . Others Vendor takes days. Post Incidents Threat Summary: Mandiant provide formal summary of its investigation, detailing the actions it took & discovery it made as well as recommending long term guidance on how to mitigate the recurrence of similar threats in future . Also provide ongoing detection & response.

Incentivized

If an organization has all the best breed cyber security tools are in place & want to know the holistic security posture of the organization, they need to best security program or SOC than RSA NetWitness Incident Response and Cyber defense Services is the best solution. The bottom line is not only buying the best solution but it is also about establishing an effective security program that brings together security expertise, process, and technology to improve an organization's ability to prevent detect and respond to attacks.

Incentivized

• Exposes hidden issues
• Response time is much quicker
• Risk against ransomware is low
• With the help lf experts from the mandiant team support is a click away

Incentivized

• Able to investigate threats faster.
• Faster and more advanced treat detection.
• Analytics.

Incentivized

• Very little opportunities for improvement. Perhaps support for more alert types. Currently, not all alerts reviewed by the in-house CSOC team are in-scope for Managed Defense.

• NetWitness Incident Response and Cyber Defense Services SIEM managed services which we call managed SOC requires multiple resources with expertise in different domains like Threat forensics & Logs Analytics ..etc. Sometimes it gets tough to get the right resources.
• Difficulty in navigating & configuring, which is necessary for any solution to get the best result & reporting part.
• Commercial of solution in comparison to competitors is at the higher end.

Incentivized

We are a quiet shop with few incidents, however, MD's response to questions and access to our assigned MD consultant is excellent.

Incentivized

Honestly, Mandiant seems to be the best all around. Even with being a smaller business, it’s help tremendously and keeps us feeling safe and protected

Incentivized

ES offers the single pane of glass for investigation and monitoring needs, however, to get everything onboarded can be daunting. The identiy and assets enrichment was not as straightforward and required a lot of manual work to make them work. For it to be optimized for full benefit, there is a layer of complexity that needs to be managed along the journey post deployment as well

Incentivized

• Mandiant is strong on automated remediation & rollback
• Predictable Pricing Rapid Response is sold as fixed days term license this takes way risk of hourly billing and runway costs

Incentivized