Microsoft Security Copilot vs. Trellix Intelligent Sandbox

It's easy to integrate with other tools because it's a native Microsoft solution for generating OAuth tokens and handling other integrations. But as far as querying for data, using the LLM to analyze it and find that needle in the haystack, whatever, I feel it's terrible. In my experience, it just takes so much manipulation to get it to actually do what you want it to do.

Incentivized

McAfee Advanced Threat Defense is great in large enterprise environments with large, highly segmented networks. The administrator can create exceptions for specific applications as well as create exceptions through HAS which is very convenient for applications created in house. I do not recommend installing it on a computer with little ram memory, since this product demands a lot of resources and can be clearly distinguished in the Windows task monitor.

Incentivized

• Sometimes people don't know how to do a certain feature, especially in Excel, for example. It's a little bit more complex and a community for certain people. And with just a couple of questions about using Microsoft Security Copilot, they can get their answers ready, not having to get support from IT, right? So it eliminates multiple tickets and support from personnel on our team, and they can get the response themselves via this assistant.

Incentivized

• Virus and threat prevention
• Sandbox option
• VPN
• It does run flawlessly in background
• It can detect email threats too

Incentivized

• I don't have that as of yet. I do like the product for now. I'm sure that as I use it more, I will find things that can be improved. Just understanding how it integrates with the Microsoft ecosystem, it works just fine for what I use it for.

Incentivized

• There should be more updates.
• It is heavy on our system's storage or we need a high-storage system to run this tool.
• Its pricing is disappointing.

Incentivized

We are not going to stop using M365 and our environment is large enough that there is not enough in-house expertise to handle all aspects of security, even with the help of a MSSP. Security Copilot helps us shore up the knowledge gap and keep our organization's security posture tight.

Incentivized

Anyone can use it. Easy to prompt, also capabilities to become advance with custom agents. It can become custom to your workflow. Many people will have their unique experiences to share and results are generally positive. This is a growth in the product from the effect of community and adoption/usage.

Incentivized

Never contacted support

Incentivized

Personally, I have only called our internal IT team about needing changes to permissions, not McAfee itself, but our IT team can make the changes though it seems to take them longer than I would think it needs to take. As someone who administers a different program, with different permissions, I would feel they should be able to make the exceptions faster and easier.

Incentivized

My usage of other products is based on SIEM tools. So far, Microsoft Security Copilot is the only product I've seen that works across multiple technologies/products to provide full visibility into security tooling using AI. I know other vendors are working towards this, but Microsoft has definitely taken a lead.

Incentivized

McAfee brand is used, mcafee antivirus scan, mcafee drive encryption, mcafee DLP, mcafee cloud proxy. He Kaspersky at the corporate level and used his admin dashboard is a bit rough. I recommend mcafee since the graphical environment is very friendly with the administrator. We selected it because at the administration level it is more comfortable, support for end users is very easy, the administration console can create roles and segregate permissions.

Incentivized

• I'd say it was initially negative because it took us time to learn it and understand how to build the workflow around it. But since then, we've been able to speed up and adjust and adapt and move a lot faster. So it's overall.
• It is definitely in the positive area now.

Incentivized

• It does provide real-time threat prevention
• Good customer support
• System needs high configuration for seamless operation

Incentivized