NetWitness

If an organization has all the best breed cyber security tools are in place & want to know the holistic security posture of the organization, they need to best security program or SOC than RSA NetWitness Incident Response and Cyber defense Services is the best solution. The bottom line is not only buying the best solution but it is also about establishing an effective security program that brings together security expertise, process, and technology to improve an organization's ability to prevent detect and respond to attacks.

Incentivized

• Threat prediction and network forensics are the most useful features. It's possible for me to see who received and clicked on any malware on the network, for example. This is the feature I enjoy the most.
• In addition, the capture packet provides a wealth of information.
• The support.

Incentivized

• Lacking out of the box best practice templates etc. It relies heavily on customization.
• Lack of up to date threat feeds.
• Difficult to learn and use initially.

Incentivized

ES offers the single pane of glass for investigation and monitoring needs, however, to get everything onboarded can be daunting. The identiy and assets enrichment was not as straightforward and required a lot of manual work to make them work. For it to be optimized for full benefit, there is a layer of complexity that needs to be managed along the journey post deployment as well

Incentivized

• The tool is great and an important part of my tool box
• The level of administration needed is a little too high
• Support relationships have to be customer led and prompted

Incentivized