Proofpoint Threat Response Auto-Pull vs. VMware Carbon Black EDR

If your email admins spend time manually pulling malicious emails, this tool will save them countless hours of work and will do it for them 24 x 7. So if a user receives a malicious email after-hours, TRAP will auto pull it from the affected user's mailbox and potentially save you from an IT disaster.

Incentivized

We are able to check if any phishing link was visited by the user or not. To check for the whether any file is executed on the machine or not. To check on which port connections are being made by the machine. To create custom watchlist for alert to be investigated by an analyst. To check every process executed in the machine for a specified range.

Incentivized

• Auto pull works great, even with our hybrid situation with 2 on premise exchange organizations.
• Reporting is good, nice graphs of all the actions.

Incentivized

• Process tree view of endpoint activity
• Ability to pull files from host
• Threat Intelligence integration
• Isolate a host

Incentivized

• Learning curve is steep.
• Interface can be clunky.
• Some interface items seem counter-intuitive.

Incentivized

• Number of false positive which are triggered due to threat feeds are sometimes more needs to be fine tuned by the client.
• In very rare scenarios processes are not captured properly.

Incentivized

It's easy to use and requires very little administrator hands on.

Incentivized

They are quick to respond and have talented support personnel.

Incentivized

I have never evaluated TRAP against another product.

Incentivized

CB Response allows for a better view of what happened on the endpoint and provides more functionality out of the box then the FireEye Endpoint Security Product. CB Response allows you to basically have a remote connection into the CLI of an endpoint. This allows you to view the file system, run programs/scripts on the host, etc. FireEye Endpoint Security does not have this functionality.

Incentivized

• Chances of phishing attacks has decreased.
• Your employees don't have to do anything, so no impact on productivity.

Incentivized

• It is helping to protect us from potential loss of revenue that would be caused by malware or a compromised account.
• It took some time in deploying in the environment , but that time is much worth it because of the results we are getting now.
• It helps in hunting, which help us check and protect our environment from any cyber attacks.

Incentivized