Sophos Rapid Response vs. VMware Carbon Black EDR

Knock on wood we haven't had a instance where we need to bring the Rapid Response team in. But from the meetings we had we are certain that they will be a valuable asset if and when we have an incident.

Incentivized

We are able to check if any phishing link was visited by the user or not. To check for the whether any file is executed on the machine or not. To check on which port connections are being made by the machine. To create custom watchlist for alert to be investigated by an analyst. To check every process executed in the machine for a specified range.

Incentivized

• 24/7 team of remote incident responders
• Full-scale incident response service that will triage, contain and neutralize active threats
• Port Mortem of the incident with recommendations

Incentivized

• Process tree view of endpoint activity
• Ability to pull files from host
• Threat Intelligence integration
• Isolate a host

Incentivized

• For a non-profit pricing could always be better

Incentivized

• Number of false positive which are triggered due to threat feeds are sometimes more needs to be fine tuned by the client.
• In very rare scenarios processes are not captured properly.

Incentivized

We were a Secureworks customer and there were limitations on the platform that caused us to evaluate competitors. We didn't get to far in discussions with Palo but from what we heard and reach about Sophos RR it was an easy decision.

Incentivized

CB Response allows for a better view of what happened on the endpoint and provides more functionality out of the box then the FireEye Endpoint Security Product. CB Response allows you to basically have a remote connection into the CLI of an endpoint. This allows you to view the file system, run programs/scripts on the host, etc. FireEye Endpoint Security does not have this functionality.

Incentivized

• It was a positive when we negotiated our cyber insurance
• It is comforting to the Board of Trustees that we have this in our back pocket
• Helps us sleep at night knowing they're a phone call away

Incentivized

• It is helping to protect us from potential loss of revenue that would be caused by malware or a compromised account.
• It took some time in deploying in the environment , but that time is much worth it because of the results we are getting now.
• It helps in hunting, which help us check and protect our environment from any cyber attacks.

Incentivized