ThreatConnect Threat Intelligence Operations Platform vs. VirusTotal

If ThreatConnect is going to be used to create playbooks the required technical knowledge and try and error that is required may not be for everyone. The application provides an app builder capability that is really useful but in order to be used the user needs to have intermediate to advanced programing abilities.

VirusTotal is perfectly suited as a tool to help security professionals analyze files and URLs that require further analysis to determine security risks in the environment. It truly is a must-have in this world we live in!

Incentivized

• One of the most beneficial features of the ThreatConnect is its ability to automatically enrich IOCs from multiple sources such as VT WHOis and assign a dynamic threat score.

Incentivized

• Fast file scanning
• No agent required
• Available from anywhere

Incentivized

• Need to have more native (out of the box) integrations
• Need more focused training courses and certificates

Incentivized

• I'm not sure VirusTotal can improve this themselves but just keeping up with the evolving "known" threat landscape is tough so even though VirusTotal is very good, nothing is 100% effective in this space.

Incentivized

The platform is feature rich in enrichment and multi tenant management additionally have the ease of the use for new analysts or smaller teams.

Incentivized

As ThreatConnect Threat Intelligence Operations Platform has a ready HTTP Client App, we can virtually integrate it with any system that supports REST APIs. This gives great room for integration and automation that is not found on other systems.

Incentivized

Honestly, we have always used VirusTotal, its a leader in the industry and meets our needs perfectly so we have never had the need to look elsewhere

Incentivized

• Playbooks allow for extensive automation of tasks the team would otherwise spend hours on

Incentivized

• Extremely useful to confirm if a file is suspicious or not

Incentivized