#1 most frequent
United States of America
100.0%1 installation of 1
What is BlackBerry Optics (CylanceOPTICS)?
BlackBerry Optics originated from Cylance, which became a Blackberry company from the early 2019 acquisition. BlackBerry Optics (formerly CylanceOPTICS) is an incident response solution emphasizing fast endpoint detection and automated smart threat response, root cause and context analysis, and other features.
Categories & Use Cases
Top Performing Features
Company-wide Incident Reporting
Built-in enterprise-level ticketing system to leverage the knowledge of the entire workforce, not just the security team
Category average: 7.2
Integration with Other Security Systems
Pre-built integration with other security systems like SIEM and threat intelligence
Category average: 7.1
Attack Chain Visualization
Attack chain visualization to help identify root cause
Category average: 6.6
Areas for Improvement
Centralized Dashboard
A central dashboard provides analysts with a clear look at the most important data
Category average: 8.4
Machine Learning to Prevent Incidents
Incident prevention powered by machine learning with no human intervention
Category average: 7.8
Live Response for Rapid Remediation
Live remediation response allows incident responders to initiate remediation from anywhere over secure connection
Category average: 8.1
Sleep Easy Knowing Cylance Has Your Back.
Use Cases and Deployment Scope
BlackBerry Optics is packaged with our Cylance AntiVirus. Combining the two helps us better understand threats that may or may not exist on a user's machine. The hardened policies allow us to block pretty much any and all malicious payloads that may try to find their way onto someone's machine.
Pros
- The ability to block PowerShell and .exe files from running.
- Alert to potential malicious issues.
- Direct quarantining of devices if necessary.
Cons
- No major complaints! Love everything about the service.
Return on Investment
- It helps us to know that things are much more hardened than they were with our old "definition-based" Antivirus software.
- We can sleep at night.
- Reduced the amount of Virus' on users' machines.
Alternatives Considered
Arctic Wolf Managed Detection and Response and Cisco Umbrella
Other Software Used
Arctic Wolf Managed Detection and Response, Cisco Umbrella, Cisco Duo
Practical Cylance Optics
Pros
- Maps out solid template frameworks.
- Makes reporting to executives easy to compile and understand.
Cons
- The playbooks are a bit tedious and hard to understand.
- The documentation appears somewhat lacking.
Return on Investment
- Addresses known gaps easily.
- Quick to implement.