Item: AlienVault OSSIM
Rating: 10
Author: Verified User

Use Cases and Deployment Scope

AlienVault OSSIM is mostly useful for us to determine which machines are behind on patches and updates. And it is a necessary tool for threat hunting as it collects events from all machines.

Pros and Cons

Event and log management.
Vulnerability scanning.
Graphical analysis and visualization.

Integration with a honeypot.

Most Important Features

Event and log management.
Vulnerability scanning.
Graphical analysis and visualization.

Return on Investment

Having all machines up to date.
Saving time when threat hunting.
Customized dashboards that allow us to know if we're compliant or not.

Key Insights

Do you think AlienVault OSSIM delivers good value for the price?

Not sure

Are you happy with AlienVault OSSIM's feature set?

Yes

Did AlienVault OSSIM live up to sales and marketing promises?

I wasn't involved with the selection/purchase process

Did implementation of AlienVault OSSIM go as expected?

Yes

Would you buy AlienVault OSSIM again?

Yes

AlienVault OSSIM is very well suited for threat hunting. The ability to find all events and logs from all machines in one place saves a lot of time. It is also well suited for vulnerability scanning. The aspect that is lacking (or not obvious at least) is the integration with other security tools (like an antivirus for example).

AlienVault OSSIM - very useful for threat hunting

Overall Satisfaction with AlienVault OSSIM