Eclectic IQ. The Intelligent tool for all your desired Intel!
Updated October 20, 2023
Eclectic IQ. The Intelligent tool for all your desired Intel!
Score 9 out of 10
Vetted Review
Verified User
Overall Satisfaction with EclecticIQ Platform
The current environment that I am working in has multiple OSINT and premium Threat Intels subscribed. EclecticIQ, in addition to its own superb intel, is integrated with the rest of the intel via API calling and serves as a common ingestion point for all the Intelligence. This feed from the EIQ is then consumed by SIEM and SOAR.
- Effective correlation of IOCs
- Averaging out the Confidence Score based on different intel sources.
- Serves as an excellent liaison points between the Intels and SIEM/SOAR stack.
- Misses on a global search bar which can directly gives out the result like VirusTotal.
- The GUI could be more friendlier. Too many filters and graphs may overwhlem the user sometimes.
- The ElasticSearch(searching for IOC in the in-house EIQ database) is a little slow compared to its counterparts.
- Integration with SIEM and SOAR for feed ingestion.
- Correlation of different Intel data and setting the priority based on Confidence Score.
- Having a DB to store the IOC for historical reference purpose.
- Positive: Effective usage of all the premium Intels in a uniform fashion. No need to log in to each tool time and again.
- Positive: SOC Analysts spends lesser time on the internet and the analysis for the IOCs with graphical format is fulfilled by EclecticIQ.
- Negative: Higher costs over the resource utilization in the initial setup.
The most important feature of EclecticIQ which gives it an edge compared to other TIPs is that it performs segregation of IOCs based on the relevance of it and the links that IOCs might have which other adversaries. The graphical format mapping where the user can easily figure out how the IOCs have connections to different binaries is another advantage. One can set the half-life time for an IOC which will reduce the confidence score as per one's need.
Do you think EclecticIQ Platform delivers good value for the price?
Yes
Are you happy with EclecticIQ Platform's feature set?
Yes
Did EclecticIQ Platform live up to sales and marketing promises?
I wasn't involved with the selection/purchase process
Did implementation of EclecticIQ Platform go as expected?
Yes
Would you buy EclecticIQ Platform again?
Yes