A wealth of data - minimum wealth required for access
July 19, 2022

A wealth of data - minimum wealth required for access

Anonymous | TrustRadius Reviewer
Score 7 out of 10
Vetted Review
Verified User

Overall Satisfaction with Mandiant Advantage Threat Intelligence

My organization was looking to expand our threat intelligence capabilities and wanted to utilize an industry leader. Mandiant Advantage Threat Intelligence was chosen to increase contextual data around indicators of compromise and potential issues. The Mandiant Advantage Threat Intelligence platform offered a wealth of data to enhance our investigations and reduce redundant processes.
  • Well structured UX
  • Wealth of information
  • Well researched
  • Paywalls exist throughout the data set and can halt an investigation without the right model
  • Some data was incomplete or broken up between pay tiers
  • Navigation through the data lacked a definitive trail or breadcrumbs to retrace steps during investigations
  • Improved commonality among investigation processes
  • Reduced number of solutions to gather equivalent data
  • Some investigations just end due to paywalls
Recorded Future and ThreatQuotient are in the same ballpark when it comes to price. Mandiant Advantage Threat Intelligence had, at the time of use, the best tracking of unclassified threat actors and the best methodology for assessing the overlap between campaigns and actors. Where Mandiant Advantage Threat Intelligence falls quickly is in the organization of the data set across subscriptions. It is almost as though Mandiant has chosen to let you peek behind the curtains to try and strongarm a client into buying more products rather than considering the full use case for the platform.
I have discussed at length my displeasure with Mandiant Advantage Threat Intelligence's insistence on driving product purchase through opportunistic data classifications within their platform across different subscription levels. I believe this mentality of giving users enough to start an investigation but not go beyond one or two use cases without paying extra is the experience you would get from an organization with questionable ethics and should not be true of a leader in the industry.

Do you think Mandiant Advantage Threat Intelligence delivers good value for the price?

Yes

Are you happy with Mandiant Advantage Threat Intelligence's feature set?

Yes

Did Mandiant Advantage Threat Intelligence live up to sales and marketing promises?

No

Did implementation of Mandiant Advantage Threat Intelligence go as expected?

Yes

Would you buy Mandiant Advantage Threat Intelligence again?

Yes

Mandiant Advantage Threat Intelligence is well suited to data enrichment tasks and surfacing additional potential indicators of compromise based on observables found in an environment. Difficulties arise if the given data is classified in multiple platform modules, each requiring a different subscription. When tracking an indicator of compromise and wanting to see what actors it relates to and further understand the actor, you often end up with one side of the data or the other. IOCs with little campaign context or actor details with no tactical data.