Item: Mandiant Advantage Threat Intelligence
Rating: 8
Author: Anirudh Srinivas

Use Cases and Deployment Scope

The deployment has been part of our managing service; this is part of the infrastructure service provided overall. It is used to monitor the behaviors of systems within the organization. The service allows us to spend time understanding various situations, occurrences, and patterns of threats and actors.

Pros and Cons

Understanding a particular vulnerability within the software vendors we work with.
Understanding the threat pattern and occurrences.
Understanding bad actor behaviors and expert information from the service itself.

Most cases are usually up to date, but there have been instances where we had to provide additional information or proactive findings.
The support responses to noncritical cases are a bit slow.

Return on Investment

With the tool, we have been able to avoid and learn early on certain threats that were exposed.
We have been able to provide up-to-date reports to our internal management with clear and concise information.

Alternatives Considered

Broadcom Symantec Email Threat Detection and Response

Broadcom, though it has similar functionality, is a bit expensive in terms of licensing and the feature set available for integration into the existing environment.

Usability

There is some small room for improvements in the response time and certain threat update behaviors.

Key Insights

Do you think Mandiant Advantage Threat Intelligence delivers good value for the price?

Yes

Are you happy with Mandiant Advantage Threat Intelligence's feature set?

Yes

Did Mandiant Advantage Threat Intelligence live up to sales and marketing promises?

Yes

Did implementation of Mandiant Advantage Threat Intelligence go as expected?

Yes

Would you buy Mandiant Advantage Threat Intelligence again?

Yes

Other Software Used

Broadcom Symantec Email Threat Detection and Response, McAfee DLP Endpoint, Atlassian Crowd

Likelihood to Recommend

The tool is easy to integrate into our current service; the enterprise version has connectivity with multiple APIs and is easy to connect to our other security suite and monitoring tools. The ease of management with the web-based console makes it simpler for the engineers working on the tool.

A complete package / suite of tools to keep you secure on prem and online.

Overall Satisfaction with Mandiant Advantage Threat Intelligence