Carbon Black EDR vs. ThreatCure® ShieldOps Platform

We are able to check if any phishing link was visited by the user or not. To check for the whether any file is executed on the machine or not. To check on which port connections are being made by the machine. To create custom watchlist for alert to be investigated by an analyst. To check every process executed in the machine for a specified range.

Incentivized

ThreatCure Guardian Care services enable us to block C&C connections from some of our infrastructure systems. They told us that they had seen lateral movements in the early stages, which may indicate a ransom attack. They later provided us with a comprehensive report detailing the threat actors who were utilizing an insider threat in this.

• Process tree view of endpoint activity
• Ability to pull files from host
• Threat Intelligence integration
• Isolate a host

Incentivized

• Indepth knowledge of our infrastructure
• Complete Threat Landscape view
• Early detection of threats

• Number of false positive which are triggered due to threat feeds are sometimes more needs to be fine tuned by the client.
• In very rare scenarios processes are not captured properly.

Incentivized

• Would suggest ThreatCure red-teaming services.

CB Response allows for a better view of what happened on the endpoint and provides more functionality out of the box then the FireEye Endpoint Security Product. CB Response allows you to basically have a remote connection into the CLI of an endpoint. This allows you to view the file system, run programs/scripts on the host, etc. FireEye Endpoint Security does not have this functionality.

Incentivized

While some items offer perfect sight, others fall short in other respects. The ThreatCure ShieldOps platform provides our management and incident response team with a 360-degree perspective. This facilitates quicker decision-making for the future. Furthermore, ThreatCure has an opex model, but other suppliers require significant Capex investments, which is an added advantage of SMB organization like us.

• It is helping to protect us from potential loss of revenue that would be caused by malware or a compromised account.
• It took some time in deploying in the environment , but that time is much worth it because of the results we are getting now.
• It helps in hunting, which help us check and protect our environment from any cyber attacks.

Incentivized

• Now with lesser opex we are getting complete visibility.
• Now would like to acquire Threat Cure Guardian Care Services