Cybereason Defense Platform vs. NetWitness Cloud SIEM

Cybereason is good at detections and has some false positives, but when we need their support, it's too slow. My team used to test Cybereason, submitting lots of malware and threats, trying to find problems, and for research purposes. In my experience, every time we found a bug, their support team denied the problems and took lots of weeks to give some answer when we insisted.

Incentivized

It is really a robust platform that can be heavily customized to suit requirements. Good for advanced hunting and forensics. Robust automation features.

Incentivized

• EDR
• Threat hunting
• anti-malware
• collecting telemetry

Incentivized

• Log collection and parsing.
• Packet collection and parsing.
• Enhanched analytics and alerting.
• Robust integration.

Incentivized

• Slow support
• Bugs on their interface
• Log extraction

Incentivized

• Lacking out of the box best practice templates etc. It relies heavily on customization.
• Lack of up to date threat feeds.
• Difficult to learn and use initially.

Incentivized

Cybereason provides superior protection than either Microsoft or CrowdStrike and a better TCO. We receive less false positives than with Microsoft Defender and Cybereason is easier for level 1 users to use.

Incentivized

Best in Class for us, and was a good choice since we already are using a lot of other RSA products(DLP, Archer etc.)

Incentivized

• Helps on threat hunting
• MalOps is very good
• When we face a bug, it takes too much time for them to respond

Incentivized

• Hard to calculate ROI since it is not revenue based.
• It is a expensive solution, bit very capable.

Incentivized