EclecticIQ Platform vs. Egnyte

ElecticIQ has an architecture where it usually needs decent computing power within the organisation. The central console along with the ELK servers and PostgreSQL sever needs their own space in a distributed setup. This could be a little too expensive for small-scale organisations. But for the organizations having mid to large-scale networks. EIQ is a decent solution to serve the purpose.

Incentivized

If you're simply sharing and syncing across devices and don't care about granular security permissions, this is an easy win. If you're needing more control over the ability to restrict users from deleting folders, sharing folders, and allowing only certain groups to be able to view a folder, this can work but will ultimately give you arthritis as you'll end up having to perform a multitude of clicks for a task that should be able to be done in a fraction of the action. Have a folder template that allows for the first two levels of folders to be view only and the third level allowing file/folder creation and deletion? Have fun setting each of the third level folder's permissions-- they should give out free wrist braces. When discussed with their engineers about this function, a suggested $28,000 custom script was suggested. I don't believe them when they say that they haven't heard of other customers wishing to assign rights to multiple folders-- Something any sort of real admin would require. It simply isn't important to them, which is fine. The current ability

• Effective correlation of IOCs
• Averaging out the Confidence Score based on different intel sources.
• Serves as an excellent liaison points between the Intels and SIEM/SOAR stack.

Incentivized

• Drive map tool on Windows and flexibility on client configuration, can change drive letters fairly easily if needed.
• New user setup is straightforward and permissions not too difficult to set up and assign.
• Support has been fairly responsive and helpful with issues as they have come up.

Incentivized

• Misses on a global search bar which can directly gives out the result like VirusTotal.
• The GUI could be more friendlier. Too many filters and graphs may overwhlem the user sometimes.
• The ElasticSearch(searching for IOC in the in-house EIQ database) is a little slow compared to its counterparts.

Incentivized

• We often have issues with WebEdit, changes not saving/overwriting
• No functionality to drag and drop files/folders within the UI, can only move things by going through Move > Select location
• When previewing Word files in the browser, tracked changes are not shown so there can be misunderstandings when quickly reviewing documents

Incentivized

We found that usage of Egnyte in our supported clients, with sufficient bandwidth, provided all the features and stability we required. The billing setup was fair and the support provided was ample for end users and well as our in house admins. There was a concern about high usage clients but this was taken into account during the vetting process.

Incentivized

Really easy to use the interface. The web browser is very intuitive and I have not had any notable issues with this. It's easy to work on documents as a team, and the only issues we have to tend to come with Apple apps and downloading large files to WebEdit. It's very similar to the filing systems that come on Apple and Windows devices so not a steep learning curve.

Incentivized

Egnyte works very well across all platforms and as an add-on to other programs. Load time is close to nothing. Reports can be made in no time as well. All in all no performance issues. We can see that it depends on the local network connection. If you're running with fiber there won't be any issues.

Incentivized

I never had to reach out to customer support for Egnyte. I don't know any coworkers who have had to reach out to Egnyte for support either. As far as I am concerned, the support team is doing a good job since I have not had to reach out to them.

Incentivized

The most important feature of EclecticIQ which gives it an edge compared to other TIPs is that it performs segregation of IOCs based on the relevance of it and the links that IOCs might have which other adversaries. The graphical format mapping where the user can easily figure out how the IOCs have connections to different binaries is another advantage. One can set the half-life time for an IOC which will reduce the confidence score as per one's need.

Incentivized

Egnyte syncs with Windows machines better than any competitor I have come across. The service focuses on just this platform and their in depth focus shows in the end result. Google is not really made with Windows in mind. Box is cumbersome and the web portal is not easy to use. SharePoint sync to PC is terrible.

• Positive: Effective usage of all the premium Intels in a uniform fashion. No need to log in to each tool time and again.
• Positive: SOC Analysts spends lesser time on the internet and the analysis for the IOCs with graphical format is fulfilled by EclecticIQ.
• Negative: Higher costs over the resource utilization in the initial setup.

Incentivized

• The promising advantage of Egnyte is that user can access their files from the cloud anywhere without any cumbrance like connecting to VPN or other third-party soft wares.
• No risk of data loss.
• The platform is lacking in changing the parent administrator of a folder as if one person is the administrator of the file or folder and when needs to change it becomes clunky and does not supports it properly.

Incentivized