EclecticIQ Platform vs. McAfee Total Protection (discontinued)

ElecticIQ has an architecture where it usually needs decent computing power within the organisation. The central console along with the ELK servers and PostgreSQL sever needs their own space in a distributed setup. This could be a little too expensive for small-scale organisations. But for the organizations having mid to large-scale networks. EIQ is a decent solution to serve the purpose.

Incentivized

The McAfee suite of internet security products has been my go-to source for internet security for over 7 years. Featuring a snappy interface, frequent updates, and an amazing customer service and support system, McAfee delivers a high quality enterprise level security product at a significant cost saving value to the user. It has been frequently recommended to my staff and my clients to provide their cyber security needs.

Incentivized

• Effective correlation of IOCs
• Averaging out the Confidence Score based on different intel sources.
• Serves as an excellent liaison points between the Intels and SIEM/SOAR stack.

Incentivized

• Integration - McAfee builds their products to ensure integration with pre-existing products is seamless.
• Customizability - Granular management of policies and security controls, able to tune and mold solutions to individual organizations.
• Reliability - When configured properly, McAfee solutions rarely have issues. In the case they do, support is phenomenal.

Incentivized

• Misses on a global search bar which can directly gives out the result like VirusTotal.
• The GUI could be more friendlier. Too many filters and graphs may overwhlem the user sometimes.
• The ElasticSearch(searching for IOC in the in-house EIQ database) is a little slow compared to its counterparts.

Incentivized

• Price - Extremely high price tag for many of the solutions.

Incentivized

McAfee has consistently delivered on its stated goals of providing comprehensive protection for our networks and systems. Due to their excellent work and follow through I have been, and will continue to be a loyal customer.

Incentivized

The most important feature of EclecticIQ which gives it an edge compared to other TIPs is that it performs segregation of IOCs based on the relevance of it and the links that IOCs might have which other adversaries. The graphical format mapping where the user can easily figure out how the IOCs have connections to different binaries is another advantage. One can set the half-life time for an IOC which will reduce the confidence score as per one's need.

Incentivized

I haven't used Norton for a while, but when I did use it I felt that it slowed down my computer and had constant pop-ups, which were both equally frustrating and annoying. It was also very difficult to remove from my computer. Malwarebytes is a great, straightforward program I've used for virus scanning. It's pretty bare bones but I think if you just want something to scan for viruses it gets the job done quickly and reliably. In my opinion McAfee offers similar benefits as Norton but its more intuitive and doesn't impact system performance.

Incentivized

• Positive: Effective usage of all the premium Intels in a uniform fashion. No need to log in to each tool time and again.
• Positive: SOC Analysts spends lesser time on the internet and the analysis for the IOCs with graphical format is fulfilled by EclecticIQ.
• Negative: Higher costs over the resource utilization in the initial setup.

Incentivized

• Blocks unsafe websites
• Virus detection and removal
• Protects sensitive data

Incentivized