IBM X-Force Incident Response and Intelligence Services (IRIS) vs. Recorded Future Intelligence Cloud

Well suited to the following: 1. Data-Driven Analytics. I cannot stress that enough. It has been transformational in the way we are able to accomplish tasks and analyze large amounts of information. 2. Connect-The-Dots methodology. I have found it incredibly adept in allowing new information to be used in tandem with already-known info. 3. This is the icing on the cake and what I had originally set out to accomplish - IRIS has made it possible - Generative AI that uses verified data science to provide insights and expedite our advancement by performing experiments yielding real-world positive results. This has significantly reduced the time it takes for technology to be ready and marketable, reduces the workload, and saves a tremendous amount of money in the long run by allowing our discoveries to be 3 weeks away instead of 30 years. In contrast, scenarios where it is less appropriate are in nearly identical company when it comes to my third point (A double-edged sword, if you will.) We have a responsibility to ensure that this technology is used for a positive outcome and "Future:Forward" approach. This is the mark of true Evolution. It's up to us to keep it so.

Recorded Future is mainly beneficial to the SOC. As part of the Monitoring team, Recorded Future makes the investigation of the alarms a lot easier for me. It can show the reputation of the IP/domain or even hashes which helps me redirect my focus to potentially malicious network activities.

Incentivized

• Immediate recognition of possible conflicting interests within a field of view.
• Ability to assist users with Research and Development at an extraordinary rate.
• Real-Time feedback via neural pathways to analyze data and implement independent solutions that are tailored to the specific applications on-site.
• This entire review was written with the assistance of IRIS technology as a demonstrative of it's very real practical application. This took less than 2 minutes to write using my own hands.

• Searching across multiple sources at the same time
• Indexing information in real time
• Dashboards, statistics and heatmaps about a certain topic

Incentivized

• Suggestion 1) "RE:View" functionality.
• Suggestion 2) "ION = EYE-ON" in Language processing.
• Suggestion 3) Biological GUI+GPU integration.
• Suggestion 4) Ability to "RE:Quest" IRIS Up-link/Down-link interaction. (Inter-Act w/(EYE-ON))

• For the Browser extension, since the main purpose is to present information with regards to the IP, I think it's best to give us an idea of where the IP originated/some additional information about the organization it belongs to.

Incentivized

I've had an issue with their browser-plugin which didn't want to authenticate correctly. RF's support could arrange for a session with me and identify and solve the issue. I was very pleased how serious they took my problems and also how knowledgeable they are.

If I have more general questions they quickly reply and most likely also have a solution at hand.

Incentivized

Secure work environment with this platform has enhanced effective workflow infrastructure. The cost of deployment and configuration capabilities with other security applications lead to main decision of acquiring this tool. The security control dashboards gives reliable performance reports that leads to quick decision-making when there are malware attacks. It gives lifecycle report for most work processes and threat intelligence information that enables my team to track workloads effectively.

It is the most complete solution of these three, as the others are focused in specific areas and having really detailed analysis about threat actors, APT groups, etc. Recorded Future is not having this level of knowledge in really specific areas but doing a really good work covering thousands of sources and the most relevant forums.

Incentivized

• We've been able to identify leaked credentials and close those accounts off.
• We've also been able to identify malware being distributed or spam being sent out by customers using our infrastructure. Again we could shut off those accounts.
• Their domain-monitoring allows us to identify typo-squats and issue domain-takedowns for those (or at least add them to our monitoring / detection)

Incentivized