Kaspersky Anti Targeted Attack Platform vs. Mandiant Advantage Threat Intelligence

I would say it is less appropriate for an organization which is looking to implement a tool within a short period of time. However, we found support on the web forum as well as from support team and were given solutions always. It was somewhat a relief for the users. We were not in a position to provide further IT security resources. And Anti Targeted Attack Platform did not require such. The tool was able to identify and eliminate a critical threat right after the implementation.

Mandiant Advantage Threat Intelligence is well suited to data enrichment tasks and surfacing additional potential indicators of compromise based on observables found in an environment. Difficulties arise if the given data is classified in multiple platform modules, each requiring a different subscription. When tracking an indicator of compromise and wanting to see what actors it relates to and further understand the actor, you often end up with one side of the data or the other. IOCs with little campaign context or actor details with no tactical data.

Incentivized

• Complex attacks are identified frequently.
• Advanced thread intelligence.
• Privacy of all data is very well maintained.

• accelerated threat response feature, prioritizing threats according to requirement.
• Optimization of the threat intelligence , and can be integrated with 3rd party tools.
• Features like - Breach ,Adversary, Machine and Operational Intelligence.
• Mandiant dynamic host and the malware views along with indicators.

Incentivized

• False positives were identified frequently.
• Implementing rules are a very complex process.
• UI crashes were spotted randomly.
• Deployment needs to be much smoother.

• Mainly understanding the full features available to completely use the platform
• More dynamic approach to cloud capabilities
• Pricing may be and as there are other products which comes integrated with cloud platforms for threat management

Incentivized

Mandiant Advantage Threat Intelligence is a great cyber intelligence service with a great team of professional analysts. They provide quick responses to queries or incidents that require further investigation or information. Additionally, they provide personalized treatment as well as monthly meetings to coordinate teams. We have high reliability in the results obtained, as well as a large number of daily reports and trends.

Incentivized

There are multiple SaaS based players offering Threat Intel. But Mandiant TI has the following features which makes it one of the best among the competitors: 1.It understands recent actor, malware or vulnerability trends making it very easy for the analysts to do the research 2.Threat Profiling of the organization and setting the rules proactively hunt threat actors targeting the organization. 3.Accelerating the threat response by prioritizing the threats that matter most helping the analysts priortize the threats. 4.Access threat intelligence via the platform, the browser plugin or APIs

Incentivized

• Implementation did not go as planned. Therefore, time consumption was increased.
• Since we moved out of the tool, we had to consider another which costed time.

• Improved time to detect and respond to incidents
• Makes the analyst job easier by having all the information gathered in the platform
• Ease to contact with the Mandiant team to solve possible issues

Incentivized