Kaspersky EDR Expert vs. Kaspersky EDR Optimum

It is a very comprehensive product to learn everything about incidents on the windows hosts. Also EDR can create some incidents during its analyze. But it is pretty useless when we are talking about linux systems. Further it is not so good when algorithms are not described clearly (like it was when we used Traps). So there are some ways to improve the product

Incentivized

I’m convinced that the key is guaranteeing the 100% of coverage, with the best configuration possible and without pain or hit at resource consumption and harmonies performance.I would like that the solution detecting, inventorying, and alerting about some host/device unknow or don’t register in KSC. Don’t depend on Device Detection function.

Incentivized

• Detection
• Embedded Sandbox is a really good stuff, I can see detailed activity with visualization of any malicious sample
• Simple interface. Usability.

• KEDR Optimum is helping to see threat kill chain formation, which helps to get clear picture of the what exactly attacker was trying to do during attack.
• We are crating prevent execution rules to block the threat in our complete infra.
• Ioc scan to validate and remove the any active threat entry from our endpoints

Incentivized

• It would be nice to have more insight into the kill chain of potential infections and malware.
• Remote interface is a little lacking as to why a file was flagged.

Incentivized

• Agent package size is little big, if it can be optimize with lite package would be great
• If possible Host Integrity functionality can be added, to take action as quarantine the non-compliance machine to connect our enterprise network
• Many times KSC cloud operating slow, if it can optimized for the faster response

Incentivized

I believe the Kaspersky EDR Expert systems represent significant cyber risks for government and commercial enterprise customers

Incentivized

At the moment and unfortunately we'll not renew our licenses, due to the Russian conflict and the company policy that has forced us to get rid of any Russian related product. Before that incident, we were very happy with the product and we did not even think once about changing it... Maybe on the future...

Incentivized

This item can always be improved, perhaps by pre-elaborating very long reports, such that they are built progressively so that when the user wants to consult them, the delay is minimal. It would also be interesting to have a warehouse of reports, which serves as a repository where they can be consulted whenever needed, adding AI capabilities that allow data to be linked together and improve the analysis and possible correlations of events.

Incentivized

Kaspersky EDR Expert delivers much better protection and detection rate

Kaspersky EDR Optimum is the evolution of Kaspersky Endpoint Bussiness, a more complete product, which runs the same software on Windows 11 and Windows Server. Now, we already use Kaspersky Sandbox on-premises, which has now been unified with KEDR as Cloud Sandbox. These improvements and unifications have made life easier for Security administrators.

Incentivized

• Automating response task on suspicious activity
• Improving IT specialists skills and IS specialists skills
• Increased visibility of what malware really do on endpoint

• In fact very positive, Advanced Threat Detection engine is strong
• gives clear visibility as well and option respond on active threat immediately, Nice
• Also implemented, Default deny using application control
• Worth buying in single solution, many features

Incentivized