#1 most frequent
United States of America
60.0%15 installations of 25
What is Trellix Helix?
Trellix Helix (formerly FireEye Helix) is a SIEM solution providing a non-malware threat detection solution.
Categories & Use Cases
Media
1 / 2
Screenshot of Helix Cloud Integrations
Top Performing Features
Host and network-based intrusion detection
Ability to detect both endpoint intrusion and network ingress detection
Category average: 7.4
Integration with Identity and Access Management Tools
Integration with access control tools like Active Directory and LDAP
Category average: 7.7
Centralized event and log data collection
Effectiveness of real-time centralized event and log data collection
Category average: 9
Areas for Improvement
Deployment flexibility
Ability to tune system to maximize threat detection and minimize false positives
Category average: 7.7
Custom dashboards and workspaces
dashboards that can be customized to meet the needs of specific groups
Category average: 8
Correlation
Correlation of logs and events to pinpoint significant threats
Category average: 8.4
Who Buys & Uses Trellix Helix
#2 most frequent
Canada
12.0%3 installations of 25
#3 most frequent
Switzerland
8.0%2 installations of 25
Great security operations platform and behavioral analysis solution.
Use Cases and Deployment Scope
Helped in collaboration with work teams to complete tasks faster, accurately, and easily. We are able to utilize this to enhance our organizational threat intelligence capabilities through the integration of our existing security tools with the next-generation SIEM. Helps in the management of our security events and in conducting behavioral analysis.
Pros
- Detection of advanced threats.
- Easy integration with cloud resources and our existing security tools thus enhancing performance.
- Easy deployment with great threats intelligence capabilities.
Cons
- Integration of SOAR with multiple vendors can be quite challenging.
- You have to login differently to it's multiple tools hence can be confusing.
- The cost can be quite high.
Return on Investment
- Optimization of your security investments.
- Operations are seamless and better with easy integrations that enhance performance.
- Efficiency in running of incidences with enhanced case management for all its alerts.
Alternatives Considered
UiPath Enterprise RPA Platform
Other Software Used
Instana, QuoteWerks, Turbonomic, an IBM Company
Great security event management and behavioral analysis platform
Use Cases and Deployment Scope
FireEye Helix is our organization's system for managing all security events and conducting behavioral analysis. We have deployed FireEye agents to all desktops, laptops, and servers that report into FireEye Helix. We also have a series of taps and other systems reporting into FireEye Helix and the associated SOC service. This gives us one place to review all security information and take the needed actions.
Pros
- Single location for all security event management
- Detect advanced threats
- Provide audit artifacts to ensure compliance
Cons
- Overly complex platform
- Multiple logins needed for various tools--leads to confusion
- Costs can add up
Return on Investment
- Reduce manual intervention for most events
- Single tool containing all security information--much more efficient than checking multiple tools
- Overall a boost to our security operation--positive ROI
Alternatives Considered
CrowdStrike Falcon Endpoint Protection and Secureworks Security Consulting Services
FireEye Helix: Cuts Through the Noise
Pros
- Single pane of glass for all alerts.
- Great at consolidating threat intelligence, alerts, and metadata all in a single platform.
- The ability to pivot directly from Helix to endpoint (HX) EDR, Email, etc. is a big blessing.
Cons
- Additional integration points (API cloud integrations).
Return on Investment
- Helix has had a significant impact on CSOC visibility efforts across the organization.
- Helix fills the logging and alerting gaps that are missing across the infrastructure side.
- Having a single pane of glass allows teams to more efficiently run incidents. Additionally, Helix is integrated with ServiceNow providing enhanced and efficient case management for all Helix alerts.
Alternatives Considered
LogRhythm NextGen SIEM Platform and Splunk Cloud
Other Software Used
FireEye Email Security, FireEye Endpoint Security, FireEye Network Security
