Top-bewertete Carbon Black EDR Alternativen
86 Carbon Black EDR Bewertungen
Gesamtbewertungsstimmung für Carbon Black EDR
Melden Sie sich an, um die Bewertungsstimmung zu sehen.
Response hints threats in real time so you get instant intelligence Bewertung gesammelt von und auf G2.com gehostet.
Would prefer for the Cb portfolio to all sit as one agent. Bewertung gesammelt von und auf G2.com gehostet.
After installling cb Response everyhing is visibel in your environment, and you can search through your events really easy. It doesn't matter what you want to find you can do a search on it very easy. Bewertung gesammelt von und auf G2.com gehostet.
Configuration is mostly done in conf files, and is not vrey user friendly. Not all supports have a deap linux experiance, whitch can be an problem when the product is based on linux. Bewertung gesammelt von und auf G2.com gehostet.
Our IR team loves the ability to get instant access to what has occurred on our endpoints in the organization. With the ability to instantly get access to the machine through Live response. Bewertung gesammelt von und auf G2.com gehostet.
The console can get a bit slow if you haven't put in appropriate filters. Bewertung gesammelt von und auf G2.com gehostet.
Cb response gives us excellent visibility into our endpoints. We have decided to balance our strategy and focus more on detection and response. We all know if the talented bad guys want to get in, they will. With Cb, I have a virtual video recorder on all my endpoints (servers and workstations) and alerting that is effective. It took us about a month to fine tune. Bewertung gesammelt von und auf G2.com gehostet.
The pricing model could improve. Given Cb's recent acquisitions and focus on "beyond AV", having the suite of products, including Protection makes most sense. But I find the pricing to be sometimes complex and expensive for cloud version. Bewertung gesammelt von und auf G2.com gehostet.
Integrated Threat Feeds, Integrations with SIEM, Detects threats not found by other methods. Great hunting and response tool. Bewertung gesammelt von und auf G2.com gehostet.
It would be nice if there were granular block actions that could be performed by the product. Bewertung gesammelt von und auf G2.com gehostet.
Really easy to use and brilliant 'workflow' . The community around this product is also great and it's easy to create rules/watch lists Bewertung gesammelt von und auf G2.com gehostet.
Would like to see better search result display options thT can be useful when hunting Bewertung gesammelt von und auf G2.com gehostet.
Carbon Black Enterprise Response bietet hervorragende Sichtbarkeit auf Ihre Endpunkte. Die Möglichkeit, die Prozesskette eines Angriffs zu sehen, ist sehr nützlich, um zu verstehen, wie die Angriffe funktionieren, sie zu verhindern und unsere Benutzer zu schulen. Sehr einfach, Agenten zu implementieren und nützliche Daten zu sammeln. Viele großartige Informationsquellen. Bewertung gesammelt von und auf G2.com gehostet.
Ich hatte einige Probleme mit wiederkehrenden Warnungen, selbst nachdem ich sie als Gelöst oder Gelöst Falsch Positiv markiert habe. Bewertung gesammelt von und auf G2.com gehostet.
The granular insight into what process/files are doing what to whom, and when. The watch lists provide a great way to triage suspicious activities and direct daily monitoring and incident response. Integration with CB Enterprise Protection (formerly bit9). Bewertung gesammelt von und auf G2.com gehostet.
We're still tuning, but the enormous amount of standard events are quite a bit to comb through. While it is a monitoring tool, i often have requests to produce reports to illustrate 'what this product is delivering for the company', which i've yet to find a good solution. Bewertung gesammelt von und auf G2.com gehostet.
Cb has provided us visibility into threat behavior beyond any product out there today. The ability to ban malicious files, create feeds, watch lists, open API, integrations with many other products (and ability to add other products easily), Live Response, isolation and much more, make Cb the differentiator over any other ETDR product on the market today.
Carbon Black provides the ability to also go back in time, which defeats a lot of other products in the space that only can go back a short period of time without disrupting the endpoint. The centralized infrastructure methodology makes sense for Cb as it technically can save money vs other products that will run CPU/mem to the max and begin to overwhelm the workstation/server. Cb is a very lightweight sensor, we see around 0-1% CPU, and 10-28Mb of memory. 28Mb on the high end for instances where it is a busy server like TMG or Exchange.
Cb is deployed to around 60k endpoints with no issues. We've had minor hiccups over time caused by Cb, but nothing widespread and nothing that wasn't fixed on the new patch level etc.
Working with Cb is probably one of the best things about the product. The PM team, engineering, executive team are all great people. Not forgetting the sales team, they are good people too. Everyone at Cb is committed to working and ensuring their product is the best. We have been with Cb since 4.2 and it has really grown a lot since.
the API - is probably one of the most important features to Carbon Black that many products out there fail at. The ability to automate and orchestrate a lot of threat hunting, or even remediation tasks is incredible. Many products fail at this part, or place in API in after the fact. Cb is also 100% committed to ensuring the API is very flexible. They have some of the best developers working it.
Integrations - Cb allows for many integrations, whether ones they've created or ones you create. It's very flexible.
Splunk - we use the cb-event-forwarder to dump most all data to Splunk. This allows us to quickly perform analytics on raw endpoint data. With this, we've taken our detection and response to the next level. Bewertung gesammelt von und auf G2.com gehostet.
Not a deal breaker in any sense -
1. High availability. Not really an issue since the sensors cache data until the cluster is back online.
2. Cluster upgrade process could be better.
3. Solr has got to go... Bewertung gesammelt von und auf G2.com gehostet.
Fähigkeit, Ereignisse aufzuzeichnen und wiederzugeben, sowie die Möglichkeit, weniger Ereignistypen für Knoten mit begrenzter Konnektivität oder geringer Bandbreite aufzuzeichnen. Hervorragendes forensisches Werkzeug zum Verständnis, wie ein Angriff stattgefunden hat. Bewertung gesammelt von und auf G2.com gehostet.
Ich hätte gerne einen kleineren Fußabdruck auf den Endgeräten, aber CarbonBlack ist bereits weniger aufdringlich für den Host als die meisten Produkte, die diese Funktion ausführen. Angepasste Berichterstellung könnte ebenfalls einfacher sein. Bewertung gesammelt von und auf G2.com gehostet.
