Microsoft Defender for Identity vs. Splunk User Behavior Analytics

Microsoft Defender for Identity

Microsoft Defender for Identity

11 Reviews and Ratings

Splunk User Behavior Analytics

Splunk User Behavior Analytics

5 Reviews and Ratings

Overview
Product	Rating	Most Used By	Product Summary	Starting Price
Microsoft Defender for Identity	Score 7.7 out of 10	N/A	Microsoft Defender for Identity (formerly Azure Advanced Threat Protection, also known as Azure ATP) is a cloud-based security solution that leverages on-premises Active Directory signals to identify, detect, and investigate advanced threats, compromised identities, and malicious insider actions directed at the organization.	N/A
Splunk User Behavior Analytics	Score 5.9 out of 10	N/A	Splunk supplies security analytics as a standalone solution or priced as an add-on for users of its popular SIEM products, to protect enterprises against unknown threats and malicious behavior, via the Splunk User Behavior Analytics application.	N/A

Pricing

Microsoft Defender for Identity

Splunk User Behavior Analytics

Editions & Modules

No answers on this topic

No answers on this topic

Offerings

Pricing Offerings
Microsoft Defender for Identity	Splunk User Behavior Analytics
Free Trial
No	No
Free/Freemium Version
No	No
Premium Consulting/Integration Services
No	No

Entry-level Setup Fee

No setup fee

No setup fee

Additional Details

—

—

More Pricing Information

Community Pulse
	Microsoft Defender for Identity	Splunk User Behavior Analytics
Considered Both Products	Microsoft Defender for Identity AS Arjan Stijntjes Security Consultant Chose Microsoft Defender for Identity Microsoft Defender for Identity is more specialized on the Identity platform, it is a single solution compared to a multi-solution. The integration is better when using the XDR suite in combination with Sentinel. Microsoft Defender for Identity gives a better overview of the … Incentivized Helpful?	Splunk User Behavior Analytics Verified User Anonymous Chose Splunk User Behavior Analytics Easier we were using Splunk Enterprise on heavy forwarder on which all the add-on were installed and were using Splunk Cloud with respect to search head and indexers stack. And with Splunk Enterprise Security premium app, we were relying on correlation rules which were throwing … Incentivized Helpful? Verified User Anonymous Chose Splunk User Behavior Analytics Splunk UBA is a great debugging tool, and it helps me analyze the application logs and get a better idea about the problem. It also helps in analyzing the user behavior in a nutshell over the entire application. Incentivized Helpful?

Best Alternatives
	Microsoft Defender for Identity	Splunk User Behavior Analytics
Small Businesses	No answers on this topic	ActivTrak Score 8.8 out of 10
Medium-sized Companies	InsightIDR Score 9.5 out of 10	ManageEngine ADAudit Plus Score 9.2 out of 10
Enterprises	InsightIDR Score 9.5 out of 10	ManageEngine ADAudit Plus Score 9.2 out of 10
All Alternatives	View all alternatives	View all alternatives

User Ratings
	Microsoft Defender for Identity	Splunk User Behavior Analytics
Likelihood to Recommend	7.0 (0 ratings)	10.0 (0 ratings)
Support Rating	- (0 ratings)	9.0 (0 ratings)

User Testimonials
	Microsoft Defender for Identity	Splunk User Behavior Analytics
Likelihood to Recommend	Microsoft Defender for Identity is a great solution for each company that has an Active Directory. It fills in the blanks for Identity related incidents that are being missed in the XDR platform. To get a full view on identity risks it is an essential component 🛡 Arjan Stijntjes Security Consultant Read full review	Splunk is well suited for applications with large amounts of data, and large enterprise applications. Especially if the application has interconnected modules, it helps us to analyze and monitor the application greatly. Incentivized Verified User Anonymous Read full review
Pros	detect threats and suspicious activities pro-active measurements on possible breaches identity security posture 🛡 Arjan Stijntjes Security Consultant Read full review	Monitor and troubleshoot for any system errors. Get the insights on application data sets and do some predictive analysis. Incentivized Verified User Anonymous Read full review
Cons	setup can be complicated, with AD complexity Sometimes the load on DCs is pretty high, leading to performance issues Better tuning options for preventing false-positive/bening alerts 🛡 Arjan Stijntjes Security Consultant Read full review	Performance-wise, it can be improved. Queries take a long time. Dataset exploration - More data visualization charts can be added. Incentivized Verified User Anonymous Read full review
Alternatives Considered	Microsoft Defender for Identity is more specialized on the Identity platform, it is a single solution compared to a multi-solution. The integration is better when using the XDR suite in combination with Sentinel. Microsoft Defender for Identity gives a better overview of the security posture 🛡 Arjan Stijntjes Security Consultant Read full review	Easier we were using Splunk Enterprise on heavy forwarder on which all the add-on were installed and were using Splunk Cloud with respect to search head and indexers stack. And with Splunk Enterprise Security premium app, we were relying on correlation rules which were throwing more number of false positive but after implementing Splunk UBA, we are now getting real-time true positive threat or incidents. Incentivized Verified User Anonymous Read full review
Return on Investment	Cost impact was pretty high Learning curve, needed time (money) for training Greatly improved detections and gives more insights 🛡 Arjan Stijntjes Security Consultant Read full review	Fewer team members to work on real threats. Less time required to deal with real incidents. Easy to implement across the network. Incentivized Verified User Anonymous Read full review
ScreenShots