Recorded Future Intelligence Cloud vs. Trellix Threat Intelligence Exchange

Recorded Future is mainly beneficial to the SOC. As part of the Monitoring team, Recorded Future makes the investigation of the alarms a lot easier for me. It can show the reputation of the IP/domain or even hashes which helps me redirect my focus to potentially malicious network activities.

Incentivized

It can be used in organizations which maintain large number of computers. Especially protecting the servers where the entire organization data is hosted. In all these cases data protection is the primary concern and McAfee Threat Intelligence Exchange could easily do this job by giving proper insights, reports and blocking suspicious websites.

Incentivized

• Searching across multiple sources at the same time
• Indexing information in real time
• Dashboards, statistics and heatmaps about a certain topic

Incentivized

• Provide good insights
• Summary of potential attacks
• Helps Prevents security braches

Incentivized

• For the Browser extension, since the main purpose is to present information with regards to the IP, I think it's best to give us an idea of where the IP originated/some additional information about the organization it belongs to.

Incentivized

• It is heavy on systems, If you have an outdated system then McAfee is not for them.
• It can consume lot of memory
• Scanning time might take longer then expected
• Pricing is bit high

Incentivized

I've had an issue with their browser-plugin which didn't want to authenticate correctly. RF's support could arrange for a session with me and identify and solve the issue. I was very pleased how serious they took my problems and also how knowledgeable they are.

If I have more general questions they quickly reply and most likely also have a solution at hand.

Incentivized

It is the most complete solution of these three, as the others are focused in specific areas and having really detailed analysis about threat actors, APT groups, etc. Recorded Future is not having this level of knowledge in really specific areas but doing a really good work covering thousands of sources and the most relevant forums.

Incentivized

McAfee is much more efficient than security products used so far, But only thing is, It is heavy on systems and it does take a lot of memory which makes the system slow. Other than that it does provide excellent customer support to clear all our queries. Good security features.

Incentivized

• We've been able to identify leaked credentials and close those accounts off.
• We've also been able to identify malware being distributed or spam being sent out by customers using our infrastructure. Again we could shut off those accounts.
• Their domain-monitoring allows us to identify typo-squats and issue domain-takedowns for those (or at least add them to our monitoring / detection)

Incentivized

• We do not have ROI on this product
• It does provide network and file security for the entire organization.

Incentivized