| SC Media

Why backups are not a cure-all for ransomware attacks

Roger Grimes of KnowBe4 maintains that antivirus and firewalls are worthless, noting that after 30 years the industry faces more threats than ever. Grimes believes that most people pay attention to firewall logs when they first enter the security field, but after the first few years they become background noise.

Product reviews

Analyst1 v1.9

Verdict: Overall, security pros will find Analyst1 a comprehensive threat intelligence platform that Government organizations may especially appreciate because it can run on top-secret networks and portion mark everything according to classification and dissemination controls.

Quickview
Anomali

Verdict: Overall, security pros will find Anomali a mature, at-scale threat intelligence solution. Administrators and security teams will stop threats more effectively, improve productivity, and reduce the risk of security breaches.

Quickview
AT&T Alien Labs Open Threat Exchange (OTX)

Verdict: AT&T Alien Labs OTX serves as a useful threat intelligence resource for organizations of all sizes. Security pros will find it an easy-to-use threat intelligence product that will benefit any organization.

Quickview
Bandura

Verdict: Overall, security pros will find Bandura a scalable, open threat intelligence platform with simple policy configurations and effective logging and triage analysis. This functions as a unique, easy-to-use, and massively scalable solution.

Quickview
DarkOwl Vision

Verdict: Overall, security pros will find DarkOwl Vision a powerful research tool that lets analysts conduct searches on the dark web and around it. Those looking for more traditional threat intelligence products should consider leveraging DarkOwl alongside other threat intelligence solutions for a powerhouse security stack. DarkOwl is especially geared towards law enforcement agencies.

Quickview
DomainTools Iris Investigation Platform v3.0

Verdict: Overall, security pros will find the Iris Investigation Platform a useful tool that invites collaboration, especially in analyzing the risk of an IP address or website.

Quickview
EclecticIQ Platform v2.4

Verdict: Overall, security pros will find EclecticIQ Platform a threat intelligence platform built for analysts, offering them several tools geared towards maximizing efficacy and efficiency, a secure means of team collaboration, and an elastic search feature to help them mine and research threat intelligence data.

Quickview
IntSights External Threat Protection Suite

Verdict: Overall, security pros will find IntSights External Threat Protection Suite a unique and powerful threat intelligence product that integrates with other solutions. While this product offers a lot of value to all who deploy it, we believe that larger organizations will find it a particularly useful tool.

Quickview
LookingGlass Cyber Solutions, Inc. scoutPRIME 2020.2.K.25.66

Verdict: Security pros will find LookingGlass scoutPRIME a flexible product with many configurations that cover several use cases. It gathers all the inferred or verified CVEs across collections, giving analysts the ability to conduct passive vulnerability management and the geodata to conduct research on more granular data points and discover regions or countries of origin.

Quickview
ManageEngine Log360

Verdict: Overall, security pros will find ManageEngine Log360 a powerful but resource-intensive product that manifests the ManageEngine ethos that threat intelligence should combine the strengths of many different sources, not depend on a singular capability.

Quickview
Recorded Future Security Intelligence Platform v2020

Verdict: Overall, security pros will find Recorded Future Security Intelligence Platform a strong contender in the threat intelligence category, especially considering its robust integration catalogue and fully-documented API.

Quickview