Intezer Autonomous SOC

What do you like best about the product?

With Intezer, it is always easy to detect and block malware on time thereby securing our systems.
I like the threat intelligence features and the fact that it makes network sandboxing easy.
The tool comes with great EDR features and meets all our needs when it comes to keeping our endpoints secure.
Intezer makes responding to security incidences easy.

What do you dislike about the product?

Intezer is very accurate and has boosted our security awareness and preparedness.

What problems is the product solving and how is that benefiting you?

With Intezer, we are better prepared security wise when it comes to handling EDR, MDR and it is a great SOAR solution. It has all the features we need for our business security needs.

What do you like best about the product?

Helps quickly detect security attacks. In our large clients, a multitude of events are generated that have to be reviewed manually. Thanks to Intezer, this task is carried out automatically and quickly, leaving out human errors.

What do you dislike about the product?

It would help even more if they included Artificial Intelligence, especially to detect the unknown. With this addition they would surely increase the detection.

What problems is the product solving and how is that benefiting you?

Detection of attacks in Crowdstrike, which allows us to automatically and quickly know if we are exposed to danger or already to an incident. Provides quick insight and saves a ton of time.

What do you like best about the product?

Fast and easy integration with all our security tools, excellent customer support.

What do you dislike about the product?

The Endpoint Scanner could improve in the area of log analysis.

What problems is the product solving and how is that benefiting you?

Intezer helps us automate IOC analysis within our security tools and enhances our incident response efforts. It natively integrates with our SOAR solution and delivers precise results.

What do you like best about the product?

Intezer has a friendly UI, performs code analysis and Integration with our EDR solution is a good match for our security operations team in a daily basis, implementation was easy and they provide excellent customer support.

What do you dislike about the product?

In some times Intezer is not able to upload the file from our EDR alerts, then we need to request it from our EDR and upload it manually, some false positives into Email Analysis.

What problems is the product solving and how is that benefiting you?

Alerts Enrichment to our EDR Alerts.
Malware Analysis and Sandboxing

What do you like best about the product?

Ease of use, Feature rich environment that can make even a novice an SOC analyst. You can also integrate it in many web tools.

What do you dislike about the product?

none so far it does the job and an excellent job at it

What problems is the product solving and how is that benefiting you?

I usually use it to crosscheck any malware analysis that I have done

What do you like best about the product?

It is easy to use and reliable with ease of implementation

What do you dislike about the product?

Too much unneccessary information provided sometimes.

What problems is the product solving and how is that benefiting you?

Malware analysis

What do you like best about the product?

I like being able to see an in-depth analysis of unknown programs and what their capabilities are.

What do you dislike about the product?

I dislike how some of the features are behind a paywall.

What problems is the product solving and how is that benefiting you?

I can use this tool to tell if a file is malicious or not which influences my decision on whether or not I should run it.

What do you like best about the product?

How comprehensive the analysis is. Also that it shows what code is shared between common binaries.

What do you dislike about the product?

I disliked that their wasn't a free tier for very basic analysis to try it out.

What problems is the product solving and how is that benefiting you?

It helped me solve an issue with trying to determine why an executable was being marked as suspicious even though it was not malicious.

What do you like best about the product?

I use personally intezer platform for malware hunting and dynamic analysis of malware, and It helped me a lot as a security researcher to dig more.

What do you dislike about the product?

As of now nothing is here to dislike, This is very good platform an di recommend to all Security Researcher

What problems is the product solving and how is that benefiting you?

Intezer is helping to solve research problems for SOC and Threat Hunters to identify the malware and their relations.

What do you like best about the product?

Intezer showed me similar files and all TTP associated with the sample on a single screen. I also find the code clusters feature to be extremely useful. MITRE ATT&CK technique discussion is beneficial.

What do you dislike about the product?

There is not much to dislike here, but the page looks cluttered sometimes and overwhelming. The page is slow to load, and it would be great if there were a light version of the same information.

What problems is the product solving and how is that benefiting you?

Intezer Analyze provides a quick and open analysis platform for security researchers to share data independently of their organization. They can create a standard for communication amongst the community.