Intezer Autonomous SOC
Intezer LabsReviews from AWS customer
0 AWS reviews
-
5 star0
-
4 star0
-
3 star0
-
2 star0
-
1 star0
External reviews
193 reviews
from
External reviews are not included in the AWS star rating for the product.
Great Product
What do you like best about the product?
It's integration capability with other platforms.
What do you dislike about the product?
Doesn't contain an extensive list of hash search.
What problems is the product solving and how is that benefiting you?
File classification and determining false positives.
Good Malware Analysis Tool - Intezer Analyze
What do you like best about the product?
It goes into detail and comes up with a meaningful analysis of Malware. It does an endpoint scan or a particular file analysis. All in all it's a wonderful experience till now.
What do you dislike about the product?
Not found yet till now. Will append later.
What problems is the product solving and how is that benefiting you?
I use it to scan the complete endpoint and at time just to check particular file
Threat intelligence and endpoint analysis made easy
What do you like best about the product?
I was baffled by the analytics insight on the malware files that were presented to me. Things that I had to spend one or two hours to analyze before is just three clicks away now.
What do you dislike about the product?
The integrations seemed a bit off to me. I wish there were more options or open-source tools since I deal a lot with open-source projects.
What problems is the product solving and how is that benefiting you?
The main problem that I am solving is the time-consuming side of malware analysis activity. With Intezer, it has become easier to obtain further insights regarding contaminated files. Other than that, files that were very hard to analyze due to obfuscation is now very easy to receive pieces of information about it.
Recommendations to others considering the product:
Suppose you want a tool that makes the threat intelligence activities effortless and less stressful. You have to test Intezer out. It is the only tool that I have enjoyed most of its content so far. I have tested many of them. However, none would meet all of my requirements for both static and dynamic malware analysis.
Intezer Analyze Review
What do you like best about the product?
End to end encryption being offered is a plus. Overall a good malware analysis setup
What do you dislike about the product?
Capping of the free tier. Some GUI issues
What problems is the product solving and how is that benefiting you?
Malware Analysis
Incident Response
Has helped in doing Security Incident Response work.
Incident Response
Has helped in doing Security Incident Response work.
Recommendations to others considering the product:
Always do a PoC/PoV if one hasn't used it before.
Amazing software analysis and endpoint protection experience
What do you like best about the product?
I could analyze and retrieve excellent pieces of information through the scan of possibly compromised endpoints. Also, a could get insights into the actual behavior of malware files. Making the whole activity of malware analysis a lot more fun, exciting and engaging
What do you dislike about the product?
I felt that the integrations should be more straightforward, and having more options for integrations in the future would be awesome. Also, improving the capabilities of the free version or even extending the trial period would be much appreciated
What problems is the product solving and how is that benefiting you?
I am solving a massive problem with reverse engineering complexity. Being able to analyze the file deeply with the GUI is of great help.
The main benefit is the gain of time, since I can dedicate more of it to activities that are more laboural. For example, creating firewall rules or scanning endpoints for malware.
The main benefit is the gain of time, since I can dedicate more of it to activities that are more laboural. For example, creating firewall rules or scanning endpoints for malware.
Recommendations to others considering the product:
It is a fantastic tool to complement or even substitute the malware analysis tools you are currently using. It provides an excellent user experience, even if you don't have a lot of experience with file analysis and endpoint protection tools.
The best tools
What do you like best about the product?
Few tools have excellent service, even for accounts for free. My experience was very satisfactory in this tool, and it has a great design, very intuitive. One of the parts I liked the most was the integration with various systems it and very objective documentation.
We performed some tests as hash analysis, and the results were very satisfactory, and for improvement, we saw that integration with the total virus and Cortex helped us a lot to address this threat dictated below
I didn't like the value of premium subscriptions. In my case, I found it very expensive, and it has many limitations for the free account. My recommendation is to lower the price to attract more people to tools, so try it without any financial problems
We performed some tests as hash analysis, and the results were very satisfactory, and for improvement, we saw that integration with the total virus and Cortex helped us a lot to address this threat dictated below
I didn't like the value of premium subscriptions. In my case, I found it very expensive, and it has many limitations for the free account. My recommendation is to lower the price to attract more people to tools, so try it without any financial problems
What do you dislike about the product?
I didn't like the value of premium subscriptions. In my case, I found it very expensive, and it has many limitations for the free account. My recommendation is to lower the price to attract more people to tools, so try it without any financial problems
What problems is the product solving and how is that benefiting you?
It used in an attempt to deal with a Dridex Malware attack. we had difficulty seeing the codes of the malware in the other tools.
we were able to compare malware hashs with other hashs that intezer analyze provided.
we were also able to download the codes to perform controlled tests.
we were able to compare malware hashs with other hashs that intezer analyze provided.
we were also able to download the codes to perform controlled tests.
Recommendations to others considering the product:
I will recommend this tool because I thought it very efficient, even more for a second malware analysis
Detection function of malicious files in laboratory tests.
What do you like best about the product?
The user experience as a whole from first contact to file analysis (in a simple way), integrations with good market tools such as Cortex XSOAR, Fortinet, Splunk, among others.
Hash analysis also works very well and the integration with VirusTotal (and the possibility of community analysis) helps a lot.
I found that somehow there is integration with the Palo Alto Firewalls (I still haven't figured out how) but it will be quite an implementation if I manage to integrate Intezer to send analysis/intelligence results.
Hash analysis also works very well and the integration with VirusTotal (and the possibility of community analysis) helps a lot.
I found that somehow there is integration with the Palo Alto Firewalls (I still haven't figured out how) but it will be quite an implementation if I manage to integrate Intezer to send analysis/intelligence results.
What do you dislike about the product?
Safari and Internet Explorer browser could be supported with a plugin, in addition to Google Chrome (already supported).
The free account is good, but has some limitations. And the premium account subscription is still a bit expensive, especially for small businesses and/or home users.
The Upload File option allows files of maximum 16MB only.
The free account is good, but has some limitations. And the premium account subscription is still a bit expensive, especially for small businesses and/or home users.
The Upload File option allows files of maximum 16MB only.
What problems is the product solving and how is that benefiting you?
I needed a tool that would guarantee a good cost/benefit and be robust in identifying threat information.
We recently identified an executable from the Mirage.gen family on a customer's network.
This family of malware is known to spread through spear-phishing campaigns (targeted phishing attacks, typically to executives with high administrative privileges within a corporate network).
Once compromised, a system can have its data stolen, start having successive interruptions in its processes or end up being part of a botnet (network of infected computers commonly used to perform distributed denial of service attacks), losing control of it completely.
Note: When Mirage is run, the original file copies itself to a folder in “C:\Documents and Settings\\” or “C:\Windows\” and deletes the original file.
After the initial copy, Mirage starts the newly created file and exits the original.
The newly started copy creates registry keys to ensure the system remains infected after every reboot.
Note: Hackers using malware like Miriage use tactics to hide the identity of their C&C servers.
One of the most used tactics is the use of dynamic domain name system (dDNS) domains for callbacks to C&C servers. dDNS providers (eg Dyndns.com) allow anyone to register for a free third-level domain (eg Checkip.dyndns.org) and only require a valid email address, which is kept confidential .
Using Interzer helped me in the beginning of the search that resulted in this information about the file found on the network.
We recently identified an executable from the Mirage.gen family on a customer's network.
This family of malware is known to spread through spear-phishing campaigns (targeted phishing attacks, typically to executives with high administrative privileges within a corporate network).
Once compromised, a system can have its data stolen, start having successive interruptions in its processes or end up being part of a botnet (network of infected computers commonly used to perform distributed denial of service attacks), losing control of it completely.
Note: When Mirage is run, the original file copies itself to a folder in “C:\Documents and Settings\
After the initial copy, Mirage starts the newly created file and exits the original.
The newly started copy creates registry keys to ensure the system remains infected after every reboot.
Note: Hackers using malware like Miriage use tactics to hide the identity of their C&C servers.
One of the most used tactics is the use of dynamic domain name system (dDNS) domains for callbacks to C&C servers. dDNS providers (eg Dyndns.com) allow anyone to register for a free third-level domain (eg Checkip.dyndns.org) and only require a valid email address, which is kept confidential .
Using Interzer helped me in the beginning of the search that resulted in this information about the file found on the network.
Recommendations to others considering the product:
I would recommend others who want a simple tool option that does a fair-to-good job of threat analysis to take a look in this tool.
For people looking for a tool that parses reasonably good threat information, I recommend this tool.
For people looking for a tool that parses reasonably good threat information, I recommend this tool.
Amazing malware analysis experience
What do you like best about the product?
The fact that I can analyze a file or enter its hash value to retrieve important information on its behavior
What do you dislike about the product?
The pricing for countries with undervalued money is a bit expensive
What problems is the product solving and how is that benefiting you?
I had a problem defining with precision which files were malware or not. The benefit was gaining time since it is faster to analyze a file through the Intezer module. Also, adding another tool to my malware analysis toolset is extremely exciting.
Pros and Cons of Intezer
What do you like best about the product?
This software website, I like here about is that, it is very packed with all of the features needed for malware surveillance.
What do you dislike about the product?
I disliked that 50 files are only allowed for free
What problems is the product solving and how is that benefiting you?
The problem solved by Intezer analysis is that I can know what malware that the file sample is.
Recommendations to others considering the product:
You all should use this for getting a deep analysis of files which is better than VirusTotal
Secure Cyber Malware Analysis, Great Experience & Fast Results
What do you like best about the product?
What is most helpful about Intezer Analyze?
They have free and paid membership options; also knowing that your files are End-to-End encrypted are some of the great features they offer. Intezer Analyze provides peace of mind and a great platform. Network security professionals and end-users alike use their platform.
What are the upsides of using Intezer Analyze?
Security, having secure networks are the most critical aspect of running a company.
They have free and paid membership options; also knowing that your files are End-to-End encrypted are some of the great features they offer. Intezer Analyze provides peace of mind and a great platform. Network security professionals and end-users alike use their platform.
What are the upsides of using Intezer Analyze?
Security, having secure networks are the most critical aspect of running a company.
What do you dislike about the product?
What are the downsides of using Intezer Analyze? Only that the free tier is limited to the 50 file limit.
What problems is the product solving and how is that benefiting you?
What business problems are Intezer Analyze helping you solve? Intezer Analyze allows us to run scans on suspicious files, simultaneously checking them against other threats. They integrate with the Maltego platform for even deeper analysis!
Recommendations to others considering the product:
If you do anyy sort of business that involves networking, security, client files, or records, security should be your highest priority.
What advice do you have for those looking at Intezer Analyze? If you need any malware analysis done, consider looking into Intezer Analyze; try it for free there is nothing to lose! I would give it a shot and tell any NSP's to do the same, and your company can only benefit from taking advantage of what they have to offer. Check it out!
What advice do you have for those looking at Intezer Analyze? If you need any malware analysis done, consider looking into Intezer Analyze; try it for free there is nothing to lose! I would give it a shot and tell any NSP's to do the same, and your company can only benefit from taking advantage of what they have to offer. Check it out!
showing 131 - 140