Group-IB Threat Intelligence

I used it to build the strategic threat forecast. The annual forecast for clients.

We did use it for threat detection, but not directly. I analyze multiple reports, including this one, and assess my client's infrastructure. I identify threats outlined in the reports that may be relevant to the client's infrastructure, and then I help them build detection use cases.

There's no automation. We don't do anything automatically at this point. It's all manual and based on analysis. I can't integrate it into automatic feeds because the report outlines threats that may not be relevant to the client's infrastructure. So, I do the analysis and integrate it manually.

I'm completely satisfied with the way the report is prepared. It's a good report.

The totality of the recordings is quite important. The networks, the new threat actors, the new methods, tactics, techniques, and procedures. The most important is the forecast. It's how the reports depict what's coming.

As the landscape evolves, they could provide a little more detail or specificity to map it to the MITRE ATT&CK framework. Even though it is done in the report, it could be done better.

I used it for four years, since 2020. But recently, I stopped using it.

I would rate the stability a nine out of ten. Ten means outstanding, so I don't give ten for anything.

There is always some room for improvement, but I have had no big issues or troubles with stability.

I would rate the scalability a nine out of ten. It is quite good. I would recommend it for medium and large-sized companies.

I wouldn't recommend it for small companies because their infrastructure is not large enough.

I never needed it.

I find it more relevant than others. Some reports are vague or irrelevant with too much information.

For example, I use CrowdStrike and some other vendors, but I think Group-IB's report is more specific. I am happy with the report.

The initial setup is straightforward. I had no issues with that.

The pricing is alright. It's right on the mark. It costs money, but it's not too high. It's reasonable.

For me, it's a reasonable price for the quality of the product.

Overall, I would rate the solution a nine out of ten.

I would recommend using it.

We use Group-IB Threat Intelligence to help us with threat hunting, incident response, and vulnerability management.

We have found the site intelligence features to be the most valuable. We are able to use these features to track threat actors and analyze their tactics, techniques, and procedures (TTPs).

The dark web intelligence could be improved. It is not as good as the intelligence from other solutions.

I have about four months of experience with this solution. We use its XDR and Set Intelligence solutions.

We work with the latest version of Group-IB XDR. We are also using the cloud-based version of Set Intelligence.

I would rate the stability of Group-IB Threat Intelligence as a ten. It is very stable.

I would rate the scalability of Group-IB Threat Intelligence as a ten. It is very scalable.

About ten users are using Group-IB Threat Intelligence in our company. It is used daily in our organization.

It is very good.

We switched to Group-IB Threat Intelligence because it is better than the other solutions we evaluated.

I would rate my experience with the initial setup as a ten. It was very easy to set up.

It is a proof of concept (POC), so we have not deployed it for production yet.

I would rate Group-IB Threat Intelligence as an eight out of ten. It is a very good solution.

The solution acts as a defense against cyber incidents.

The tool's most valuable feature is the sandbox.

Group-IB Threat Intelligence should improve integration for SIEM and SOAR solutions.

I have been using the solution for four years.

Group-IB Threat Intelligence is very stable. I rate it a nine out of ten.

We have an enterprise license and unlimited scalability. My company has 10 users.

The tool's deployment is easy. I rate it an eight out of ten. The deployment took a day to complete. You need to feed the public IPs to get whitelisted.

Group-IB Threat Intelligence's pricing is reasonable.

I rate the tool an eight out of ten.