Question Should I use Trellix endpoint security or Xcitium open edr?

[Trident]

and unless i get a good endpoint protection for free (open edr is free) i dont think there is a valid reason to switch to anything else. Yeah i might turn into an xcitium/comodo fanboy LOL

You are already half way there
But yeah, it's not so bad. At least it gets regular updates. When I tried it, their portal was very iffy and deployment couldn't be completed due to expired certificates. I am guessing now they've been renewed. Also, the logging/reporting seems to be very subpar compared to other EDRs. Somebody here (don't remember who) reported that Valkyrie staff slapped "safe" verdict on malware.

 

[Xeno1234]

So, Xcitium is a bad EDR, despite basically letting nothing through since its based on everything being untrusted?
Also, is Kaspersky EDR good since it has probably the best detection engines?

 

[Xciting]

yeah i kinda agree with that statement but its free and trellix gets to heavy and i like using online portal but since its not mine and my friends dad's its kinda annoying to change settings and see a dashboard

Thats the only good free edr all the others like ossec and wazuh kinda suck

 

[Trident]

Also, is Kaspersky EDR good since it has probably the best detection engines?

Kaspersky EDR is very, very expensive. Only the Cloud Security Pro acts as EDR and that's available for 5 dveices/1 year at the price of £435.00 (almost £90 per device). Not sure if any resellers offer it cheaper.

@Xciting I've never used the free EDRs you mentioned.

 

[Xciting]

yeah they are open source and are unkown but yeah they are really bad as per my opnion.

 

[Xciting]

most free edrs are open source and are mostly bad or really sub-par to the point just windows defender is better than them but xcitium is an actual av and not some bad open source, it wasn't always open source and yeah actual companies are paying comodo as we speak for their dragon platform.

 

[Xeno1234]

Kaspersky EDR is very, very expensive. Only the Cloud Security Pro acts as EDR and that's available for 5 dveices/1 year at the price of £435.00 (almost £90 per device). Not sure if any resellers offer it cheaper.
View attachment 276246

@Xciting I've never used the free EDRs you mentioned.

Besides cost, is it good? It does seem really expensive though

 

[Trident]

Besides cost, is it good? It does seem really expensive though

Prevention-wise it must be good. I am not sure how the portal and everything is. From the EDRs, I've only used Symantec, McAfee, Sophos, Trend Micro (very briefly and I don't like it at all), Palo Alto, CrowdStrike and Check Point which now became my go-to. I am not familiar with other EDRs.

 

[Xciting]

Oh ye trident do u reccomend avast seurline, thining about buying rn ngl

 

[Xciting]

@Trident i remember seeing a post of u giving a dude a license key for avast and he got banned the next day lol i forgot his name

 

[Xeno1234]

Prevention-wise it must be good. I am not sure how the portal and everything is. From the EDRs, I've only used Symantec, McAfee, Sophos, Trend Micro (very briefly and I don't like it at all), Palo Alto, CrowdStrike and Check Point which now became my go-to. I am not familiar with other EDRs.

Doesnt Checkpoint use Kaspersky's Engine?

 

[Xciting]

No not anymore they use different engines they use sophos and some others i am not sure abt

 

[Trident]

@Trident i remember seeing a post of u giving a dude a license key for avast and he got banned the next day lol i forgot his name

Are you sure this dude is not you? You seem very familiar with my posts.
Buying Avast is not truly necessary to tell you the truth, the free version is good enough. But, Avast ain't expensive either so for pocket money you can get rid of the annoying ads and upsell attempts. Avast is good.

Doesnt Checkpoint use Kaspersky's Engine?

Check Point gives you a choice, you can use Kaspersky or you can use Sophos as local anti-malware engines.
For more information, visit this thread:

Serious Discussion - Harmony Endpoint by Check Point

This thread is for posts related to Check Point Harmony. Harmony Endpoint Trial: https://pages.checkpoint.com/harmony-endpoint-trial.html What's included in Check Point Harmony Endpoint? Check Point Harmony Endpoint comes in few editions. Features will be compared first and then we will have...

malwaretips.com

 

[Xciting]

oh yeah i have been watching MalwareTips for over well idk back when wilderss was more popular in 2014 bro i was the only 13 yeah old on wilders xd

 

[Xeno1234]

Are you sure this dude is not you? You seem very familiar with my posts.
Buying Avast is not truly necessary to tell you the truth, the free version is good enough. But, Avast ain't expensive either so for pocket money you can get rid of the annoying ads and upsell attempts. Avast is good.

Check Point gives you a choice, you can use Kaspersky or you can use Sophos as local anti-malware engines.
For more information, visit this thread:

Serious Discussion - Harmony Endpoint by Check Point

This thread is for posts related to Check Point Harmony. Harmony Endpoint Trial: https://pages.checkpoint.com/harmony-endpoint-trial.html What's included in Check Point Harmony Endpoint? Check Point Harmony Endpoint comes in few editions. Features will be compared first and then we will have...

malwaretips.com

Kaspersky I assume is better right?

 

[Trident]

Kaspersky I assume is better right?

Definitely. And threat emulation in the cloud uses Bitdefender as well. Sophos has some advantages and disadvantages (like there is detection for files seen in spam emails) but yeah, for better security Kaspersky is the better choice.

 

[Xciting]

Kaspersky I assume is better right?

That depends on what your talking about in terms of protection if your talking bout pure engine database kaspersky if u talking about the emulation and AI prob checkpoint

 

[Xciting]

Never knew kaspersky used bitdefender ok then ye kaspersky prob but it hella pricey

 

[Xeno1234]

Definitely. And threat emulation in the cloud uses Bitdefender as well. Sophos has some advantages and disadvantages (like there is detection for files seen in spam emails) but yeah, for better security Kaspersky is the better choice.

What is Threat Emulation in the cloud?

 

[Trident]

What is Threat Emulation in the cloud?

Files from 73 formats and up to 50 MB are sent to the cloud where they are opened and behaviour is examined. To do that, Check Point uses resistant sandboxes connected to the internet (they do all sorts of things like mimicking user activity as well) and then it uses various engines such as Yara rules on process memory, CADET, Bitdefender, Office Macro engines, CPU-level detection, Intel TDT, IPS and others to produce a verdict.

https://support.checkpoint.com/results/sk/sk95235