We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
"The data collection and the integration with different products are valuable features."
"One of the most valuable features is the alerts."
"The two most valuable features of this solution are its stability and scalability."
"This solution makes it easy to create use cases, and it is easy to move queries from use cases to the report to the dashboard."
"This solution allows us to identify connections for all users."
"Allows multiple integrations with multiple systems in a stable and flexible fashion."
"The ability to correlate different logs is the solution's most valuable feature."
"The most valuable feature is the log monitoring."
"One of the most valuable features is the ability to report on questionable activity."
"The solution works well when used with other Microsoft solutions."
"The stability of the solution is very good."
"[There is] complexity in maintaining it and managing it. It's not easy to use. It requires a lot of training."
"I would like to see orchestration."
"It's a difficult product to navigate, it's complex."
"There is a GUI, but it is not complete and lacks functionality that needs to be performed using the console."
"I would like to see integration with automation products, such as Phantom Automation."
"The interactive dashboard is complicated and you need to have training in order to use it, so I think that it could be made easier to use."
"The GUI interface is not always intuitive and easy for non-technical users to work with."
"The reporting and the way it is worded needs to be improved in future releases. The dashboards are quite poorly designed."
"Some of the newer features are not completely there yet... For example, there's a tool that allows you to grade your overall internal security and I don't feel that it's completely accurate."
"It would be ideal if the interface allowed for more granular configurations. For example, if I were to set a rule that is a deviation from the pre-defined rules in the Microsoft product, there's conflict."
"There are occasions where it generates some false positives and you have to embark into figuring it out. You need to find out if it was a true alert or a false positive. It's a little bit cumbersome in that area."
"The monthly licensing fee is around $20,000. There aren't any costs in addition to the standard licensing fee."
"In addition to the costs of standard licensing fees, there is the cost of labor for maintenance."
"It can range between $30,000 and $40,000 USD, and can go up to $500,000 and $600,000 USD."
"I believe we are looking into new licenses. They may be called the E5. Honestly, I don't have it on top of my mind, but I think it's around seven to $10 a user per month."
Earn 20 points
ArcSight User Behavior Analytics offers enterprises the ability to monitor and detect from internal and external security threats and fraud.
ArcSight Analytics is ranked 12th in User Behavior Analytics - UEBA with 9 reviews while Microsoft ATA [EOL] is ranked unranked in User Behavior Analytics - UEBA with 3 reviews. ArcSight Analytics is rated 6.6, while Microsoft ATA [EOL] is rated 6.6. The top reviewer of ArcSight Analytics writes "A mature and well-regarded cyber security solution for big data, network security, and analytics". On the other hand, the top reviewer of Microsoft ATA [EOL] writes "Good integration, simple to maintain, and very stable". ArcSight Analytics is most compared with Securonix UEBA, Varonis Datalert and Aruba IntroSpect, whereas Microsoft ATA [EOL] is most compared with Splunk User Behavior Analytics, Varonis Datalert, Securonix UEBA and Exabeam.
See our list of best User Behavior Analytics - UEBA vendors.
We monitor all User Behavior Analytics - UEBA reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.