Aruba IntroSpect vs DNIF HYPERCLOUD comparison

Cancel
You must select at least 2 products to compare!
HPE Aruba Networking Logo
252 views|159 comparisons
100% willing to recommend
NETMONASTERY Logo
267 views|160 comparisons
85% willing to recommend
Comparison Buyer's Guide
Executive Summary

We performed a comparison between Aruba IntroSpect and DNIF HYPERCLOUD based on real PeerSpot user reviews.

Find out what your peers are saying about IBM, Splunk, Rapid7 and others in User Entity Behavior Analytics (UEBA).
To learn more, read our detailed User Entity Behavior Analytics (UEBA) Report (Updated: April 2024).
768,857 professionals have used our research since 2012.
Featured Review
Quotes From Members
We asked business professionals to review the solutions they use.
Here are some excerpts of what they said:
Pros
"I haven't heard of any issues with stability.""Roaming feature, application control and firewall features.""The most valuable feature is the end-user monitoring. If there is any abnormal behavior on the machine, the administrator will be alerted."

More Aruba IntroSpect Pros →

"The solution is quite stable and offers good performance. It also works on a virtual machine. We haven't found any issues with it so far. It's been reliable.""The dashboard is helpful, and it creates visualizations to let staff review event data and identify patterns and anomalies.""I like the MITRE table, a feature I saw for the first time in the same solution. There was one MITRE tactic table, which can be used to identify threats if you have all kinds of rules enabled or if you have rules for all the tactics in the MITRE table. There are 14 tables in MITRE, and those 14 tables consist of multiple columns, tactics, and techniques. It was one of the first SIEM tools I saw that had that particular MITRE table. On that basis, you can create new rules and identify existing ones. At any point, if an alert is triggered, it will try to match it to any of those MITRE tactics. I liked that creating a workbook on MITRE business was straightforward. I also like that you can search using SQL or DQL.""The User Behavior Analytics is a built-in threat-hunting feature. It detects and reports on any kind of malware or ransomware that enters the network.""Great for scaling productivity for log monitoring purposes.""The response time on queries is super-fast.""Has a great search capability.""The beauty of the solution is that you can develop infrastructure for a data lake using open sources that are separate from the licenses."

More DNIF HYPERCLOUD Pros →

Cons
"The packet analyzer needs improvement.""Technical support is a little slow.""I would like to see improvements made to the dashboard, where you can get the information with a simple click."

More Aruba IntroSpect Cons →

"The solution should be able to connect to endpoints, such as desktops and laptops... If this solution had a smart connector to these logs- Windows, Linux, or any other logs - without affecting the performance of the connector, that would be wonderful.""The EBA could be improved.""There are currently some issues with machine learning plug-ins.""The vendor is fairly new and it's not as big as some of the international competitors. It's not a mature product. If you ask them to move data, it might take a lot of time.""Dependency on the DNIF support team was frustrating.""I think DNIF HYPERCLOUD can implement the ability to export more than 100,000. At the moment, we can't go beyond that. So many times, if you're checking for the firewall logs and working on something related to authentication or network-related traffic, while that log count is low, the account goes beyond that. You can't restrict the logs or the amount of data you can export. It's very important for my situation. It would be better if they could increase the capacity of exports. Although there are many more types of searching in DNIF HYPERCLOUD, people still struggle to query out what they want because not everyone is good at SQL or DQL. The easiest way to query out in DNIF is using the GUI-based interface. But in the GUI interface, you can use operator calls. It gets tricky when you want to search for a specific type of event. You don't know where it will be passed and whether it will be consistent. In the initial phase, it's tough for us to use DNIF. You cannot pass every event in a stable DNIF. When we used that particular tool, we used to get those logs, but sometimes many things are not getting passed. So, we used to export the sheet or export the data into Excel and weigh the required details. In the next release, I would like them to improve the export of the columns and make the application more user-friendly. I would also like a threat-hunting feature in the next release.""The solution's command line should be simpler so that routine commands can be used."

More DNIF HYPERCLOUD Cons →

Pricing and Cost Advice
  • "The license is based on the number of users. The evaluation license is free, you can download it from the website and try it out first."
  • More Aruba IntroSpect Pricing and Cost Advice →

  • "The pricing is based on the log size."
  • "The solution requires a huge infrastructure and that is costly."
  • More DNIF HYPERCLOUD Pricing and Cost Advice →

    report
    Use our free recommendation engine to learn which User Entity Behavior Analytics (UEBA) solutions are best for your needs.
    768,857 professionals have used our research since 2012.
    Questions from the Community
    Top Answer:Aruba Introspect has two licenses - advanced and standard. While we found the price of the advanced license to be a bit high, the standard license is reasonably priced and costs less than half the… more »
    Top Answer:The dashboard is helpful, and it creates visualizations to let staff review event data and identify patterns and anomalies.
    Top Answer:The EBA could be improved. The graphs and kill chain are not operational most of the time. Some dashboards are not showing data that is important to have for management review or meetings. The… more »
    Top Answer:In our project, we are mostly using authentication activities, real-time notification & alerting, log correlation & threat intelligence solutions. The DNIF tool is very authentic and capable of… more »
    Ranking
    Views
    252
    Comparisons
    159
    Reviews
    0
    Average Words per Review
    0
    Rating
    N/A
    Views
    267
    Comparisons
    160
    Reviews
    5
    Average Words per Review
    774
    Rating
    7.8
    Comparisons
    Also Known As
    IntroSpect
    Learn More
    Overview

    Aruba IntroSpect is a User Behavior Analytics (UEBA) tool that uses supervised and unsupervised machine learning to automatically baseline user and device behavior while actively looking for anomalous activity that may indicate a threat. The solution detects compromised users’ systems by identifying changes in typical IT access and usage. By accelerating alert prioritization, incident investigation, and threat-hunting efforts, Aruba IntroSpect can automate the detection of attacks and risky behaviors. In addition, the solution allows security teams to stay ahead of malicious activity and also insecure or negligent users, so they can manage threats before they become damaging. Aruba IntroSpect is suitable for IT organizations of every size and enables businesses to easily and rapidly scale machine-learned behavior detection from small projects to full enterprise deployments.

    Aruba IntroSpect can detect:

    • Account abuse
    • Account takeover
    • Command and control
    • Data exfiltration
    • Lateral movement
    • Password sharing
    • Privilege escalation
    • Flight risk
    • Phishing
    • Ransomware

    Aruba IntroSpect Deployment Options

    • On-premise VM or appliance for Packet Processor
    • AWS or on-premise deployment for Analyzer

    Aruba IntroSpect Data Sources

    The IntroSpect platform can process data sources, including:

    • VPN, FW, IPS/IDS, web proxy, email logs
    • NTA sources: Packets and NetFlow
    • DNS logs
    • Active Directory logs
    • DHCP logs
    • External threat feeds
    • Alerts from third-party security infrastructure

    Aruba IntroSpect Features

    Aruba IntroSpect has many valuable key features. Some of the most useful ones include:

    • Advanced analytics
    • 100+ supervised and unsupervised machine learning models
    • Continuously updated risk scoring
    • Accelerated investigations
    • Packets
    • Flows
    • Logs and alerts
    • Enterprise scale
    • Spark/Hadoop platform

    Aruba IntroSpect Benefits

    There are many benefits to implementing Aruba IntroSpect. Some of the biggest advantages the solution offers include:

    • Fast deployment: Besides having different options for deployment (on-prem or cloud), the solution offers a standalone or integrated platform. For fast deployment, users can ingest data natively or from SIEM, log management, or a packet broker.
    • Efficient: The Aruba IntroSpect solution reduces the time and effort that is required to understand, diagnose, and respond to an attack.
    • Deep insights: Security teams can triage better, make more informed decisions, and respond before damage occurs.
    • Machine learning-based analytics: The solution builds baselines for normal behavior of both individual entities and groups by continuously monitoring IT activities.
    • Comprehensive security profile: When users implement Aruba IntroSpect, they gain access to a security profile with continuous risk scoring and enriched security information.
    • Automatic risk profiles: Aruba IntroSpect automatically creates a risk profile for every user, system, and IoT device connected to the network, saving users an additional step.
    • Proactive threat hunting: Through its query interface, Aruba IntroSpect proactively spots threats without the overhead of finding, searching, and summarizing isolated data stores.
    • Prioritize security risks: Risk scores are based on machine learning that can account for key factors like the order and time of incidents across various attack stages as well as time since detection and business context. Accurate, normalized scores mean security analysts can confidently prioritize their efforts.
    • Instant visibility: When using the solution, users get instant visibility to high-risk activity. Aruba IntroSpect provides access to complete investigative records.

    DNIF HYPERCLOUD is a cloud native platform that brings the functionality of SIEM, UEBA and SOAR into a single continuous workflow to solve cybersecurity challenges at scale. DNIF HYPERCLOUD is the flagship SaaS platform from NETMONASTERY that delivers key detection functionality using big data analytics and machine learning. NETMONASTERY aims to deliver a platform that helps customers in ingesting machine data and automatically identify anomalies in these data streams using machine learning and outlier detection algorithms. The objective is to make it easy for untrained engineers and analysts to use the platform and extract benefit reliably and efficiently.

    Sample Customers
    Sage Hotel, Centara Hotels and Resorts, Asda, The Dolder Grand,
    Mahindra & Mahindra, Tata Consultancy Services (TCS), ICICI Bank, Yes Bank, Tata Motors, RBL Bank
    Top Industries
    VISITORS READING REVIEWS
    Computer Software Company15%
    Retailer9%
    Construction Company8%
    Educational Organization7%
    VISITORS READING REVIEWS
    Computer Software Company18%
    Financial Services Firm16%
    Real Estate/Law Firm11%
    Construction Company10%
    Company Size
    VISITORS READING REVIEWS
    Small Business48%
    Midsize Enterprise10%
    Large Enterprise41%
    VISITORS READING REVIEWS
    Small Business29%
    Midsize Enterprise15%
    Large Enterprise56%
    Buyer's Guide
    User Entity Behavior Analytics (UEBA)
    April 2024
    Find out what your peers are saying about IBM, Splunk, Rapid7 and others in User Entity Behavior Analytics (UEBA). Updated: April 2024.
    768,857 professionals have used our research since 2012.

    Aruba IntroSpect is ranked 24th in User Entity Behavior Analytics (UEBA) while DNIF HYPERCLOUD is ranked 9th in User Entity Behavior Analytics (UEBA) with 7 reviews. Aruba IntroSpect is rated 8.6, while DNIF HYPERCLOUD is rated 7.6. The top reviewer of Aruba IntroSpect writes "A straightforward setup for technical users and an overall good product". On the other hand, the top reviewer of DNIF HYPERCLOUD writes "Development from open sources is very valuable but a huge infrastructure is required". Aruba IntroSpect is most compared with Arista NDR, Cisco Secure Network Analytics, LogRhythm UEBA, Darktrace and SolarWinds NetFlow Traffic Analyzer, whereas DNIF HYPERCLOUD is most compared with IBM Security QRadar, Splunk Enterprise Security, Microsoft Sentinel and Wazuh.

    See our list of best User Entity Behavior Analytics (UEBA) vendors.

    We monitor all User Entity Behavior Analytics (UEBA) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.