Mandiant Advantage has helped me enhance operational efficiency overall because it enriched our SIEM, which is Splunk, and the YARA rules I wrote within the platform help me understand better what my threat landscape is.
Mandiant Advantage enhances SIEM efficiency with platforms like Splunk through enriched live IOC feeds that identify threat actors' tactics. This highly-scalable platform offers directory monitoring for early attack alerts but struggles with bugs, complex data collaboration, and false positives. Its processor-heavy on-prem client slows scans. Improvements in support and portal systems are needed for better user experience.
