Infocyte

- Ease of use
- Simple to setup and deploy
- Fast live memory forensic analysis
- Excellent customer service
- Light weight deployments

Generally, every time we discover "cons," Infocyte accepts our feedback and improves the product. At this time, I cannot think of any negative pieces in using the product.

The ability to stand up a full incident response investigation in a matter of minutes is vital to support our mission. The simplicity of deployment and the ability to identify malicious content on tens of thousands of hosts compresses the incident response life cycle.

More complete capabilities around Linux and Unix variants is important for cross platform investigations.

We scan a large number of systems while utilizing minimal infrastructure. This keeps operating costs low. Our end-users are also not able to tell that a scan is being conducted on their system, even when all scan options are enabled.

In addition to the above positives, Infocyte also plays nice with other platforms and helps detect any suspicious files, processes, memory hooks, autostarts, etc. so that we can triage, remediate, and keep our systems secure. The support team is incredibly responsive and helpful when any issues do occur.

I previously would have answered this as real-time monitoring but that was recently updated to our portal. I have not had the opportunity to fully sit down and begin internal deployment of this but this will help us be more proactive instead of reactive to threats.

Agentless Forensics Capability surpasses DLP and Endpoint Protection technology. Locating zero day and APTs that advanced competitors such as CloudStrike, Sophos Intercept X and TrendMicro just to name a few do not detect. It's ability to locate and isolate patient one and infected endpoints is unsurpassed and it's ability to detect endpoint compromise without the complexity of SIEMs and Deep Packet Inspection make it an invaluable tool in the cybersecurity arsenals.

Limited endpoint support for mobile and IoT.