Symantec Security Analytics

Threat Intelligence Integration

Security threat intelligence feed integration with ability to update multiple uses and control updating behaviors.

Real-Time Threat and Anomaly Detection

Real-time or near real time threat detection of attacks and anomalous behavior.

Data Enrichment

Includes the enhancement of the value of internally held data by appending related attributes from external sources .

Security Machine Learning

Non-signature based threat detection that processes data and learns to uncover threats from patterns of behavior, sending out alerts of suspicious behavior

Automated Response Integration

Integrates with automated incident response solutions that are part of platform or offers third-party integration.

Total Traffic Analysis

Ability to scan and analysis perimeter-based traffic as well as lateral network traffic.

Dashboards and Visualization

Ability to visualize data and create analytics dashboards.

Scalable Data Analysis

Ability to increase and decrease the scale of data to analyze your environment.

Compliance Management

Includes compliance controls, compliance rules engine, and compliance monitoring.

Metadata Generation

Generates and stores metadata for threat hunting and for forensic analysis.

Ease of Customization

Don't get bogged down in a difficult customization; use this data to make sure you can easily achieve the functionality you need for your particular situation.

Usability and Intuitiveness

End user learning curves cost the organization money. Pay attention to your end users' technical ability to determine how important UX is in your purchase.

Product Strategy and Rate of Improvement

Vendors who don't stay on top of emerging needs and trends won't enable you to meet your business goals. Use this data to separate innovators from imposters.

Quality of Features

Feature quality is just as important as quantity. Use this data to determine if this product will do what you're purchasing it to do, easily, intuitively, reliably, and effectively.

Availability and Quality of Training

Effective and readily available training enables users to get the most out of the software you've chosen. Use this section to make sure your vendor's training programs and materials measure up.

Ease of Implementation

Successfully implementing new software is necessary to realize its full value and promote end user adoption. This data indicates whether or not the product is easy to implement.

Business Value Created

Software needs to create value for employees, customers, partners, and, ultimately, shareholders. This data expresses user satisfaction - or lack thereof - with the product's business value.

Ease of IT Administration

This data indicates whether IT personnel will be able to resolve issues and perform configurations efficiently and effectively.

Ease of Data Integration

Use this data to determine whether the product will cause headaches or make data integration easy.

Breadth of Features

Users prefer feature rich software that enables them to perform diverse series of tasks. This data expresses user satisfaction with the product's breadth of features.

Vendor Support

The importance of vendor support will vary for each organization depending on internal capabilities, but there will always be issues that only the vendor can resolve.