cyber-triage-logo

Comparing IR Solutions

Cyber Triage is faster, easier, and more thorough than Ad-Hoc processes—cheaper and better at host forensics than EDR.

Ad-Hoc Process
Cyber Triage
EDR
Cost Free $1,999 / Investigator Often $50,000+price / endpoint & user
Collection
Collects malware-associated artifacts
Collects user-associated artifacts
Collects system configuration artifacts
Remote collection With Scripting
Continuous monitoring With Scripting Coming Soon
Single step collection With Scripting
Disk images
Analysis
Displays collected artifacts
Assigns threat scores to artifacts
Integrates with threat intelligence
Correlates with past incidents
Supports team collaboration
Integrates with SIEM and SOAR
Investigative workflow
Reporting
Generates report based on investigative findings

In addition to Cyber Triage, companies are often considering other types of host-based investigative solutions.

    • Ad-Hoc Process: Using many tools to complete the end-to-end host investigation process. Many of the tools are command line, free, and produce text file outputs
    • EDR: Endpoint Detection and Response agents are always running and collecting data. Their stored data can be used during the investigation.

If you’d like to try Cyber Triage yourself, sign up for a free evaluation of the full version.