Being an automation enthusiast my favorite part is Playbook. I really like the idea that I can setup workflows, and this way basically also "document" all processes related to security incident handling within the organization. With a solid planning the daily SecOps manual efforts and the resolution time will drop dramatically.

You really need to understand the concept of IncMan and get some expertise before starting a real life implementation by your own. This might take some time as it is a really complex and roboust solution, but it's not a real con.

Minimises the time to respond to incidents. Prioritises responses to security incidents. Reduces false positives. Improves SecOps processes. Automates of time-consuming activities and mundane tasks.

Product is easy to use and integrates with our processes. The strength are immediate and detailed incident reports with related IOC's, timeline, and corrective actions executed; customised KPIs, analysis of alarms before incidents are created; merging incidents with similar characteristics; Community portal to share integrations, playbooks, and Service Packs. Very important is that API actions (integration creating) can be developed by everyone in a few standard languages.

We are in permanent contact with DFLabs and we submit our comments and suggestions on an ongoing basis to the manufacturer, who as a standard quickly implements them in subsequent versions of its software.

The ability to integrate with other products

This product i only have been using for a while and have yet to find any dislikes

Easy to implement, customize and to integrate with other IT systems; Support for digital forensic case management; Triage support; Easy, fast and customizable reporting; Excellent support.

We have been working with DFLabs for several years and so far I have not found any significant shortcomings.

The company is brazilian and provide services of IT security and management. Would definitely recommend this software.

The software is really very easy to implement and use. Has a lot of powerful functionalities that permit a complete management of security incidents and the automation of responses. Beyond that, the vendor tech support is superb.

We are very satisfied with the software and we have nothing to dislike.

easy to use, easy to integrate with other applications

we are waiting for SaaS Version of Incman.

Would definetly recommend this software. The company is european, with many tech and sales representatives internationally.

The software is very easy to implement and use. The vendor tech support is superb, both pre and after sales. I was looking for a solution able to give me Incident and Investigation/Forensic Capabilities. Would recomend it.

A slightly more complete technical documentation could really help.

The Open Integration Framework facilitates the orchestration of the multiple tools used in a SOC. The Playbook section is well designed, powerful and totally customizable (as you can expect from a SOAR platform).

The documentation does not cover all the functions of the platform. A quick start guide to help to dive into the features would be a nice have.

Optimization of SOC resources and standarization of procesess will be very valuable

Triage, automation and reporting are excellent. Architectural options and openness provide a lot of flexibility.

Jargon is sometimes intimidatory as in all this kind of software products

This software can respond to attacks and can take action to remediate cyberattacks and threats. Other than that, ease of use and the GUI is user friendly.

Apologies because I’ve no comment on this. So far so good.

the 4 days training course was helpful in understanding the features of the product .

automated features and defense system to protect systems,notification as well as forensic features

It is slightly hard to use and there are multiple configurations to use at first. Takes some time to get used to the product. After using it is slightly easier to understnad the product.

I really like the high number of integration and customization the software provide, also the support they gave you is very good.

It's not very ease of use, but in my opinion is not really because of incman but is something about the technology itself.

Friendly user interface with the console

So far so good, nothing much comment on this