Recorded Future Intelligence Platform

Our main use case for Recorded Future  is brand monitoring, reputation, and risk assessment, as it is one of the best tools that combine all three functionalities. We mainly use Recorded Future  for our brand monitoring, to maintain our reputation, and for monitoring partner companies. Recorded Future offers scanning of a wide range of the internet, including public sources like various pastebins, GitHub , social media, as well as forums on the dark web. This helps identify if any company assets have been leaked by employees unintentionally, as well as through potential fraudsters. Additionally, it helps us with identifying the severity of vulnerabilities by assessing how many POCs are available or how often certain vulnerabilities are mentioned in related channels.

I can give a specific example of how I have used Recorded Future for brand monitoring and risk assessment. We have been able to identify leaked credentials and close those accounts off. We have also been able to identify malware being distributed or spam being sent out by customers using our infrastructure, and we could shut off those accounts.

The best features of Recorded Future include providing the latest threat reports regarding artifacts, such as IPs, domains, or hashes.

Getting those latest threat reports about artifacts, IPs, domains, or hashes has been advantageous to us in processing artifacts and identifying possible threats in a short period of time. Therefore, we are able to identify threats before they affect our systems and our application. Recorded Future also has the best browser extension that provides real-time information about an artifact and is accurate in identifying malicious domains and APIs.

Some of the best features include searching across multiple sources at the same time, indexing information in real time, and providing dashboards, statistics, and heat maps about certain topics.

Recorded Future has positively impacted our organization as we are able to cover a lot of sources with only this intelligence provider, not having to have specific tools for clear web or social media monitoring. Since the Recorded Future staff is doing the on-demand integration of new sources, we are saving a couple of positions as we do not have to develop our own crawlers. It is possible to integrate the solution with tools such as Splunk, which is really useful in order to obtain KPIs, metrics, and other useful insights for executive members of our company.

Some of the areas that need improvement in Recorded Future include email reports that can show unrelated content. Sometimes alerts pop up for articles that have been published years ago but were just recently discovered by Recorded Future.

For the browser extension, since the main purpose is to present information regarding IPs, I think it would be best to provide us with an idea of where the IP originates or some additional information about the organization it belongs to.

API capabilities in Recorded Future are improving, but there are still some features that are missing and some errors that are hard to handle and understand.

The price of Recorded Future is a bit high, especially for smaller teams working on a tight budget, but it is very effective and relatively competitive for large organizations.

I have been using Recorded Future for the past five years and six months.

According to my experience, Recorded Future is very stable because I have not seen slow performance.

Recorded Future is highly scalable and can be used by any size of organization.

The customer support for Recorded Future is very responsive and proactive.

Previously, we were using VirusTotal , and I use Recorded Future together with VirusTotal  to fully understand the possible threats on our network. However, Recorded Future has a better threat intelligence feed that I prefer to use in finalizing my investigations.

Before choosing Recorded Future, I evaluated other options, specifically VirusTotal.

Recorded Future is deployed in our organization using a hybrid cloud.

I purchased Recorded Future through the AWS Marketplace .

We have seen a return on investment as we have been able to identify leaked credentials and close those accounts off easily, thereby improving our security. We have also been able to identify malware being distributed or spam being sent out by customers using our infrastructure, and we are able to shut those accounts off.

The price of Recorded Future is a bit high, especially for smaller teams working on a tight budget, but it is very effective and relatively competitive for large organizations.

Previously, we were using VirusTotal, and I use Recorded Future together with VirusTotal to fully understand the possible threats on our network. However, Recorded Future has a better threat intelligence feed that I prefer to use in finalizing my investigations.

Before choosing Recorded Future, I evaluated other options, specifically VirusTotal.

Recorded Future is mainly beneficial to the SOC. As part of the monitoring team, Recorded Future makes the investigation of alarms much easier for me. It can show the reputation of APIs from domains or even hashes, which helps me redirect my focus to potential malicious network activity easily.

Recorded Future is deployed in our organization using a hybrid cloud, and we use AWS  as our cloud provider.

My advice for others looking into using Recorded Future is that it makes the investigation of alarms significantly easier and helps redirect focus to potential malicious network activity. I would rate Recorded Future an 8 out of 10.