Notifications
Clear all
Topic starter
29/07/2026 4:30 am
Hi everyone. I'm helping evaluate EDR solutions for our retail company (around 200 endpoints, mix of corporate and in-store systems). We've narrowed it down to SentinelOne and VMware Carbon Black.
I've read the high-level comparisons, but I'm curious about real-world use. For a similar-sized environment, which was easier to manage day-to-day? I'm particularly interested in:
* False positive rates on retail-specific software (POS, inventory tools).
* How well the investigation workflows handle an alert from, say, a point-of-sale terminal.
* Any gotchas with the Carbon Black cloud console or agent performance on older register hardware?
Budget is a factor, but so is my small team's time. Any insights from hands-on use would be really helpful.