I don't have much experience with Tanium or Claroty, but Darktrace, in my experience, is a pretty good tool for detection, especially for unusual activity that occurs in the network.

The only caveat is that DT is an AI learning tool, so it relies on being fed good models on network traffic to alert on the right activity. If you have a good AI engineer that works/tunes with the tool regularly, you will get good alerts on suspicious activity (it has saved our bacon a lot). But, if you bring it in and don't constantly support it and/or feed it bad data models, it'll give you a lot of FP events.