Microsoft Sentinel

What differentiates Microsoft Sentinel from other similar products?

I think the UI is great, it's packed with features and an enterprise grade product but it's expensive. Its worth the money for enterprise organisations and not so much for small businesses.

What is your favorite aspect of this product?

The ease of use and the advanced AI capabilities are two things that set it apart. Also, the fact that it's available on-premise, as well as a SaaS model, is just amazing.

What do you dislike most about this product?

The price but that's understandable, it's from Microsoft after all.

What recommendations would you give to someone considering this product?

I think its definitely worth a shot if you are looking for a SaaS/On-premise solution that can aggregate data from various sources and help you analyze and make decisions.

What differentiates Microsoft Sentinel from other similar products?

Microsoft Azure Sentinel has the power to investigate and resolves incidents quickly and efficiently without the end user's knowledge at the same time it helps users like us to manage apps through it's data center. It's very easy to set up and it's features of detecting threats and viruses is very effective compared to any other product I have used so far.

What is your favorite aspect of this product?

Best part about this product is that it detects malicious activities without the end user's knowledge, and prevents loss of data. It saves a lot of time compared to manual investigation.

What do you dislike most about this product?

The Initial set up part might be a little confusing to some, otherwise it's easy to use and delivers results effectively.

What recommendations would you give to someone considering this product?

If you're facing any issues with set up, please be patient because once you're done with the set up phase, it's only smooth sailing moving forward !

What differentiates Microsoft Sentinel from other similar products?

- Native cloud Integration and provides a unified experience for managing security operations. - Advanced Analytics and AI: The advanced analytics and ML capabilities detects & allow us to respond effectively. Helps to analyse large -amounts of data in real-time and create actionable insights for SOC activities. - Virtually unlimited scalability and saves significant infra costs. - Excellent Community and Ecosystem around - We get access to a wide range Threat Intelligence and proactive Hunting

What is your favorite aspect of this product?

The seamless integration with other Azure services and the ability to scale resources as needed are seriously a value add.

What do you dislike most about this product?

At the moment, there is nothing specific to pinpoint as a major issue with Sentinel. Like other leading SIEM solutions, it does have some complexity in configurations, integrations with legacy systems, and cost considerations. But being a leader in the security space and with a resourceful partner ecosystem, Microsoft is known for handling these challenges well and grow the solution to new heights.

What recommendations would you give to someone considering this product?

if you are looking for a comprehensive cloud-native SIEM, Microsoft Azure Sentinel should be a priory choice. Evaluate your security needs and business aspects and look at easy integration with other Azure services, advanced analytics capabilities, and automation features that it offers. Microsoft's partner ecosystem is resourceful and helps to maximize the benefits of the platform.