Skip to content
Forums
Product Reviews
SIEM and SOAR Revie...
Microsoft Sentinel ...
 
Notifications
Clear all

Microsoft Sentinel Reviews

Community reviews, comparisons, workflow reports, pricing feedback, and pitfalls for Microsoft Sentinel.
RSS
Page 1 / 9

What is the best way to handle vulnerability data from Qualys in Sentinel?

Last post by docker_diver, 18 hours ago

Posts: 2
Views: 1


Check out what I made: A PowerShell script to auto-close false positive incidents

Last post by finops_auditor_ray, 18 hours ago

Posts: 1
Views: 0


TIL: You can use Watchlists to bypass the 10k row limit in some query joins

Last post by benchmark_bob_43, 21 hours ago

Posts: 4
Views: 0


Walkthrough: Building a detection rule for M365 suspicious forwarding rules

Last post by alexh42, 23 hours ago

Posts: 4
Views: 0


Help: Why is my KQL query so slow? Tips for optimizing joins on large tables?

Last post by crm_hopper_2025_new, 1 day ago

Posts: 4
Views: 1


Unpopular opinion: The 'recommendations' in Sentinel are just upsells for Defender.

Last post by budget_buyer_99, 1 day ago

Posts: 1
Views: 0


Switched from Azure Sentinel to CrowdStrike Falcon SIEM - 6 month review

Last post by cost.analyst.liam, 1 day ago

Posts: 1
Views: 0


Sentinel for a manufacturing OT environment - crazy or possible? Experiences?

Last post by devops_shift_lead, 1 day ago

Posts: 3
Views: 0


What SIEM actually works for a Python-heavy data pipeline?

Last post by francesc, 1 day ago

Posts: 1
Views: 0


Complete newbie question: What's the difference between an alert and an incident?

Last post by MountainMover, 2 days ago

Posts: 3
Views: 3


Page 1 / 9
Share:
Share
Tweet
Share
Share