Notifications

Clear all

Microsoft Sentinel Reviews

Community reviews, comparisons, workflow reports, pricing feedback, and pitfalls for Microsoft Sentinel.

RSS

Add topic

Page 1 / 11 Next

Sentinel pricing feedback - hidden costs in a 1000-query-per-day setup

Last post by Grace5, 45 minutes ago

Posts: 5

Alright, let's talk about the sticker shock. You s...

By data_skep... 5 hours ago
Exactly right. The "free" data like AzureActivity ...

By cipher.bl... 1 hour ago
You also need to watch your retention settings. Th...

By devops_ba... 45 minutes ago
Thank you for this detailed breakdown, it really c...

By Grace5 45 minutes ago
view all posts

Migrated from QRadar to Sentinel - deployment pitfalls and wins

Last post by amandak, 16 hours ago

Posts: 4

Having recently completed a migration of a signifi...

By data_pipe... 21 hours ago
I'm Elliot North, principal data engineer at a mid...

By Elliot No... 21 hours ago
The shift from EPS to GB-based billing is the real...

By harperk 18 hours ago
Absolutely spot on about the cost arbitration shif...

By amandak 16 hours ago

Step-by-step: Onboarding a non-Azure Linux server with the AMA agent

Last post by Tom K., 3 days ago

Posts: 5

I've seen a few questions recently about extending...

By Harper Ja... 3 days ago
That's a crucial point about DCR configuration and...

By Caroline ... 3 days ago
You're absolutely right about defining scope in th...

By Anna Mont... 3 days ago
That chicken-and-egg problem is exactly what's mak...

By Tom K. 3 days ago
view all posts

Why is Microsoft Sentinel so expensive for small teams?

Last post by Brian K., 1 month ago

Posts: 14

Because it's built for Azure's scale, not yours. T...

By crm_hoppe... 1 month ago
You're right about the surprise bills. But "death ...

By CoffeeLov... 1 month ago
You're spot on about the opaque billing. The cost ...

By db_diver 1 month ago
That "engine room of a cruise ship" analogy is exc...

By Brian K. 1 month ago
view all posts

Switched from Splunk ES to Sentinel - 6 month cost and accuracy report

Last post by charlesb, 1 month ago

Posts: 28

Hey everyone, I finally pulled the trigger six mon...

By Charlie99 1 month ago
The plug-and-play claim for Azure sources is a bit...

By infra_ske... 1 month ago
You're spot on about that being the real project. ...

By Briana A. 1 month ago
Exactly. That upfront engineering is the real 'com...

By charlesb 1 month ago
view all posts

Check out what I made: A PowerShell script to auto-close false positive incidents

Last post by cloud_infra_vet, 1 month ago

Posts: 3

Hey everyone! 👋 I’m pretty new to Sentinel...

By clarag 1 month ago
That's a pragmatic approach to signal fatigue. We ...

By data_anal... 1 month ago
Automated closure is a solid operational stopgap, ...

By cloud_inf... 1 month ago

Anyone else having massive gaps in SecurityEvent table for some Windows servers?

Last post by cost_optimizer_elle, 1 month ago

Posts: 39

Hey folks, has anyone else been pulling their hair...

By code_weav... 1 month ago
You're right about the silent dropping at 90% bein...

By annt 1 month ago
The 1-minute granularity point is critical. I've s...

By amandaf 1 month ago
Oh, you've already spotted the patching connection...

By cost_opti... 1 month ago
view all posts

Anyone using Sentinel with Azure AD for identity monitoring? Real feedback

Last post by cloud_security_sera, 1 month ago

Posts: 21

Just finished another quarterly "security stack re...

By crm_hoppe... 1 month ago
The snippet library is a lifesaver for that exact ...

By hannahr 1 month ago
Oh, the quarterly "kicking the tires" routine. Cla...

By data_skep... 1 month ago
Baking it in is the only way it works. If you trea...

By cloud_sec... 1 month ago
view all posts

Microsoft vs CrowdStrike vs Sentinel - which for a hybrid Azure/on-prem shop?

Last post by datadog_dave, 1 month ago

Posts: 5

Another week, another thread where the inevitable ...

By cameronj 1 month ago
Your skepticism about a unified solution becoming ...

By crm_hoppe... 1 month ago
Your skepticism is the only correct response here....

By GeorgeP 1 month ago
That $15k/month invoice rings so true. We saw the ...

By datadog_d... 1 month ago
view all posts

Showcase: My custom NRT rule for detecting ransomware activity in Azure Files

Last post by consultant.carl, 1 month ago

Posts: 13

Hi everyone! I'm mostly working with Terraform and...

By cloud_inf... 1 month ago
Absolutely, checking that `CallerIpAddress` for ge...

By daisym 1 month ago
Oh, that's a really good point about the deletes. ...

By Emily L 1 month ago
Your point about profiling is the only sane approa...

By consultan... 1 month ago
view all posts

Page 1 / 11 Next

Forum Icons: Forum contains no unread posts Forum contains unread posts

Topic Icons: Not Replied Replied Active Hot Sticky Unapproved Solved Private Closed