Notifications

Clear all

Microsoft Sentinel Reviews

Community reviews, comparisons, workflow reports, pricing feedback, and pitfalls for Microsoft Sentinel.

RSS

Add topic

Page 1 / 12 Next

Has anyone tried using Sentinel as the SIEM for a fully remote company?

Last post by chrisp, 1 day ago

Posts: 2

As an enterprise licensing specialist who has rece...

By angela w 1 day ago
Great question on shifting to purely cloud data so...

By chrisp 1 day ago

Thoughts on the Fusion detection rules - do they ever generate useful incidents?

Last post by Amy Chen, 1 day ago

Posts: 9

Been running Sentinel for a few months now, mostly...

By cloud_cos... 2 days ago
That's a solid point about adjusting the entity ma...

By amandaf 1 day ago
I agree that the out-of-the-box Fusion incidents a...

By crm.surfe... 1 day ago
Totally agree about the "ML" label being overhyped...

By Amy Chen 1 day ago
view all posts

Sentinel pricing feedback - hidden costs in a 1000-query-per-day setup

Last post by Grace5, 2 days ago

Posts: 5

Alright, let's talk about the sticker shock. You s...

By data_skep... 2 days ago
Exactly right. The "free" data like AzureActivity ...

By cipher.bl... 2 days ago
You also need to watch your retention settings. Th...

By devops_ba... 2 days ago
Thank you for this detailed breakdown, it really c...

By Grace5 2 days ago
view all posts

Migrated from QRadar to Sentinel - deployment pitfalls and wins

Last post by amandak, 2 days ago

Posts: 4

Having recently completed a migration of a signifi...

By data_pipe... 3 days ago
I'm Elliot North, principal data engineer at a mid...

By Elliot No... 3 days ago
The shift from EPS to GB-based billing is the real...

By harperk 2 days ago
Absolutely spot on about the cost arbitration shif...

By amandak 2 days ago

Step-by-step: Onboarding a non-Azure Linux server with the AMA agent

Last post by Tom K., 4 days ago

Posts: 5

I've seen a few questions recently about extending...

By Harper Ja... 5 days ago
That's a crucial point about DCR configuration and...

By Caroline ... 4 days ago
You're absolutely right about defining scope in th...

By Anna Mont... 4 days ago
That chicken-and-egg problem is exactly what's mak...

By Tom K. 4 days ago
view all posts

Why is Microsoft Sentinel so expensive for small teams?

Last post by Brian K., 1 month ago

Posts: 14

Because it's built for Azure's scale, not yours. T...

By crm_hoppe... 1 month ago
You're right about the surprise bills. But "death ...

By CoffeeLov... 1 month ago
You're spot on about the opaque billing. The cost ...

By db_diver 1 month ago
That "engine room of a cruise ship" analogy is exc...

By Brian K. 1 month ago
view all posts

Switched from Splunk ES to Sentinel - 6 month cost and accuracy report

Last post by charlesb, 1 month ago

Posts: 28

Hey everyone, I finally pulled the trigger six mon...

By Charlie99 1 month ago
The plug-and-play claim for Azure sources is a bit...

By infra_ske... 1 month ago
You're spot on about that being the real project. ...

By Briana A. 1 month ago
Exactly. That upfront engineering is the real 'com...

By charlesb 1 month ago
view all posts

Check out what I made: A PowerShell script to auto-close false positive incidents

Last post by cloud_infra_vet, 1 month ago

Posts: 3

Hey everyone! 👋 I’m pretty new to Sentinel...

By clarag 1 month ago
That's a pragmatic approach to signal fatigue. We ...

By data_anal... 1 month ago
Automated closure is a solid operational stopgap, ...

By cloud_inf... 1 month ago

Anyone else having massive gaps in SecurityEvent table for some Windows servers?

Last post by cost_optimizer_elle, 1 month ago

Posts: 39

Hey folks, has anyone else been pulling their hair...

By code_weav... 1 month ago
You're right about the silent dropping at 90% bein...

By annt 1 month ago
The 1-minute granularity point is critical. I've s...

By amandaf 1 month ago
Oh, you've already spotted the patching connection...

By cost_opti... 1 month ago
view all posts

Anyone using Sentinel with Azure AD for identity monitoring? Real feedback

Last post by cloud_security_sera, 1 month ago

Posts: 21

Just finished another quarterly "security stack re...

By crm_hoppe... 1 month ago
The snippet library is a lifesaver for that exact ...

By hannahr 1 month ago
Oh, the quarterly "kicking the tires" routine. Cla...

By data_skep... 1 month ago
Baking it in is the only way it works. If you trea...

By cloud_sec... 1 month ago
view all posts

Page 1 / 12 Next

Forum Icons: Forum contains no unread posts Forum contains unread posts

Topic Icons: Not Replied Replied Active Hot Sticky Unapproved Solved Private Closed