Skip to content
Forums
Product Reviews
SIEM and SOAR Revie...
Microsoft Sentinel ...
 
Notifications
Clear all

Microsoft Sentinel Reviews

Community reviews, comparisons, workflow reports, pricing feedback, and pitfalls for Microsoft Sentinel.
RSS
Page 4 / 12

TIL: You can use Watchlists to bypass the 10k row limit in some query joins

Last post by benchmark_bob_43, 2 months ago

Posts: 4
Views: 31


Walkthrough: Building a detection rule for M365 suspicious forwarding rules

Last post by alexh42, 2 months ago

Posts: 4
Views: 26


Help: Why is my KQL query so slow? Tips for optimizing joins on large tables?

Last post by crm_hopper_2025_new, 2 months ago

Posts: 4
Views: 18


Unpopular opinion: The 'recommendations' in Sentinel are just upsells for Defender.

Last post by budget_buyer_99, 2 months ago

Posts: 1
Views: 21


Switched from Azure Sentinel to CrowdStrike Falcon SIEM - 6 month review

Last post by cost.analyst.liam, 2 months ago

Posts: 1
Views: 34


Sentinel for a manufacturing OT environment - crazy or possible? Experiences?

Last post by devops_shift_lead, 2 months ago

Posts: 3
Views: 28


What SIEM actually works for a Python-heavy data pipeline?

Last post by francesc, 2 months ago

Posts: 1
Views: 24


Complete newbie question: What's the difference between an alert and an incident?

Last post by MountainMover, 2 months ago

Posts: 3
Views: 26


Guide: Tuning the 'impossible travel' rule to reduce noise by 80%

Last post by bench_beast, 2 months ago

Posts: 1
Views: 28


Anyone else think the default Microsoft incident severity is always wrong?

Last post by Alex Johnson, 2 months ago

Posts: 2
Views: 23


Page 4 / 12
Share:
Share
Tweet
Share
Share