Microsoft Security Copilot helps security and IT teams to protect organizations at the speed and scale of AI. It is available in a standalone experience or embedded into other Microsoft Security products.
N/A
Splunk Cloud Platform
Score 8.0 out of 10
N/A
Splunk Cloud Platform is a data platform service thats help users search, analyze, visualize and act on data. The service can go live in as little as two days, and with an IT backend managed by Splunk experts.
It's easy to integrate with other tools because it's a native Microsoft solution for generating OAuth tokens and handling other integrations. But as far as querying for data, using the LLM to analyze it and find that needle in the haystack, whatever, I feel it's terrible. In my experience, it just takes so much manipulation to get it to actually do what you want it to do.
Splunk is excellent when all your data is in one location. Its ability to correlate all that data is intuitive (once the hurdle of learning the query language is overcome). It is also easy to standardize the presentation of information to the company. When data is siloed/standalone, other systems can be cheaper and faster to implement.
Sometimes people don't know how to do a certain feature, especially in Excel, for example. It's a little bit more complex and a community for certain people. And with just a couple of questions about using Microsoft Security Copilot, they can get their answers ready, not having to get support from IT, right? So it eliminates multiple tickets and support from personnel on our team, and they can get the response themselves via this assistant.
This SIEM consolidates multiple data points and offers several features and benefits, creating custom dashboards and managing alert workflows.
Splunk Cloud provides a simple way to have a central monitoring and security solution. Though it does not have a huge learning curve, you should spend some time learning the basics.
Splunk Cloud enables me to create and schedule statistical reports on network use for Management.
I don't have that as of yet. I do like the product for now. I'm sure that as I use it more, I will find things that can be improved. Just understanding how it integrates with the Microsoft ecosystem, it works just fine for what I use it for.
We are not going to stop using M365 and our environment is large enough that there is not enough in-house expertise to handle all aspects of security, even with the help of a MSSP. Security Copilot helps us shore up the knowledge gap and keep our organization's security posture tight.
Anyone can use it. Easy to prompt, also capabilities to become advance with custom agents. It can become custom to your workflow. Many people will have their unique experiences to share and results are generally positive. This is a growth in the product from the effect of community and adoption/usage.
Splunk Cloud support is sorely lacking unfortunately. The portal where you submit tickets is not very good and is lacking polish. Tickets are left for days without any updates and when chased it is only sometimes you get a reply back. I get the feeling the support team are very understaffed and have far too much going on. From what I know, Splunk is aware of this and seem to be trying to remedy it.
My usage of other products is based on SIEM tools. So far, Microsoft Security Copilot is the only product I've seen that works across multiple technologies/products to provide full visibility into security tooling using AI. I know other vendors are working towards this, but Microsoft has definitely taken a lead.
Search Processing Language really is a game changer for writing easy-to-understand and maintainable queries on your data base logs. Once understood, setting up and validating a query can be done in no time- which leaves us the option to focus on more monitoring and improved services. We have no other tools that utilizes data this efficiently
I'd say it was initially negative because it took us time to learn it and understand how to build the workflow around it. But since then, we've been able to speed up and adjust and adapt and move a lot faster. So it's overall.
