Surpassingly really good tool and a very interactive dashboard
We are hybrid company that allow folks to work from anywhere, as for the flexibility, the security portion is becoming more exposed, this …
Microsoft SentinelFormerly Azure Sentinel
Starting at $2.46 per GB ingested
View PricingOverview
What is Microsoft Sentinel?
Microsoft Sentinel (formerly Azure Sentinel) is designed as a birds-eye view across the enterprise. It is presented as a security information and event management (SIEM) solution for proactive threat detection, investigation, and response.
Recent Reviews
How Microsoft Sentinel Differs From Its Competitors
Awards
Products that are considered exceptional by their customers based on a variety of criteria win TrustRadius awards. Learn more about the types of TrustRadius awards to make the best purchase decision. More about TrustRadius Awards
Popular Features
- Centralized event and log data collection (14)8.686%
- Correlation (14)8.484%
- Event and log normalization/management (14)8.282%
- Custom dashboards and workspaces (14)7.474%
Reviewer Pros & Cons
- Sentinel is by far the most efficient tool in supporting the highest number of solutions and products when it comes to data connection (or ingestion) ...
- 'Notebook' has always been a very hard to use feature for me in Sentinel. From my experience, there have been a very selective use cases for this feat...
Associate Lead Security Admin
Atidan (Information Technology & Services, 201-500 employees)
Pricing
Azure Sentinel
$2.46
Cloud
per GB ingested
100 GB per day
$123.00
Cloud
per day
200 GB per day
$221.40
Cloud
per day
Entry-level set up fee?
- No setup fee
For the latest information on pricing, visithttps://www.microsoft.com/en…
Offerings
- Free Trial
- Free/Freemium Version
- Premium Consulting/Integration Services
Product Demos
Microsoft Sentinel: Monitoring health and integrity of analytics rules
YouTube
Features
Return to navigation
Product Details
- About
- Competitors
- Tech Details
- FAQs
What is Microsoft Sentinel?
Microsoft Sentinel is a security operations center (SOC) solution used to uncover sophisticated threats and respond with a security information and event management (SIEM) solution for proactive threat detection, investigation, and response. It eliminates security infrastructure setup and maintenance, and elastically scales to meet the user's security needs.
Helps users to protect the digital estate: Secures the digital estate with scalable, integrated coverage for a hybrid, multicloud, multiplatform business.
Microsoft intelligence to Empower SOC: Optimizes SecOps with advanced AI, security expertise, and threat intelligence.
Detection, investigation and Response: A unified set of tools to monitor, manage, and respond to incidents.
Cost of ownership: A cloud-native SaaS solution to reduce infrastructural costs.
Microsoft Sentinel Features
Security Information and Event Management (SIEM) Features
- Supported: Centralized event and log data collection
- Supported: Correlation
- Supported: Event and log normalization/management
- Supported: Deployment flexibility
- Supported: Integration with Identity and Access Management Tools
- Supported: Custom dashboards and workspaces
- Supported: Host and network-based intrusion detection
- Supported: Log retention
- Supported: Data integration/API management
- Supported: Behavioral analytics and baselining
- Supported: Rules-based and algorithmic detection thresholds
- Supported: Response orchestration and automation
- Supported: Incident indexing/searching
Microsoft Sentinel Screenshots
Microsoft Sentinel Videos
Playlist for Microsoft Sentinel videos
Microsoft Sentinel: Monitoring health and integrity of analytics rules
Microsoft Sentinel Competitors
Microsoft Sentinel Technical Details
| Deployment Types | Software as a Service (SaaS), Cloud, or Web-Based |
|---|---|
| Operating Systems | Unspecified |
| Mobile Application | No |
Frequently Asked Questions
Microsoft Sentinel (formerly Azure Sentinel) is designed as a birds-eye view across the enterprise. It is presented as a security information and event management (SIEM) solution for proactive threat detection, investigation, and response.
Splunk Enterprise Security (ES), IBM Security QRadar SIEM, and Securonix Next-Generation SIEM are common alternatives for Microsoft Sentinel.
Reviewers rate Deployment flexibility highest, with a score of 9.2.
The most common users of Microsoft Sentinel are from Enterprises (1,001+ employees).
Comparisons
Compare with
Reviews and Ratings
(67)Attribute Ratings
Reviews
(1-20 of 20)Companies can't remove reviews or game the system. Here's why
December 06, 2023
Surpassingly really good tool and a very interactive dashboard
- We are able to securely manage 200 endpoint devices with this tools as it is part of the package that we bought, managing them is not easy to say the least as one security incident can expose the whole company
November 13, 2023
SIEM means Sentinel
- With a breadth of features present to facilitate faster triage and response, many of our clients were able to reduce the incidents by 35% over 6-7 months of usage.
- With the provision of manipulating data in depth, many organizations have been able to get thought provoking misconfiguration in the cloud resources and rectified them in time.
- With such a high number of OOTB playbook templated, many of the clients have been able reduce their MTTR (Mean Time To Respond) by a staggering 65% over the usage of 7-9 months.
October 27, 2023
Why you should start using Microsoft Sentinel today.
- Productivity in out SOC went up.
- More control over environments.
October 24, 2023
Sentinel: Your one stop SIEM for cloud for Bird's Eyes by MS.
- Log Management is a little difficult in-house as everything is situated on the cloud.
- Paying according to the throughput of the data can be costlier for some organizations.
- Excellent integration and log parsing for Microsoft products save many man-hours for the SIEM admin to focus on other things.
October 23, 2023
Microsoft Sentinel, the scaleable cloud-native SIEM platform
- Less overhead on integration of cloud-native logging
- The KQL language is very helpful since it can be used for security and operational monitoring but as well for workbooks and dashboarding
- A large community developing solutions is very helpful for a quick adoption
- Enhances decision making
- Improves business process agility
- Product functionality and performance
October 02, 2023
Review of Microsoft Sentinel
- Can save on costs as a single platform offers more options.
- Resources required to manage threats have reduced.
September 22, 2023
One stop solution for all security needs. Transforming Security with AI and Automation
- With its integration, Instead of requirement whole team we managed by 2 resources
- We would be able to manage security compliances better.
- Better process established
September 20, 2023
Excellent cloud security solution with intelligent analytics and automation offered by Microsoft.
- We enhanced the depiction of threats, agreements, and solutions as well as the automation against security indices.
- This solution, which is excellent for confirming breach attempts, replaced expensive hardware that had expensive maintenance contracts and did not give thorough information.
September 20, 2023
A big SIEM or a little SOAR?
- Microsoft Sentinel is a good investment, especially when sided with other solutions such as Microsoft 365 Defender, as it provides 360° protection on every level of the infrastructure.
- When deployed on infrastructures that have never had an SIEM, Microsoft Sentinel helps to assess vulnerabilities and misconfigurations.
- As with any other SIEM, Microsoft Sentinel basically eliminates the need to put effort into every single platform (like EDR, NDR, XDR) and converge that effort on a single product that correlates and orchestrates the rest.
September 13, 2023
Microsoft Sentinel Review
- I think it had a positive impact because as we said before, it is very quick at seeing threat vectors coming in. It definitely helps with people that are sitting there watching to be able to quickly see that we got a notification or something's going on and they're able to act upon it, do the investigation fairly quickly.
- The only negative thing about it is the fact that sometimes you have to pay for some additional training from Microsoft because there are some little small intricacies that you might not figure out and might not be able to find on a YouTube or Google rule that only a Microsoft person who was working with the tool and got trained by Microsoft was able to tell you about to make your job a little bit easier.
September 13, 2023
Microsoft Sentinel Review
- I can say it's one of the leading SaaS where the time to implementation is very fast. Within a few days I did start seeing the return on investment. So that's the one good thing I see about the Sentinel.
September 13, 2023
Microsoft Sentinel Review
- Positive is that we're able to reach into more systems and grab more granular data.
September 13, 2023
Microsoft Sentinel Review
- I'm a consultant, so everyone who uses Centro is good for my business objectives.
September 12, 2023
Microsoft Sentinel
- It's part of overall service product that we provide and so having it has helped introduce more security to organizations that otherwise wouldn't have the chance to have enterprise grade security.
September 12, 2023
Microsoft Sentinel Review
- Positive is we have a lot of insights or Microsoft 365 in general, like the admin center, defender, compliance, everything gets fed to Sentinel, so it's awesome. That's a very positive thing.
September 12, 2023
Microsoft Sentinel Review
- I'd say that Sentinel gives us a lot more vision about our stuff. For the business impact, it's really hard to tell because we're an entertainment shop. In fact, it costs us money to get it to run, but it gave us a pre-value. But yeah, it's hard to correlate it with the business impact.
- Increase of intrusion reaction time
- Increase of end users protection
- Better automation against safety indices.
- Better visualization of threats, deals and solutions.
- Great for checking attempted violations.
- Cost saving as you don't need to use multiple platforms to monitor your security events.