Item: Microsoft Sentinel
Rating: 7
Author: Namandeep Bhatia

Use Cases and Deployment Scope

We use it to addres various security-related challenges and streamline our security operations. We mainlu use it for : - Threat Detection and Analysis - Security Automation and Orchestration:

Pros and Cons

Detection of cyber threts, malware, and suspicious activities etc. across whole IT environment.
Streamlining the process of identifying and responding to security incidents, minimizing their impact
Real-time monitoring

Price is on higher side as compared to competitive products
Process of Onboarding and connecting with system can be simplified
If software is hosted anywhere else from Azure then integration is bit time taking.
Difficult to work with KQL. Enhanced support for more standard query languages, like SQL, could be beneficial.

Return on Investment

With its integration, Instead of requirement whole team we managed by 2 resources
We would be able to manage security compliances better.
Better process established

Sources

We connected Microsoft Sentinel from AWS. I know that it can be connected with Azure or GCP also. Not sure about others.

I think, this feature gives it upperhand from competitors and hence high pricing. We used: 1. Anomaly Detection : Microsoft Sentinel can generate alerts for potential anomalies. For example, it can identify unusual login patterns, data access, or network traffic. 2. Behavioural Analytics: By analysing user and entity behaviour, Microsoft Sentinel can identify abnormal or suspicious activities

Alternatives Considered

We checked, McAfee Enterprise Security Manager (ESM).
In my opinion, Microsoft Sentinel is beter wit AI capacity and good community.

Key Insights

Do you think Microsoft Sentinel delivers good value for the price?

Not sure

Are you happy with Microsoft Sentinel's feature set?

Yes

Did Microsoft Sentinel live up to sales and marketing promises?

Yes

Did implementation of Microsoft Sentinel go as expected?

Yes

Would you buy Microsoft Sentinel again?

Yes

Other Software Used

Freshdesk, AiSensy, ClickUp

Likelihood to Recommend

As stated earlier, it might uses some sort of advanced analytics and machine learning to detect threats and anomalies in real-time. It can identify suspicious activities, potential security breaches, and other security incidents very well. So it is beneficial if you don't want to keep a team for real time threats detection. It only takes one time integration process and then good to go.

One stop solution for all security needs. Transforming Security with AI and Automation

Overall Satisfaction with Microsoft Sentinel