Microsoft Sentinel Review

The specific use case for us is trying to operate a secure environment, which is also an open environment. Being a university, we kind of have to allow staff and students to be able to look at a whole bunch of stuff we don't necessarily want them to. So we need to have a solution which allows us to secure our data but also allow our users to get on with their core business of teaching and research.

I am unsure

I'm not that hands on with it, so I don't know. I need to be, clearly I need to go and spend some more time with it now that I'm no longer an executive. I can actually do some real work again.

Looking at an event, it's a lot easier to track through an event rather than having to either people with a bit of paper or sticking it in a word or Excel or something crappy like that. And trying to, again, grabbing a bit from here, a bit from there, try and track down where it all went. So having, I did that seamless integrated environment to investigate an event. Hopefully not incident in just kind of makes life easier.