Sentinel Review
Updated May 06, 2025

Sentinel Review

Anonymous | TrustRadius Reviewer
Score 8 out of 10
Vetted Review
Verified User

Overall Satisfaction with Microsoft Sentinel

We mainly use it for another company tennet. They're mostly Microsoft, so we have to go inside their tenants. I know there is some products within out company that do use Microsoft as well, but we primarily use it for our other tenant.

Pros

  • Detections
  • Breakdowns
  • Point to blank

Cons

  • One of the things I would like to see differently is bringing it all in together. Cause I have to go to Azure and I have to go to other products and a lot of that can get confusing really fast. I would just like to have one kind of singular home point where I can go to different products.
  • I would say it would be kind of time to mitigate. Time to action. I would say it's definitely decreased from some other products.
Would be internet traffic, login logs and on machine events.
Unsure in that process. I was not involved with it.
In my role, we have not used it.
Compared to other tools? It is more streamlined and more kind of to the points and it's been pretty good product.
Well, primarily we use different stuff like CrowdStrike. We use different sign-on features. We primarily use those different products because we support a wider ecosystem.

Do you think Microsoft Sentinel delivers good value for the price?

Not sure

Are you happy with Microsoft Sentinel's feature set?

Yes

Did Microsoft Sentinel live up to sales and marketing promises?

I wasn't involved with the selection/purchase process

Did implementation of Microsoft Sentinel go as expected?

Yes

Would you buy Microsoft Sentinel again?

Yes

Quarantining detections are really relevant and being able to investigate particularly what someone has done. What's not so relevant is product security or not even product security. Endpoint security and management of users, I would say.

Microsoft Sentinel Feature Ratings

Centralized event and log data collection
Not Rated
Correlation
Not Rated
Event and log normalization/management
Not Rated
Deployment flexibility
Not Rated
Integration with Identity and Access Management Tools
Not Rated
Custom dashboards and workspaces
Not Rated
Host and network-based intrusion detection
Not Rated
Log retention
Not Rated
Data integration/API management
Not Rated
Behavioral analytics and baselining
Not Rated
Rules-based and algorithmic detection thresholds
Not Rated
Response orchestration and automation
Not Rated
Incident indexing/searching
Not Rated

Using Microsoft Sentinel

Just because it's not super intuitive. It's not super intuitive to you. You have to get some training and learn a little bit before you can hop on the cloud.

Comments

More Reviews of Microsoft Sentinel