The MS Sentinel is one of the leading cloud SIEM solution providers. The ease of integration with any 3rd party software solution and native support for all Microsoft suite products is what makes it a SIEM leader in Gartner Magic Quadrant. The one-click deployment of MMA agents to your Azure-hosted VMs and on-prem workloads (using Azure Arc) makes it really scalable and easy to manage. The out-of-the-box integration with almost all types of applications is an added advantage. The extensive library of detection/automation rules prepared by the Microsoft security research team and community-supported content makes it a very rich SIEM product in the market. Review collected by and hosted on G2.com.

Currently, the feature of ingesting logs from private resources is a bit complicated and expensive. Microsoft needs to come up with a connectivity model for Sentinel that enables organizations to ingest logs over a private communication channel easily instead of leveraging the public log analytics API. Review collected by and hosted on G2.com.

Microsoft Sentinel is a cloud-native platform so the scalability is easy. As it's a Microsoft product the integration with Sentinel is easy, while integrating Active Directory and other Microsoft-made products. With Sentinel, we can achieve centralized monitoring which gives us great visibility over IT Infrastructure. Comes with built-in SOAR and threat intel feeds which help in automation and up to date on the latest threats. Finally, it has good customer support and a friendly interface. Review collected by and hosted on G2.com.

Sentinel comes with a free tier but the cost will be added if we integrate with SOAR. Customization of rules can be complex for beginners and there is a moderate false positive rate. Review collected by and hosted on G2.com.

Mainly for security Microsoft Sentinel is a best central hub for security where it gathers and analyzes the data from various sources to detect and respond to cyber threats. Microsoft Sentinel easily connects to other third-party security tools to make it simple to set up. It automates repetitive security tasks, investigating alerts and blocking suspicious activity, reducing manpower, effort, and time. Sentinel keeps you informed about threats and always keeps you one step ahead of cyber attackers. Review collected by and hosted on G2.com.

1. It might be expensive for large organizations as it requires a large amount of security data. 2. Customizing Sentinel to fit some specific needs might take some time and effort. 3. Configuring Sentinel is a little risky and may require technical expertise. Review collected by and hosted on G2.com.

Using product since last 1.4 years here are some things which I liked about the product the GUI it's one of the most moderns UI present on a Siem as its a cloud application there is no use of maintaining any underline servers, the integration with Microsoft Security services is very seamless just on a click of a button, incidents can be migrated from this products very easily, proactive threat hunting to work on the logs and there are more than 100 already available queries on the console, logs are categorised as basic and analysis to save cost on logs by just storing the least necessary logs as basic as the plan has lower cost but we cannot run offenses queries on it, the incident management view is just amazing, from mapping the entities and it even shows the whole time line of events for that entity, great workbook and dashboard section which is as modern and beautiful for any siem.the customer support is great as welland integration with Azure logic apps is the best part as automations on various levels can be done easily and there are connectors present for it. Review collected by and hosted on G2.com.

Integration with third party applications which have previous versions is difficult as the method giving by sentinel are not supported on the tool and needs a support request with third part OEM continously for this, log parsing for all the logs coming from syslog are a challenge qradar does better parsing than this. Review collected by and hosted on G2.com.

It provides seamless integration with other security services and products. It can handle large amount of security data and provides organizations to customize and help their security analytics. It can detect real time alerts and threats. Review collected by and hosted on G2.com.

It integrates well with other microsoft products but users find challenges when they have to integrate with non-microsoft products. Users with non technical background finds it difficult to use Microsoft Sentinel. Also, cost is also a concerning point for the business. Review collected by and hosted on G2.com.

From a user's perspective, what I appreciate most about Microsoft Sentinel is its seamless integration with other Microsoft services. This provides a unified and comprehensive view of security across the entire digital landscape of an organization. Its cloud-native nature eliminates the need for managing infrastructure, offering scalability and flexibility that's hard to match. The advanced AI and machine learning capabilities are truly impressive, helping to detect, prioritize, and investigate threats efficiently. The automated response actions and visual investigation tools are also standout features, making security management more intuitive and less time-consuming. Review collected by and hosted on G2.com.

While Microsoft Sentinel offers a robust set of features, it's not without its potential downsides. For one, the cost can be a barrier for some smaller organizations. Its pricing model, based on data ingestion, can make costs unpredictable if your data volumes fluctuate. Additionally, while its integration with other Microsoft products is seamless, you might face some challenges if you're heavily using non-Microsoft solutions. The learning curve can also be steep, especially for those not familiar with Azure or query languages like Kusto Query Language (KQL). Lastly, while AI and machine learning capabilities are a strength of Sentinel, they can also lead to a high number of false positives if not properly configured, which could potentially lead to alert fatigue. Review collected by and hosted on G2.com.

What I really like is about the Ecosystem of MS. As we know in the market, Microsoft owns more than 70% of the workspace across multiple technologies in terms of OS, Security, and many more. So having a SIEM which is of the same environment gives deep insights of having multiple log sources connected to this SIEM plus this SIEM is now future. It gives us flexibility with lots of different technologies in the Cyber world. Review collected by and hosted on G2.com.

Nothing major I would say. The only thing which I think is nowadays people don't want complexity in integration with other log sources, somehow in the coming days people will understand its feature over ease. Review collected by and hosted on G2.com.

Microsoft Sentinel easily integrates with many enterprise tools. It is a user-friendly platform with compatibility and versatility. Its cloud capabilities provide flexibility, and its secured features and support options help any enterprise increase productivity. Moreover, it's essential for professional tasks as per market demand. Review collected by and hosted on G2.com.

In most cases, it requires a deeper understanding to implement in any organization. Microsoft Sentinel is currently the only SIEM solution that is entirely cloud-native. That's why most organizations with their own premises, not trusting cloud security, hesitate to implement it on their premises. Review collected by and hosted on G2.com.

I like Microsoft Sentinel because it works well with Azure, finds threats quickly, and can automate actions to keep systems safe. Review collected by and hosted on G2.com.

I dislike that because Microsoft Sentinel can be hard to set up and can be expensive. Review collected by and hosted on G2.com.

Automation, threat intelligence, hunting capability Review collected by and hosted on G2.com.

Some complexity in playbook creation, and it's not on-premise and very costly Review collected by and hosted on G2.com.