An integrated solution, designed for small or medium-sized businesses, bringing together the productivity of Microsoft Office with advanced security capabilities to help
safeguard data from external threats and help protect against data leaks.
With Microsoft 365 Business Premium, users can empower employees to be productive
anywhere on any device. Get more done with AI built into the Office apps. Work
better together with a hub for teamwork bringing your tools and people together
in one place.…
N/A
Microsoft Sentinel
Score 8.6 out of 10
N/A
Microsoft Sentinel (formerly Azure Sentinel) is designed as a birds-eye view across the enterprise. It is presented as a security information and event management (SIEM) solution for proactive threat detection, investigation, and response.
Microsoft 365 Business Premium is well suited to any size organization and is a must-have for business purposes. It is a vital component for the majority of work software needs, as the Microsoft 365 Business Premium package has apps to handle needs that I didn't know we had. It is a great way to provide the required software programs to teams, especially those that work remotely due to the great sharing capabilities built into it. Furthermore, the nonprofit program provided our small nonprofit with vital components for our remote work, while allowing us to keep our donated funds going directly to our mission.
We use it because when a user sees the suspicious activity on his account, Microsoft Sentinel gives alerts to the user's system and the admin system as well. When a user of one of our systems clicked a spam email, that email was trying to install a virus on our server, but Microsoft Sentinel gave an alert to the user and admin both, so that is why our team was able to fix that issue with Microsoft Sentinel very fast. However, it will not be the best option for you if your team is utilizing every feature but you are on a tight budget.
It is a good tool for threat detection and analysis of the threats. We are using this tool for real time threat detection on our employee machines as well as some servers.
It provides various options for collecting data sources by leveraging multiple sources using data connectors. This helps us in gathering data from multiple sources such as our servers as well as our employee machines.
One good thing about this tool is automated incident response thereby increasing the security of servers.
The only thing that is a bit cumbersome is that it doesn't seem that you can save files directly to programs like one drive if you aren't using a Microsoft program to generate the document. An example of this would be if I am working in a PDF in our PDF Program I have to first save it to my desktop and then drag it into one drive. I end up with duplicates and that can sometimes make it hard to remember which is the most up-to-date.
It takes some time to learn how to use and install it properly, and it does not connect effectively with external PaaS systems such as Salesforce CRM, Salesforce Commerce Cloud, and so on.
Microsoft can simplify the display of the logs to make them easier to study, and the user interface occasionally delays, which can also be enhanced.
The basic apps are straightforward and easy to use, especially since they have been around so long. I'm referring to the basic apps like Outlook, Excel, Word, PowerPoint, OneNote, etc. Other features such as Microsoft Teams and Sharepoint Sites, Sharepoint Lists, Sharepoint Groups, etc. all require a higher level of knowledge to both implement and use properly
The Microsoft Azure Sentinel solution is very good and even better if you use Azure. It's easy to implement and learn how to use the tool with an intuitive and simple interface. New updates are happening to always bring new news and improve the experience and usability. The solution brings reliability as it is from a very reliable manufacturer.
In the last 5 years, Microsoft has come a long way. The performance of the products has become more and more user-friendly and it seems that the feedback provided by the user community is being listened to and worked on. The processes are very fast and seamless. There are negligible errors and doesn't slow the systems down.
As mentioned elsewhere in the review, Microsoft has historically paid attention to community feedback and issues, but timeliness can improve, and so can the addressing of long-standing issues about which many users have said "I have this issue too!" but no official solution exists. For issues that do have a solution, however, the solution is usually not difficult to find, and the explanation of features on Microsoft's website can mitigate many problems.
We selected Microsoft 365 Business Premium as it provides a better integration that aligns better with the needs of our company. Another obvious plus is that our staff was used to Microsoft Office so switching to Microsoft 365 Business Premium offered an almost seamless transition. The addition of Team and the SharePoint libraries sealed the deal as we were able to migrate our entire infrastructure from on-premise to the cloud thereby simplifying administration, backups and ultimately reducing costs.
Microsoft Sentinel excels in cloud-native scalability, Microsoft ecosystem integration, and AI-driven threat detection with UEBA and Fusion rules, offering faster deployment and lower costs (48% cheaper per Forrester) than Splunk, QRadar, Exabeam, SentinelOne, Securonix, and Wazuh. It lags in third-party integrations and syslog parsing. Organizations choose Microsoft Sentinel for its cost-effectiveness, automation, and Microsoft synergy, especially in Azure-heavy environments, though Splunk and Exabeam lead in flexibility and UEBA, respectively.
As any cybersecurity product, this has to be more with risk to avoid loss in case of a ransomware that more than relate to a productivity increase. Maybe the impact could be that instead of having people that are checking 24/7 the dashboard, you could implement Sentinel and have less people checking that or people with less expertise. So the saving will be a minor but will be a saving in the cost of your team.
