Feb. 10, 2024, 5:49 p.m. | /u/callme_e

cybersecurity www.reddit.com

I'm reaching out for advice and recommendations on balancing visibility with cost when forwarding our logs to Sentinel SIEM. Our company is transitioning from a SIEM solution managed by our current MSP to Microsoft Sentinel. The current SIEM was implemented before my time and managed by our MSP, where I'm a glorified user with read-only permissions.

We're a Windows hybrid joined shop with around 230 endpoints/servers, alongside Fortinet/Cisco networking equipment, and on Microsoft E3. Considering an upgrade to include the …

advice cost current cybersecurity efficiency forwarding log log management logs managed management microsoft microsoft sentinel msp recommendations sentinel siem siem solution solution visibility

SOC 2 Manager, Audit and Certification

@ Deloitte | US and CA Multiple Locations

Open-Source Intelligence (OSINT) Policy Analyst (TS/SCI)

@ WWC Global | Reston, Virginia, United States

Security Architect (DevSecOps)

@ EUROPEAN DYNAMICS | Brussels, Brussels, Belgium

Infrastructure Security Architect

@ Ørsted | Kuala Lumpur, MY

Contract Penetration Tester

@ Evolve Security | United States - Remote

Senior Penetration Tester

@ DigitalOcean | Canada