Surpassingly really good tool and a very interactive dashboard

We are hybrid company that allow folks to work from anywhere, as for the flexibility, the security portion is becoming more exposed, this is where the Microsoft Sentinel has helped us to manage, there are over 200 end point devices that we managed by it, the management include automatic threat detection, automatic defined intelligent security and overall security issue, both from SIEM Perspective and SOAR Perspective, the dashboard is really eye catching and with such dashboard any deviations from our pre-defined values are captured in automated way, despite that we only use it for 200 out of 1000 devices, the result we have has been helping us in managing incidents and most importantly prevent them to harm our organization

We are taking data from : Intune, Entra ID and Defender for Endpoint , those three are already lots enough resources t handle, especially when you have a small team that manages 200 endpoints.

No we are not using the AI features as there are limitations in the licenses that we bought, even without it, it has been doing a wonderful job for us so far, it will be way better with the AI features, but in the end, we only have bought so much for the licenses, hence the SaaS default is our way to go on this

Fortunately, we never reached that stage for the past 2 years, our users have been quite complied with all the Do's and Don'ts that we set from very beginning and it will be a wish to never use them in the future, but looking at the documentation, it is a great process