Hey everyone,

for a secops class we’re expected to do some preliminary evaluation of some SIEM and/or SOAR services. Some cybersecurity firm that gave a guest lecture was raving about both Darktrace and Sentinel, so our group figured we’ll look into those at least.

Has anybody had any particular experience with those? Or if you have any other services in mind, that would also be helpful.

I have gone through their sites and I’m scouring through forums to have an idea on sentiment on the current services. (Which at the moment seems to be that none are exactly … popular) I’m not trying to get others to do our work; we’re basically only after actual user experience, which we can’t really get ourselves.

Cheers!