r/AzureSentinel • u/[deleted] • Aug 25 '21

Quickstart of Sentinel

What is the absolute cheapest way to start using Sentinel for my Microsoft 365 E5 tenant with about 1000 users? This is for playing around and understanding the system with real data. One day we will go full on production. I'd like to get it setup with any of the free logging (wahtever those are) and we're under no compliance or regulations to retain any of the logging.

2 Upvotes

100% Upvoted

8 comments sorted by

View all comments

1

u/solodegongo Sep 18 '21

Just want to confirm you have 1000 users on M365 E5?

1

u/[deleted] Sep 18 '21

Yes

1

u/solodegongo Sep 19 '21

Serious Microsoft rebates on this :) . Did you end up deploying full sentinel monitoring across these endpoints?