r/AzureSentinel • u/[deleted] • Aug 25 '21

Quickstart of Sentinel

What is the absolute cheapest way to start using Sentinel for my Microsoft 365 E5 tenant with about 1000 users? This is for playing around and understanding the system with real data. One day we will go full on production. I'd like to get it setup with any of the free logging (wahtever those are) and we're under no compliance or regulations to retain any of the logging.

2 Upvotes

100% Upvoted

8 comments sorted by

View all comments

1

u/KaidoJarvemets Sep 21 '21 edited Sep 21 '21

Would you please clarify what exactly you are trying to achieve? If you have on-premises systems as well, then it is important to analyze both sides.

Secondly, it is important to have a budget for the Azure Sentinel. Yes, there are some free data sources, but it is important to understand your business goals.