Defender product group has futures defined for integration of certain well-known SIEM products with Defender, in addition to currently-supported Splunk and IBM QRadar. Support for additional SIEM products are supposed to be rolled out on an ongoing basis. I though it might be helpful to have a thread where Champions can comment what SIEM products they use in their environments, to provide the Defender development teams a better idea of which SIEM product integrations to prioritize.
------------------------------
Randy Frye
Senior Storage Administrator
D&H Distributing
Harrisburg
7173647948
------------------------------