1-click bulk update & change in alert rules

Alert Rule Calibration & Recommendations

Log Source Calibration & Recommendations

Configuration Recommendations

SKU Level Optimization

Cost transparency for Log Sources

Customizable Value Settings

Log of changes in alert rules and log sources

Automated Rule Deployment

Automatically follow all recommendations

Microsoft Alert Rule Integration

Third-party Alert Rule Integration

Classification ML algorithm

Customizable Automation Settings

1-Click Close False Positives

Auto-handle False Positives

Identification of True Positives

Threat Intelligence on Security Alerts

Continuous alert enrichment with TI

Easy risk-based triage: low, medium, high risk

View and Explore your Enriched Alerts

Custom Tags on your Sentinel incidents

Easy-to-use Data Collection Rule tool

Vertical log ingestion removal

Horizontal log ingestion removal

Summary rules & low cost storage move

Remove duplicate events

Remove log source overhead

Montor log souce ingestion

Alert management on log ingestion

Spike management of individual costs

Two-way Data Sync

Online Support

Easy installation

In-App Onboarding & How-To Guides

Multiple User Privilege Levels

Customizable URL

Auto-Generate Documentation

Single Sign-On (SSO)

Your Own Managed Key to encrypt data

Segregated Infrastructure