Microsoft Sentinel Proof of Concept Engagement

This engagement provides a Proof of Concept (POC) of Microsoft Sentinel in your Azure tenant. The POC will be delivered in 4 weeks and includes the following:

Deliverables

• Free trial of Microsoft Sentinel for 30 days. (1)
• Deployment of Microsoft Sentinel in your Azure tenant.
• Configuration of data connectors to ingest security data from Microsoft 365, Azure, and up to three 3rd party data sources. (2)
• Configuration of up to 10 out of the box and 2 custom analytics rules.
• Configuration of 1 custom workbook.
• Configuration of 2 custom playbooks.
• Integration with on Threat Intelligence source currently supported out of the box. (2)
• Provide recommendations to further optimize, expand, and enhance your Microsoft Sentinel deployment.
• Estimate cost of ongoing Microsoft Sentinel usage.

This engagement requires the following customer responsibilities:

• Provide access to your Azure tenant, create a new subscription if necessary, and assign the necessary permissions to the consultant; or pre-schedule all required activities with the consultant for screensharing.
• Provide access to the data sources to be connected to Microsoft Sentinel. Access to all data sources required to kickoff engagement.
• Provide access to the Microsoft Sentinel workspace after the engagement is complete.

(1) There is an additional cost for data ingestion beyond the 30-day trial period. (2) Third-party data sources must currently have a connector available in Microsoft Sentinel. Add-on pricing available for other third-party connectors.