Did you think it was set and forget? There is a reason companies have entire SOC teams only looking at EDR and SIEM. What SIEM did you move to that was less of

Did you think it was set and forget? There is a reason companies have entire SOC teams only looking at EDR and SIEM. What SIEM did you move to that was less of a burden?