My team tested it when we were choosing an EDR and SIEM. The experience was horrendous. The maintenance is huge, you need to hunt for rulesets, the EDR is half

My team tested it when we were choosing an EDR and SIEM. The experience was horrendous. The maintenance is huge, you need to hunt for rulesets, the EDR is half baked, etc.