@Evgeny Belenky, ​ I found Stellar to be quite intriguing.  I would also recommend McAFee’s new console for centralizing and coordinating a well-deployed enterprise solution.

I found QRadar as a very workable SIEM. It also works seamlessly with the IBM SOAR solution Integrating with the right EDR makes it a formidable solution for monitoring the health of your environment, and offers potential responses to mitigate threats. There is a trade-off…

For tools I’d recommend:  -SIEM- LogRhythm -SOAR- Palo Alto XSOAR Doing commercial w/o both (or at least an XDR) is asking to miss details that are critical, and ending up a statistic Also, remember that any EDR/XDR should integrate to the SIEM/SOAR and a strong threat…