If I were covering a PC, I would choose Windows Defender. That won’t secure a Mac, so for those, I would have to use SEP. But over and above either of those solutions I would choose CrowdStrike. (I realize that wasn’t one of your two choices, but that’s my real answer.)

Splunk is much more nimble but requires a lot of product knowledge to properly set up, which adds to the implementation cost. IBM’s products all come with implementation, but the tradeoff there is in customizability All things being equal, if the budget were there, I…