Keep’s Post

As tired as it has been said, a single pane of glass with alert deduplication and alert correlating works wonders. Gil is right too. If the people you're trying to help don't want helped it won't matter.

You need both. First you need to fix the people problem to convince them to work with the tools. You can't just throw a tool at the problem and expect people to figure it out, And you can't tell people to fix the problem without adequate tools.