Library - Topic
Dive into the nuances of Security Information and Event Management systems. Understand their role in real-time analysis of security alerts, threat detection, and the importance of timely and informed responses to potential breaches.
Articles open in this browser tab. Some require sign-in.
ntegrated Security Operations Center (ISOC), now in preview, combines the breadth of SIEM capabilities with the depth of native threat protection, alongside threat intelligence, automation and AI. ISOC gives security teams and agents a shared foundation to see the environment, understand the threat and act with the relevant context and controls.
Sep 23, 2026
The next question after a security finding should be: what can this reach? A finding becomes more useful when you can see the identities, devices and cloud resources connected to it. Those relationships help you decide where to investigate next and which exposure deserves attention first. That is where Hunting graph fits.
Sep 21, 2026
Project Perception's practical value is coordination. Specialized security agents work toward a shared objective, giving customers a clearer path from understanding a threat to deciding what to investigate, detect and fix. Inside Microsoft Defender, six specialized agents work across Red, Blue and Green teams. Their value comes from how their findings help your team decide what to investigate, detect and fix.
Sep 14, 2026
Security data becomes more valuable when we model the relationships that tables leave scattered❗ Microsoft Sentinel Custom Graph [Preview] makes that possible.
Jul 30, 2026
NEW: Microsoft Sentinel CCF Push connectors (Preview) - real-time security events ingestion with codeless SOC experience
Feb 23, 2026
UEBA in Microsoft Sentinel all in one picture. UEBA turns entities + telemetry into prioritized investigation context - so you spend less time stitching signals and more time acting with confidence.
Feb 09, 2026
New enhancements to Microsoft Sentinel UEBA (in preview) including near real-time behavioral insights, ability to enable from data connector experience and new data sources.
Feb 04, 2026
Microsoft Security Exposure Management (MSEM): capture the full story - features, integrations, benefits, who it is built for and more.
Jan 12, 2026
Microsoft Sentinel SOC optimization turns “we should tune the SIEM” into a living set of recommendations that refresh every 24 hours.
Jan 06, 2026
Modern breach is no longer a sequence of discrete alerts. It’s a path: identity → token → device → cloud control plane → data plane → sensitive information. And the only reliable way to interrupt that path early is to understand, continuously, how the estate is connected.
Dec 17, 2025
