© 2023 Created by Sameh Younis
Sentinel
93 articlesMicrosoft Sentinel, a scalable, cloud-native SIEM and SOAR solution providing intelligent security analytics for your entire enterprise.
Announcement
SecOps
SIEM
NEW: Microsoft Sentinel CCF Push connectors
NEW: Microsoft Sentinel CCF Push connectors (Preview) - real-time security events ingestion with codeless SOC experience
Multi-Cloud
SecOps
SIEM
UEBA in Microsoft Sentinel – the complete picture
UEBA in Microsoft Sentinel all in one picture. UEBA turns entities + telemetry into prioritized investigation context - so you spend less time stitching…
SecOps
SIEM
Introducing Microsoft Sentinel UEBA enhancements
New enhancements to Microsoft Sentinel UEBA (in preview) including near real-time behavioral insights, ability to enable from data connector experience and new data sources.
AI & Copilot
SecOps
XDR
Dynamic Threat Detection Agent: autonomously uncover threats hidden in weak signals
AI is no longer “nice to have” in security operations. It’s quickly becoming the only practical way to keep up with attacker speed, alert…
AI & Copilot
SecOps
Microsoft-aligned SOCaaS – Turning Microsoft Security into a profitable MSSP business
💡 Building a SOC-as-a-Service (SOCaaS) is not just about tools. It’s about designing a repeatable operating model that delivers consistent outcomes across customers, industries, and environments. Many SOCaaS discussions start too deep, too fast. Recently I’ve been asked for a simpler way to frame the Microsoft-aligned approach upfront. This infographic is a bird’s-eye view to…
SecOps
SIEM
XDR
Microsoft Security Exposure Management (xSPM), end-to-end view
Microsoft Security Exposure Management (MSEM): capture the full story - features, integrations, benefits, who it is built for and more.
Featured
AI & Copilot
Compliance
Multi-Cloud
SecOps
Top Picks
A Visual Guide to Microsoft Security – Jan 2026 Edition (4th Edition)
4th edition infographic updates Microsoft Security’s portfolio with new integrations, previews, expanded management category, AI posture features, data governance enhancements, and SIEM/XDR integration improvements.
SecOps
SIEM
Microsoft Sentinel SOC Optimization – now a daily discipline in the Defender portal
Microsoft Sentinel SOC optimization turns “we should tune the SIEM” into a living set of recommendations that refresh every 24 hours.
Into The Mind
SecOps
SIEM
Into The Mind of Microsoft Security, Part 4 – The Security Graph
Modern breach is no longer a sequence of discrete alerts. It’s a path: identity → token → device → cloud control plane → data…
AI & Copilot
Announcement
SecOps
Ignite 2025: Microsoft Security Copilot inclusion in Microsoft 365 E5 – decoded!
Microsoft Security Copilot is now included in Microsoft 365 E5, what this means for customers? A simple scenario matrix is here to answer this…
