Vectra and Microsoft join forces to step up detection and response
SOCs combine NDR visibility with EDR insight, couples them with analytics from sources in the SIEM to detect and stop attacks evading perimeter defenses.
Microsoft Sentinel
Microsoft Sentinel is a security information and event management (SIEM) and unified data lake platform that helps you uncover and quickly respond to threats. Explore case studies, product updates, and best practices to help you secure your multicloud environment.
Refine results
Topic
Products and services
Publish date
Simplify endpoint management with Microsoft Intune
Microsoft Intune is a cloud-based unified endpoint management platform that empowers IT to manage, assess, and protect apps and devices.
-
-
Accelerate your adoption of SIEM using Azure Sentinel and a new offer from Microsoft
Security operations teams need the cost savings and efficiency benefits of the cloud now more than ever. -
Microsoft Security: How to cultivate a diverse cybersecurity team
A diverse cybersecurity team will help you generate the innovative ideas you need to confront today and tomorrow’s cyber threats. -
Empower your analysts to reduce burnout in your security operations center
Strategic use of automation and metrics can help you create a continuous learning culture that keeps your team engaged in the work. Secure and verify every identity with Microsoft Entra
Microsoft Entra expands beyond identity and access management with new product categories such as cloud infrastructure entitlement management (CIEM) and decentralized identity.
-
Making Azure Sentinel work for you
A new white paper outlines best practice recommendations for configuring data sources for incident response and proactively hunting for threats using Azure Sentinel. -
Lessons learned from the Microsoft SOC—Part 3d: Zen and the art of threat hunting
This blog provides lessons learned on how Microsoft hunts for threats in our IT environment and how you can apply these lessons to building or improving your threat hunting program. -
Feeling fatigued? Cloud-based SIEM relieves security team burnout
Most CISOs and CSOs are worried that a growing volume of alerts is causing burnout among their teams, according to new research from IDG. -
Modernizing the security operations center to better secure a remote workforce
The modern SOC will use machine learning to help humans protect organizations in a multi-cloud, IoT world. Prevent threats with Microsoft Defender
The Microsoft Defender family offers comprehensive threat prevention, detection, and response capabilities for everyone—from individuals looking to protect their family to the world’s largest enterprises.
-
Open-sourcing new COVID-19 threat intelligence
While the world faces the common threat of COVID-19, defenders are working overtime to protect users all over the globe from cyber-criminals using COVID-19 as a lure to mount attacks. -
Threat hunting: Part 1—Why your SOC needs a proactive hunting team
A threat hunting team can help you defend against stealth attackers. -
Free import of AWS CloudTrail logs through June 2020 and other exciting Azure Sentinel updates
Learn how Azure Sentinel helps SecOps to improve security across hybrid environments with free import of AWS CloudTrail logs through June 2020 and other product updates. -
Azure Sentinel uncovers the real threats hidden in billions of low fidelity signals
Azure Sentinel Fusion technology uses powerful machine learning methods to enable your SecOps team to focus on the threats that matter.
