Implement Microsoft Sentinel
In addition to assessing and addressing problems with their hybrid environment’s security configuration, Contoso must also monitor for new problems and threats, and respond appropriately. Microsoft Sentinel is a SIEM and SOAR solution for cloud, multicloud, and hybrid environments.
What is Microsoft Sentinel?
Microsoft Sentinel meets the needs of both SIEM and SOAR solutions through:
- Collecting data across cloud-based and on-premises users, devices, apps, and infrastructure.
- Using AI to identify suspicious activity.
- Detecting threats with fewer false positives.
- Responding to incidents quickly and automatically.
Microsoft Sentinel is available in both the Azure portal and the Microsoft Defender portal. The Defender portal provides a unified security operations experience across Microsoft Sentinel, Microsoft Defender XDR, and other Microsoft security services.