What is Microsoft Sentinel?
- Enterprise SIEM (security information and event management) and SOAR (security orchestration, automation, and response) platform
- Cloud native intelligent security analytics
- Delivers AI powered threat intelligence across the enterprise
- Platform for attack detection, proactive hunting and threat response
Why to Use Microsoft Sentinel?
- Gives birds-eye view across the enterprise from security perspective
- Makes threat detection and response smarter and faster with artificial intelligence
- Eliminates security infrastructure setup and maintenance for SIEM and SOAR
- Simplifies security operations and speed up threat response with integrated automation and orchestration of common tasks and workflows
- Built-in entity behavioral analytics: detects unknown threats and anomalous behavior of compromised users and insider threats
- Built-in connectors for Azure services, Microsoft 365 products and other clouds
- Cost effective, cloud-native SIEM solution
- Built-in orchestration and automation of common tasks