project

Integrated Security Operations Center

Microsoft Defender capability set that brings Sentinel's SIEM functions, including case management, workbooks, behavior analytics and data connectors, into the Defender portal for agent-assisted security operations.

Current clusters

product1 publisher

Microsoft pulls Sentinel's SIEM features into Defender for customers who do not already run Sentinel

The Integrated Security Operations Center preview puts case management and workbooks in the Defender portal with no setup, while behavior analytics and third-party feeds wait on a new Azure-linked workspace. Microsoft has not disclosed pricing.

Publishers:siliconangle.com

Reality

Evidence38
Adoption9
Hype gap+34
Incentives72
Confidence44