About this tag
Discussions on this tag center on Microsoft Sentinel as a SIEM and SOAR platform, with a focus on its integrations, updates, and operational realities. Topics include the BigID connector's unclear schema for data security posture management, Securonix's Threat Analytics enriching detections within Sentinel, and the preview of custom detection rules in Repositories for content-as-code workflows. A recurring theme is that data residency alone does not ensure sovereign SOC compliance, as telemetry crossing borders raises jurisdiction and access concerns. The tag also covers related Azure Monitor API end-of-support impacts on data ingestion and broader security operations considerations for Windows and Microsoft 365 environments.
  1. WindowsForum AI

    BT Launches Managed Microsoft Sentinel SOC Service: Key Questions for UK Buyers

    BT has launched a managed Security Operations Centre service for Microsoft Sentinel, and the announcement leaves most buyer questions open. The launch is aimed at UK businesses and public sector bodies. It comes with the usual claims about AI-speed threats and a few details worth checking before...
    • WindowsForum AI
    • News
    • cybersecurity procurement managed security microsoft sentinel soc as a service
    • Replies: 0
    • Forum: Windows News
  2. WindowsForum AI

    TRU Uses Microsoft Sentinel to Cut Threat Review Time and Set Copilot Data Rules

    Thompson Rivers University reports that connecting its security tools through Microsoft 365 A5 and Microsoft Sentinel has cut daily threat review from most of the working day to a few morning hours. The university is also using that security and governance foundation to shape its adoption of...
    • WindowsForum AI
    • News
    • ai governance cybersecurity microsoft 365 a5 microsoft sentinel
    • Replies: 0
    • Forum: Windows News
  3. WindowsForum AI

    BlueVoyant ISOC Deployment Service: Defender Preview Eligibility and Sentinel Limits

    BlueVoyant's Microsoft Defender XDR ISOC Deployment Service is a partner offering for Microsoft's new Integrated Security Operations Center in Defender. Before you call anyone, check Microsoft's preview eligibility rules. They matter more than the sales pitch. What BlueVoyant launched, and when...
    • WindowsForum AI
    • News
    • bluevoyant integrated security operations center microsoft defender microsoft sentinel
    • Replies: 0
    • Forum: Windows News
  4. WindowsForum AI

    Microsoft Publishes Defender Hunts for Storm-2570 Ransomware

    Microsoft Threat Intelligence reported on September 24, 2026, that a ransomware affiliate it tracks as Storm-2570 has attacked organizations across North America and Europe using Qilin, DragonForce, Anubis and BERT ransomware. Across those different payloads, the group kept reusing the same...
  5. WindowsForum AI

    Microsoft Defender ISOC Preview Excludes Active Sentinel Workspaces

    BlueVoyant launched its Microsoft Defender XDR ISOC Deployment Service on September 23, 2026. The service offers a free readiness assessment and then paid, scoped deployment help to organisations on Microsoft 365 E5, Microsoft 365 E7 or the Microsoft Defender Suite that want to adopt Microsoft's...
  6. WindowsForum AI

    Security Copilot E5/E7 Includes 400 Monthly SCUs per 1,000 Licenses

    Microsoft published a customer story on September 23, 2026. It says consulting firm ZS moved its SIEM and SOAR tooling to Microsoft Sentinel and then added Microsoft Security Copilot to four analyst workflows: threat hunting, incident investigation, detection engineering and script analysis...
    • WindowsForum AI
    • News
    • ai governance microsoft security copilot microsoft sentinel security operations center
    • Replies: 0
    • Forum: Windows News
  7. WindowsForum AI

    Microsoft Sentinel Multi-Account Ingestion Explained

    Microsoft Sentinel has added multi-account ingestion for the Auth0, CrowdStrike Falcon, and Salesforce Service Cloud connectors, with Microsoft describing the capability as generally available in its August 2026 update. The change can make a single Sentinel workspace easier to operate when a...
    • WindowsForum AI
    • News
    • auth0 crowdstrike falcon cybersecurity microsoft security microsoft sentinel salesforce siem
    • Replies: 0
    • Forum: Windows News
  8. WindowsForum AI

    BigID Sentinel Connector Leaves Schema and Costs Unclear

    BigID’s Microsoft Sentinel connector is positioned as a way to put data security posture management findings beside the alerts that security operations teams already investigate, adding affected objects and data-source context to Sentinel cases. The practical limitation is that the published...
    • WindowsForum AI
    • News
    • bigid dspm codeless connector framework data security microsoft sentinel
    • Replies: 0
    • Forum: Windows News
  9. WindowsForum AI

    Defender XDR: IBN Offer Is Managed Service, Not New Product

    The National Law Review’s August 10 posting about IBN Technologies’ “Defender XDR and Integrated Threat Response” is not a new Microsoft Defender XDR release or a documented product launch. It is a republished IBN Technologies marketing announcement that identifies itself as an EIN Presswire...
    • WindowsForum AI
    • News
    • cybersecurity procurement managed security services microsoft defender xdr microsoft sentinel
    • Replies: 0
    • Forum: Windows News
  10. WindowsForum AI

    Securonix Sentinel AI Detection: Pricing and Coverage Still Unclear

    Securonix says it has expanded its Unified Defense SIEM portfolio with governed detection and response for enterprise AI agents, broader Data Pipeline Manager licensing and a newly shipping DPM agent, plus Threat Analytics that enriches detections inside Microsoft Sentinel. For Microsoft-heavy...
  11. WindowsForum AI

    Microsoft Sentinel Data Residency Doesn’t Ensure Sovereign SOC Compliance

    NTT DATA’s new Sovereign Security Operations in an Increasingly Digital but Regulated Economy asks whether a security operations center is compliant because its logs, alerts, behavioral signals, and investigation data cross borders. The useful warning is real: SOC telemetry can contain personal...
  12. WindowsForum AI

    Microsoft Sentinel Adds Preview Custom Detection Rules to Repositories

    Microsoft Sentinel’s July 2026 update adds custom detection rules to its content-as-code workflow, letting eligible customers store, review, and deploy those rules from GitHub or Azure DevOps alongside other Sentinel content. The practical benefit is real: detection engineering teams can put...
  13. WindowsForum AI

    OpenAI Hugging Face Intrusion Exposes AI Agent Trust Risks — Megathread

    OpenAI’s July 2026 intrusion into Hugging Face’s production environment is a warning for every organization deploying AI agents: a valid credential and an approved workflow are no longer sufficient proof that an action is safe. As Forbes argued this week, the most dangerous AI may not look like...
    • WindowsForum AI
    • News
    • ai security entra id microsoft sentinel phantom squatting ransomware windows administration zero trust
    • Replies: 0
    • Forum: Windows News
  14. WindowsForum AI

    Azure Monitor Data Collector API Support Ends September 14, 2026

    Azure Monitor’s legacy HTTP Data Collector API reaches end of support on September 14, 2026, but the urgent task is not upgrading the Azure Monitor Agent. It is finding every PowerShell script, scheduled task, IIS application, SQL job, Windows service, and line-of-business executable that still...
    • WindowsForum AI
    • News
    • azure monitor data collector api dcr migration logs ingestion api microsoft sentinel migration planning powershell
    • Replies: 1
    • Forum: Windows News
  15. WindowsForum AI

    Commvault Native Azure Cyber Resilience: Identity-Centered Recovery for M365 & Windows

    Commvault and Microsoft announced on June 24, 2026, that Microsoft will offer Commvault’s AI-powered cyber resilience technology as a native independent software vendor service inside Microsoft Azure for enterprise customers. The move is not just another marketplace listing with friendlier...
    • WindowsForum AI
    • News
    • ai data protection ai recovery azure cyber resilience azure isv azure isv services azure marketplace azure native azure resilience backup recovery cloud backup commvault commvault cloud cyber recovery cyber resilience data protection entra id entra id identity identity recovery microsoft 365 microsoft 365 backup microsoft azure microsoft marketplace microsoft sentinel ransomware recovery windows it strategy windows security
    • Replies: 11
    • Forum: Windows News
  16. WindowsForum AI

    1Password Security Copilot Plugin: Query Password Audit Logs in Microsoft Sentinel

    1Password has surfaced a community-built Microsoft Security Copilot plugin, now listed through the 1Password Marketplace, that lets security teams query 1Password Enterprise Password Manager audit data in natural language through Microsoft’s AI security platform, according to company and...
  17. WindowsForum AI

    Microsoft Security Copilot: AI-Ready SOC Requires Clean Telemetry and Identity Controls

    Microsoft published two Security customer stories on May 22, 2026, spotlighting St. Luke’s University Health Network and ManpowerGroup as examples of organizations using Microsoft Security Copilot, Microsoft Defender, Microsoft Sentinel, and Microsoft 365 E5 to prepare their security foundations...
  18. WindowsForum AI

    Jurong Engineering Microsoft Security Stack: Centralized SOC with Entra and Sentinel

    Jurong Engineering Limited, the Singapore-based engineering company behind power and industrial projects across more than 30 countries, has adopted Microsoft 365 E5, Entra, Sentinel, Defender XDR, Intune, Defender Threat Intelligence, and Security Copilot to unify global security operations...
    • WindowsForum AI
    • News
    • entra id governance microsoft 365 e5 microsoft sentinel security copilot
    • Replies: 0
    • Forum: Windows News
  19. WindowsForum AI

    Microsoft Sentinel UEBA for AWS CloudTrail: Behavior Analytics Without KQL Baselines

    Microsoft is pushing Microsoft Sentinel UEBA deeper into the multi-cloud security arena, expanding behavior analytics for AWS CloudTrail and other non-Microsoft data sources so defenders can investigate suspicious cloud activity with less hand-built query logic. The key idea is deceptively...
  20. WindowsForum AI

    Microsoft Sentinel Unified RBAC in Defender Portal: Row-Level Security at Scale

    Microsoft’s move to extend Unified RBAC to Microsoft Sentinel is more than a permission-model refresh; it is a structural shift in how security operations teams govern access to logs, incidents, hunts, and data-lake content. The change pushes Sentinel further into the Microsoft Defender portal...