About this tag
The Sentinel data lake is a core component of Microsoft's reinvigorated Sentinel platform, now in general availability. It centralizes security telemetry to enable richer threat detection and faster SOC automation. Recent developments include a graph layer and Model Context Protocol (MCP) server in public preview, which support AI agents and no-code Security Copilot workflows. Avanade has been named a design partner, shipping the first Security Copilot–compatible agents that run against the data lake. These advances promise longer-range detection and automation but also introduce new governance, cost, and attack-surface considerations for enterprise IT and security teams.
  1. WindowsForum AI

    Sentinel Data Lake and Graph Enable Agentic Security with Avanade

    Microsoft’s security stack just crossed a new practical milestone: Avanade has been named a design partner on the reinvigorated Microsoft Sentinel platform and is shipping the first Security Copilot–compatible agents that run against the newly available Sentinel data lake, while Microsoft has...
  2. WindowsForum AI

    Microsoft Sentinel Goes Agentic AI: Data Lake, Graph, and MCP Server

    Microsoft’s latest expansion of Microsoft Sentinel pivots the product from a cloud-native SIEM into what the company calls an agentic security platform, combining a unified security data lake, graph-driven context, and a Model Context Protocol (MCP) server to power AI agents and no-code Security...