Microsoft Sentinel

Security Information & Event Management (SIEM) Software by Microsoft Security

See who's skilled in this

About

Microsoft Sentinel is evolving its industry-leading SIEM to also be an AI-ready platform - empowering defenders with unified security data, intelligent reasoning tools to help agents interpret data, and enriched graph-powered context for deeper visibility. Together, these capabilities make Microsoft Sentinel the scalable backbone for modern defense.

This product is intended for

Security Operations Specialist
Security Operations Manager
Director Security Operations
Security Operations Center Architect
Security Operations Center Analyst
Security Engineer
Cyber Security Engineer
Cyber Security Analyst
Security Analyst
Senior Security Engineer

Media

Microsoft Sentinel: The AI-ready security platform

Microsoft Sentinel is evolving to be both an industry-leading SIEM and an AI-ready security platform. With the addition of Sentinel data lake, organizations can unify and scale their security data for deeper analytics and optimized cost. The new Sentinel graph delivers unified, graph-powered visibility and context, while the built-in MCP server enables seamless AI integration—empowering advanced threat detection, automated investigations, and agentic security workflows. Together, these capabilit
Introducing Microsoft Sentinel data lake

You can’t protect what you can’t see. Security operations teams have long been faced with the challenge of managing massive, fast-growing datasets, and the cost of scaling traditional data management tools to handle these data volumes has become unsustainable. We’re evolving our industry-leading Security Incidents and Event Management solution (SIEM), Microsoft Sentinel, to include a modern, cost-effective data lake. By unifying all your security data, Microsoft Sentinel data lake, in public pre
Cyber threats move fast, but Microsoft Sentinel helps customers move faster

Keep your company safe with a next generation, cloud native SIEM powered by AI, automation, and security expertise. Sentinel can map attacks across the entire kill chain, consolidate your insights and prioritize what matters for a more efficient and effective SOC.
Microsoft Sentinel graph demo | Accelerate incident response with unified security insights

Get started with Microsoft Sentinel – the AI-ready security platform built for modern security operations. In this demo, Krishna Kumar Parthasarathy, Corporate Vice President of the Sentinel Platform, introduces how the unified graph enriches Microsoft Defender and Sentinel to streamline investigations and accelerate response.
MCP Server demo | Accelerate threat hunting with Microsoft Sentinel

Get started with Microsoft Sentinel, the AI-ready security platform that transforms how defenders interact with security data. In this demo, Krishna Kumar Parthasarathy, Corporate Vice President of the Sentinel Platform, showcases how Model Context Protocol (MCP) tools empower defenders with natural language access to their full security data—speeding up threat hunting and investigation workflows.