Description

Azure Sentinel (Microsoft Sentinel) is a cloud-based SIEM (security information and event management) solution designed for IT security professionals. It enables users to manage security operations with intelligent security analytics; collect data across users, devices, applications, and infrastructure (on-premises and multiple clouds); detect uncovered threats and minimize false positives; and respond to incidents with built-in orchestration. Features include built-in entity behavioral analytics, task automation, dashboard support, integrated automation and orchestration, workflow management, and Office 365 support.