sentinel
Microsoft Sentinel
Azure Sentinel
in plain english
Cloud-native SIEM + SOAR — collect logs from anywhere (Microsoft, AWS, GCP, on-prem, third-party SaaS), hunt threats with KQL, and automate response with playbooks.
official microsoft definition
A scalable, cloud-native security information and event management (SIEM) solution with built-in security orchestration, automation, and response (SOAR) capabilities, powered by AI.
plans & eligibility
- Pay-as-you-go (per GB ingested) or commitment tiers
- Some Microsoft data sources free (sign-in logs, etc.)
related on aguidetocloud
/microsoft-sentinel
verified