Microsoft Sentinel

Microsoft Sentinel is a security information and event management (SIEM) solution that helps you uncover and quickly respond to sophisticated threats. Explore case studies, product updates, and best practices to help you strengthen your security and reduce response times.

Refine Results

Refine results

Sort By

Content Type

Topic

Products and services

Publish date

Start Date

End Date

Modernize your Security Operations Center with Microsoft Sentinel
Microsoft Sentinel is a cloud-native SIEM solution powered by AI and automation that delivers intelligent security analytics across your entire enterprise.
Learn more
April 22, 2024

10 min read

Analyzing Forest Blizzard’s custom post-compromise tool for exploiting CVE-2022-38028 to obtain credentials

Since 2019, Forest Blizzard has used a custom post-compromise tool to exploit a vulnerability in the Windows Print Spooler service that allows elevated permissions.
April 3, 2024

7 min read

Get end-to-end protection with Microsoft’s unified security operations platform, now in public preview

Microsoft’s unified security operations platform is now in public preview.
March 19, 2024

5 min read

Microsoft Sentinel delivered 234% ROI, according to new Forrester study

A new Forrester study of more than 450 organizations that implemented Microsoft Sentinel found significant benefits, including a 234% return on investment.
March 5, 2024

6 min read

Secure SaaS applications with Valence Security and Microsoft Security

The rapid adoption of Software as a Service (SaaS) has revolutionized collaboration and innovation across industries.
Retain Microsoft Security Experts
Microsoft Security Experts are now available to strengthen your team with managed security services. Learn how to defend against threats with security experts.
Get started
February 26, 2024

5 min read

Microsoft Copilot for Security: The great equalizer for government security

Microsoft Copilot for Security is the first generative AI security product that will help defend organizations at machine speed and scale.
February 21, 2024

5 min read

Get the most out of Microsoft Copilot for Security with good prompt engineering

Good prompt engineering can greatly improve generative AI outputs, which means more relevant and accurate results.
January 17, 2024

8 min read

New TTPs observed in Mint Sandstorm campaign targeting high-profile individuals at universities and research orgs

Since November 2023, Microsoft has observed a distinct subset of Mint Sandstorm (PHOSPHORUS) targeting high-profile individuals working on Middle Eastern affairs at universities and research organizations in Belgium, France, Gaza, Israel, the United Kingdom, and the United States.
January 16, 2024

5 min read

Unified security operations with Microsoft Sentinel and Microsoft Defender XDR

A unified security operations center (SOC) platform that combines all the benefits of multiple security tools offers several advantages.
Tailored AI insights from Microsoft Security Copilot
Empower your defenders to detect hidden patterns, harden defenses, and respond to incidents faster with generative AI.
Learn more
December 12, 2023

16 min read

Threat actors misuse OAuth applications to automate financially driven attacks

Microsoft Threat Intelligence presents cases of threat actors misusing OAuth applications as automation tools in financially motivated attacks.
December 7, 2023

28 min read

Star Blizzard increases sophistication and evasion in ongoing attacks

Microsoft Threat Intelligence continues to track and disrupt malicious activity attributed to a Russian state-sponsored actor we track as Star Blizzard, who has continuously improved their detection evasion capabilities while remaining focused on email credential theft against targets.
November 15, 2023

16 min read

Microsoft unveils expansion of AI for security and security for AI at Microsoft Ignite

The new era of AI is here. At Microsoft Ignite, we will be announcing new cybersecurity capabilities to help you thrive in this new age.
October 25, 2023

17 min read

Octo Tempest crosses boundaries to facilitate extortion, encryption, and destruction

Microsoft has been tracking activity related to the financially motivated threat actor Octo Tempest, whose evolving campaigns represent a growing concern for many organizations across multiple industries.