Microsoft Azure Sentinel – FAQs


What is Microsoft Azure Sentinel?

Microsoft Azure Sentinel is a scalable, cloud-native, security information event management (SIEM) and security orchestration automated response (SOAR) solution.

Azure Sentinel delivers intelligent security analytics and threat intelligence across an enterprise, providing alert detection, threat visibility, proactive hunting, and threat response.

How does Azure Sentinel work?

The platform uses built-in AI to help analyse large volumes of data across an enterprise. It aggregates data from all sources, including users, applications, servers, and devices running on-premises or in any cloud.

By using scalable machine learning algorithms, the platform correlates millions of low-fidelity anomalies to present a few high-fidelity security incidents to the analyst.


Download PDF to read the Top 10 FAQs