Microsoft Sentinel, from SIEM to SOAR

What's your strategy around SIEM? Microsoft Sentinel is a scalable, cloud-native, security information and event management (SIEM) and security orchestration, automation, and response (SOAR) solution. Microsoft Sentinel delivers intelligent security analytics and threat intelligence across the enterprise, providing a single solution for attack detection, threat visibility, proactive hunting, and threat response.

Rod Trent is a Senior Cloud Security Advocate for Microsoft and an Azure Sentinel global SME. He is a husband, dad, and first-time grandfather. He spends his spare time (if such a thing does truly exist) simultaneously watching Six Million Dollar Man TV show episodes and writing KQL queries.