Product
Microsoft's cloud-native SIEM and security operations platform that collects security data into a Log Analytics workspace, detects threats with analytics rules and supports hunting with KQL.
| Type | Product |
|---|---|
| Documentation | learn.microsoft.com/en-us/azure/sentinel/overview |
2026-02-26 · Video on YouTube
This episode argues that although Amazon Web Services (AWS) dominates infrastructure, the real “cloud war” has shifted to the enterprise control plane — the system that enforces identity, policy, and governance across hybrid environments. Most enterprises are…
2026-03-07 · Video on YouTube
Compliance processes are often treated as manual administrative work—slow, repetitive, and prone to human error. But modern organizations can transform compliance into an automated, traceable workflow system using Microsoft’s automation platform. In this…
2025-12-19 · Video on YouTube
This episode plays out like a cybercrime thriller, exposing how today’s most dangerous breaches don’t smash doors—they’re invited inside. The investigation opens with a single click on January 12th. A polished phishing email doesn’t steal a password; it…
2026-07-15 · Video on YouTube
Azure Monitor is Microsoft's comprehensive monitoring and observability platform that helps organizations understand the health, performance, and availability of their cloud and on-premises environments. Instead of manually checking servers, applications, and…
2026-02-08 · Video on YouTube
How Altera Unlocks the Autonomous Microsoft Enterprise” explores why most “AI agent” initiatives in Microsoft environments stall or fail — and what it actually takes to build true autonomy at enterprise scale. The host argues that the difference between…
2026-08-08 · Video on YouTube
Attackers start with what your company exposes publicly: old test sites, forgotten subdomains and services nobody remembers. This episode is for security teams and IT admins who need to see their organization from the outside. You learn how Microsoft Defender…
2026-07-16 · Video on YouTube
Microsoft Sentinel is Microsoft's cloud-native Security Information and Event Management (SIEM) and Security Orchestration, Automation, and Response (SOAR) platform, designed to help organizations detect, investigate, and respond to cyber threats across their…
2025-11-03 · Video on YouTube
This episode breaks down the confusion many organizations face when trying to understand the difference between Microsoft Defender and Microsoft Sentinel, two tools that sound similar but play very different roles in the Azure security landscape. We walk…
2025-12-02 · Video on YouTube
MFA is not your shield – it’s already broken. In this episode, we walk the bridge of a real M365 tenant breach, step-by-step, from the attacker’s cockpit to your shattered inbox. You’ll hear how one phishing click plus an AitM proxy and a “benign” OAuth app…
2026-07-22 · Video on YouTube
Traditional antivirus can no longer keep up with ransomware, phishing and attackers who move quietly between devices. This plain-English episode is for IT admins and business owners who want to understand Microsoft Defender for Endpoint, from EDR and attack…
2025-12-29 · Video on YouTube
Is Power Platform actually dangerous for the enterprise—or is that fear hiding a more uncomfortable truth? In this episode, we dismantle the question executives keep asking: “Is Power Platform secure enough?” The answer is sharper than most teams expect.…
2025-08-16 · Video on YouTube
Copilot can overreach if Graph permissions are too broad. One mis-scoped app permission lets AI surface files, spreadsheets, and confidential client data users couldn’t normally access. Fix it by treating Copilot like any high-privilege app: lock Graph scopes…
The show notes mention Microsoft Defender and Sentinel for threat detection and incident response. They also recommend continuous monitoring, documenting investigation steps and adopting a Zero Trust framework. · From the episode: Detect Impossible Travel and Token Replay in…
Microsoft Sentinel is a cloud-native security information and event management (SIEM) system and security orchestration, automation and response (SOAR) platform. · From the episode: Microsoft Sentinel - Simply Explained
Information for investigating a suspicious sign-in is scattered across tools such as Entra, Exchange, SharePoint, Defender and Teams. Sentinel gathers it in one place. · From the episode: Microsoft Sentinel - Simply Explained
The show notes say the pricing model is based on data ingestion, so understanding it helps manage costs. · From the episode: Microsoft Sentinel - Simply Explained
Connectors collect data from various security tools and cloud platforms. The show notes mention over 350 of them. · From the episode: Microsoft Sentinel - Simply Explained
Short info above, community knowledge below: add practical tips, examples or corrections. New contributions are reviewed first; trusted members publish directly.
Nobody has listed this topic yet. Add it to your profile.
Maintained by Mirko Peters (Microsoft MVP) · Last updated:
EN
Deutsch
Español
Français
Italiano
Português
Nederlands
Polski
Bahasa Indonesia
Русский
Українська
العربية
עברית
日本語
한국어