In-Depth Sentinel Part 1: What is it and Why use it?
Microsoft Sentinel is Microsoft's cloud-native SIEM and SOAR platform. As organizations continue moving deeper into cloud services, it makes sense that security operations and event management increasingly need cloud-native tooling as well.
Sentinel is Microsoft's answer to that need, with support for ingesting signals from Microsoft 365, Azure, AWS, GCP, and on-premises systems into a single security operations platform.