Discover how Microsoft Sentinel empowers you to position a modern, cloud-native SIEM and SOAR solution that addresses todays toughest security challenges. This session will equip you to Articulate Sentinel value in simplifying threat detection, reducing alert fatigue, and accelerating response times for customers. Learn how Sentinel integration with Microsoft Defender, its architecture, and key capabilities that drive business outcomes such as intelligent security analytics, proactive threat hunting, and automation with Security Copilot. How to deploy and connect this SIEM and SOAR solution to different data sources. Showcase how Sentinel helps customers modernize their SOC with AI enabled Security Copilot.
MS Course ID: 00954
Last Updated: Feb 5, 2026
Platform Architecture
SIEM Key capabilities
Detect, Investigate and Respond
Unified Security Operations with Defender Portal
Workspace Architecture Planning
Sample workspace designs
Prioritize Data Connectors
Plan Data retention and data tiering models with Analytics and Data Lake
Plan costs and understand billing
Enable initial content
Connect Microsoft Sentinel to the Microsoft Defender portal
Microsoft Sentinel Graph (Preview) Overview
Onboarding Sentinel to Data Lake and Graph
Customer Case Study
Present your solution
Preferred Response