Microsoft Integrates SOC Capabilities with Defender for Enterprises

Microsoft integrates SOC capabilities with Defender for enterprises

Microsoft 365 E5 and E7 customers can now run security information and event management (SIEM) inside Microsoft Defender at no extra license cost. Microsoft is delivering the capability through the Integrated Security Operations Center (ISOC) in Microsoft Defender, which combines SIEM with Defender’s existing XDR, threat intelligence, automation and AI tools in a single portal. “Security cannot operate at AI speed when protection and operations …

Microsoft Rebuilds the SOC with AI Agents, SIEM Integration and Machine-Speed Defense

Cyberattacks can move faster than a security team can investigate them. Attackers increasingly use AI agents to automate steps that once needed several people, while defenders still work across separate monitoring and protection tools. Microsoft says this mismatch is driving a rethink of how security operations centers, or SOCs, should work. This is not a […]

Microsoft unveils Integrated Security Operations Center in Defender for AI agents

Microsoft Corp. today unveiled Integrated Security Operations Center in Microsoft Defender as it rebuilds its security operations products around artificial intelligence agents. The service moves security information and event management features from Microsoft Sentinel directly into Defender. ISOC is aimed at a problem Microsoft says is getting worse as attackers put agents to work. “What […]

Reimagining the SOC for the agentic era in Microsoft Defender

We are announcing ISOC in Microsoft Defender: a foundation built for agentic security that brings leading solutions for SIEM and threat protection… Read more →

Microsoft Defender Gets Integrated Security Operations Center

Key Takeaways: Microsoft is introducing an Integrated Security Operations Center (ISOC) within Microsoft Defender. The platform unifies telemetry, investigations, threat intelligence, automation, and response controls. While consolidation may reduce operational complexity, organizations must decide how much authority to give AI-powered security workflows. Security operations teams are facing growing pressure as attackers use AI to automate cybe…