Jump-start your security defenses with a cloud-native, scalable, threat intelligence (SIEM) solution!
Overview of Azure Sentinel
Azure Sentinel delivers intelligent security analytics and threat intelligence across the enterprise, providing a single solution for alert detection, threat visibility, proactive hunting, and threat response. Sentinel brings compliance to organizations through connecting Office 365 logs, especially when researching events that happened in the past, like previous behavior of a former employee or trying to determine access points that hackers may have used for entry while the default is that the log is only kept for 90 days. This is very limiting when a security breach occurs, or organizations would like to keep logs for more than 90 days. Connecting Office 365 logs to Azure Sentinel enables you to view and analyze this data in your workbooks, query it to create custom alerts, and incorporate it to improve your investigation process, giving you more insight into your Office 365 security.