Microsoft Integrates Data Lake With Sentinel SIEM

Microsoft announced a public-preview Microsoft Sentinel data lake that consolidates security telemetry into a scalable, low-cost repository for extended retention and forensic analysis, and said it will fold Microsoft Defender Threat Intelligence into Defender XDR (and Sentinel) at no extra charge by October; the move aims to reduce storage costs, support AI and KQL-based queries, and provide integrated threat intelligence and detection capabilities comparable to other SIEM/data-lake offerings.