Unified security operations with Microsoft Sentinel and Microsoft Defender XDR

Microsoft announces a unified SOC platform that integrates Microsoft Sentinel (SIEM/SOAR), Defender XDR, and Security Copilot to centralize detection, investigation, and response across environments. The post emphasizes unified hunting and incidents, out-of-the-box XDR protections, flexible data retention, expanded automatic attack disruption (including SAP), SOC optimization recommendations, and a SIEM migration tool, with pricing models unchanged. It positions generative AI via Security Copilot to accelerate investigations, KQL hunting, summarization, and remediation guidance, and encourages adoption for a consolidated SecOps approach.