Skip to content

362 - Sentinel isn’t just a SIEM anymore

September 30, 2026 · 47 min

Show notes

We've talked about Microsoft Sentinel a few years ago, and realized it's time to brush up our understanding of the new and interesting capabilities it has to offer. In this episode, we talked about where Sentinel is today, the retirement of the Azure Portal side, new AI-related capabilities, as well as the recently announced ISOC.

(00:00) - Intro and catching up.
(04:34) - Show content starts.

Show links
-
What is Microsoft Sentinel data lake? (Microsoft Learn)

- Microsoft Sentinel pricing

- Plan costs and understand pricing and billing (Microsoft Learn)

- What’s new in Microsoft Sentinel (Microsoft Learn)

- What’s new in Microsoft Sentinel: August 2026

- What’s new in Microsoft Sentinel: June 2026

- What’s new in Microsoft Sentinel: RSAC 2026

- UPDATE: New timeline for transitioning Sentinel experience to Defender portal

- Onboard to Microsoft Sentinel data lake and graph (Microsoft Learn)
- ISOC

- Give us feedback!

All episodes of Ctrl+Alt+Azure

Settings

Display

Language

Decides which stations you see first on the home page.

History

Recently played stations and episodes and your latest searches are only stored in this browser.

Notifications

A short notice when a podcast you follow has a new episode. Turn off single podcasts with the bell on their page.

Account

Save favorites – in the app and on the website.

Keyboard shortcuts

/
Open search
Space
Play or pause
← →
In the player: back 15 s, forward 30 s (episodes) · in a row: next tile
↑ ↓
In a row: target within the tile
Home / End
In a row: first or last tile
Esc
Close window or menu
?
This overview
Now playing

Go to station page

Play next

    Add episodes with “Play next” – they play after the current episode.