Reimagining the SOC for the agentic era in Microsoft Defender
Microsoft previews an integrated SOC in Defender that unifies SIEM and protection for agentic defense.
Microsoft announced a preview of the Integrated Security Operations Center (ISOC) in Microsoft Defender, combining SIEM and threat protection so people and agents share one operating foundation. The design pairs signals, context, and controls so agents can investigate and act while practitioners set priorities. Microsoft describes an integrated protection loop, including Defender attack disruption that uses telemetry to interrupt threats in progress. A whitepaper, Agentic SOC, accompanies the preview.
- Microsoft previews ISOC in Defender, merging SIEM and native threat protection.
- Humans and agents share signals, context, and controls as one system.
- An integrated protection loop uses telemetry to disrupt attacks still unfolding.
- The capability is in preview, with a whitepaper on the agentic SOC model.
- Vendors
- Microsoft
- Products
- Microsoft Defender
- Organizations
- Microsoft
From the original article
4 min read at microsoft.com
We are announcing ISOC in Microsoft Defender: a foundation built for agentic security that brings leading solutions for SIEM and threat protection together. The post Reimagining the SOC for the agentic era in Microsoft Defender appeared first on Microsoft Security Blog.
By Rob Lefferts · microsoft.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.