Microsoft Rebuilds the SOC with AI Agents, SIEM Integration and Machine-Speed Defense
Microsoft previewed an integrated SOC pairing Defender, SIEM, and AI agents for faster response.
On September 23, Microsoft described ISOC, a preview that combines SIEM with threat protection in Microsoft Defender so analysts and AI agents share one investigation context. The company links the design to its July 2026 cyber stack and Project Perception, which focuses on models and specialized agents. Agents could investigate continuously while people set priorities, but Microsoft gave no measured response-time or breach-reduction figures, third-party connector list, or general-availability date. The announcement is not tied to a specific malware campaign or compromise.
- Microsoft previewed ISOC, combining SIEM with Defender threat protection.
- AI agents would investigate continuously while analysts set priorities.
- The design links to Project Perception and a July 2026 cyber stack.
- No measured outcomes, connectors, or general-availability date were published.
- The announcement is not tied to a specific breach or malware campaign.
- Vendors
- Microsoft
- Products
- Microsoft DefenderISOC
- Organizations
- Microsoft
From the original article
3 min read at cybersecuritynews.com
Cyberattacks can move faster than a security team can investigate them. Attackers increasingly use AI agents to automate steps that once needed several people, while defenders still work across separate monitoring and protection tools. Microsoft says this mismatch is driving a rethink of how security operations centers, or SOCs, should work.
By Tushar Subhra Dutta · cybersecuritynews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.