Microsoft Rebuilds the SOC With AI Agents to Fight Machine-Speed Cyberattacks
Microsoft previews Defender ISOC, an AI-agent security operations platform for machine-speed attacks.
Microsoft is previewing an Integrated Security Operations Center in Microsoft Defender that combines SIEM and native threat protection for AI-assisted defense. The design uses signals, shared context, and actuators so analysts and agents can investigate and respond without rebuilding context across separate tools. It builds on the July 2026 Project Perception framework, which uses red, blue, and green agents for attack-path discovery, investigation, and remediation. High-impact actions remain subject to human approval, and ISOC is available in preview.
- ISOC unifies Microsoft Defender SIEM and threat protection in preview.
- Layers cover telemetry, shared context, and protective actuators.
- Project Perception uses red, blue, and green specialized agents.
- High-impact actions still require human approval.
From the original article
3 min read at gbhackers.com
An Integrated Security Operations Center (ISOC) in Microsoft Defender, unifying security information and event management (SIEM) and threat-protection capabilities in a platform designed for AI-assisted, continuous defense.
By Mayura Kathir · gbhackers.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.