Apparently in tribute to the infamous "Developers! Developers! Developers!" main chant, Microsoft seems to be repeatedly hitting the drum of cloud protections through a "Security! Security! Security!" kind of mindset lately.
To that end, Microsoft announced earlier this week that Azure Sentinel, the company's native SIEM in the cloud, is now generally available. Azure Sentinel represents Microsoft's intelligent security analysis platform designed to scale at the cloud level and aimed specifically at businesses and workloads of various sizes.
Recent research tells us that 70 percent of organizations continue to anchor their security and operations analysis with SIEM systems, and 82 percent are committed to moving large volumes of applications and workloads to the public cloud. Security analysis and operations technologies must support and help security analysts deal with the complexity, pace and scale of their responsibilities. To achieve this, 65 percent of organizations are taking advantage of new technologies for process automation / orchestration, while 51 percent are adopting security analysis tools with machine learning algorithms. This is exactly why we developed Azure Sentinel:
a SIEM reinvented in the cloud to address the modern challenges of security analytics.
When cultivating Azure Sentinel, Microsoft worked with partners to get feedback from more than 12,000 customers and two petabytes of data analysis to create a solution that allows customers to defend their infrastructure more efficiently.
In a new blog added to Microsoft Security, the company shares details about the success that some of its partners have already achieved with their own anecdotes. of the use of Azure Sentinel.
With these design partners, we have continued our innovation in Azure Sentinel. It begins with the ability to connect to any data source, either in Azure or local or even in other clouds. We continue to add new connectors to different sources and more detections based on machine learning. Azure Sentinel will also be integrated with the Azure Lighthouse service, which will allow service providers and business customers to have the ability to view instances of Azure Sentinel in different tenants in Azure.
For now, Azure Sentinel is in public preliminary version and in general availability for anyone in charge of the most traditional SIEMs of your company, while looking for a more cost-effective solution. For anyone still on the air about Azure Sentinel, Microsoft will organize a series of Azure security experts tomorrow, September 26, 2019, from 10 a.m. to 11 a.m. Pacific time, and the signs are here.
Further reading: Azure Sentinel, Microsoft, Security, SIEM