{"id":31258,"date":"2025-03-17T17:12:36","date_gmt":"2025-03-17T10:12:36","guid":{"rendered":"https:\/\/www.fusionsol.com\/?p=31258"},"modified":"2025-11-18T13:34:02","modified_gmt":"2025-11-18T06:34:02","slug":"sentinel-%e0%b8%84%e0%b8%b7%e0%b8%ad%e0%b8%ad%e0%b8%b0%e0%b9%84%e0%b8%a3","status":"publish","type":"post","link":"https:\/\/www.fusionsol.com\/en\/blog\/sentinel-%e0%b8%84%e0%b8%b7%e0%b8%ad%e0%b8%ad%e0%b8%b0%e0%b9%84%e0%b8%a3\/","title":{"rendered":"Sentinel \u0e04\u0e37\u0e2d\u0e2d\u0e30\u0e44\u0e23? \u0e04\u0e39\u0e48\u0e21\u0e37\u0e2d\u0e09\u0e1a\u0e31\u0e1a\u0e2a\u0e21\u0e1a\u0e39\u0e23\u0e13\u0e4c\u0e2a\u0e33\u0e2b\u0e23\u0e31\u0e1a\u0e01\u0e32\u0e23\u0e23\u0e31\u0e01\u0e29\u0e32\u0e04\u0e27\u0e32\u0e21\u0e1b\u0e25\u0e2d\u0e14\u0e20\u0e31\u0e22\u0e43\u0e19\u0e22\u0e38\u0e04\u0e14\u0e34\u0e08\u0e34\u0e17\u0e31\u0e25"},"content":{"rendered":"
\n\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

What is Sentinel? A deep dive into SIEM & SOAR commonly used by organizations.<\/h1>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"Sentinel\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

What is Sentinel? \u2013 Microsoft Sentinel is a platform... <\/span>SIEM (Security Information and Event Management)<\/span><\/b> and <\/span>SOAR (Security Orchestration, Automation and Response)<\/span><\/b> Running on Microsoft Azure, this system enables organizations to quickly and accurately detect, analyze, and respond to cyber threats. Leveraging AI and machine learning capabilities, it's highly popular among businesses seeking to enhance security in compliance with international standards such as GDPR, ISO\/IEC 27001, and SOC 2.<\/span>\u00a0<\/span><\/p>

With the ability to gather data from IT, Cloud, IoT, and SaaS systems across the organization, Sentinel reduces security event investigation time by up to 50% compared to using traditional SIEMs.<\/span>\u00a0<\/span><\/p>

\u00a0<\/span><\/p>

Key features of Microsoft Sentinel<\/b>\u00a0<\/span><\/h2>
  1. Cloud-Native Platform<\/span><\/b><\/li><\/ol>

    It is a system developed on Microsoft Azure, making it easy to scale to meet the needs of organizations and handle large volumes of data without requiring investment in infrastructure.<\/span>\u00a0<\/span><\/p>

    1. Threat Detection \u0e41\u0e1a\u0e1a AI-Powered<\/span><\/b><\/li><\/ol>

      Sentinel uses AI to analyze behavioral data and help identify sophisticated threats, such as zero-day attacks or Advanced Persistent Threats (APTs), that might be overlooked in typical systems.<\/span>\u00a0<\/span><\/p>

      1. Automated Incident Response<\/span><\/b><\/li><\/ol>

        Playbooks can be configured to allow the system to respond immediately to events, such as locking risky user accounts, notifying administrators, or blocking IP addresses.<\/span>\u00a0<\/span><\/p>

        1. Threat Intelligence Integration<\/span><\/b><\/li><\/ol>

          It supports connectivity with Microsoft's Threat Intelligence and third-party threat intelligence, allowing Sentinel to update the latest threat information in real-time.<\/span>\u00a0<\/span><\/p>

          1. Visual Investigation Tools<\/span><\/b><\/li><\/ol>

            Sentinel includes tools to analyze events and display a threat correlation graph (Investigation Graph), making it easier for system administrators to understand the context of attacks.<\/span>\u00a0<\/span><\/p>

            \"Sentinel<\/span><\/p>

            The advantages of Sentinel over conventional SIEMs.<\/b>\u00a0<\/span><\/h3>