Microsoft Defender integrates security operations with AI agents

VERA Brief

AI-generated. Grounded in the article and its cited sources.

Microsoft has launched an Integrated Security Operations Center (ISOC) within Microsoft Defender. This consolidates security information and event management features from Microsoft Sentinel in response to attackers using AI agents.

Key facts

• Microsoft has introduced an Integrated Security Operations Center (ISOC) within Microsoft Defender.
• The ISOC centralizes security information and event management capabilities previously in Microsoft Sentinel.
• This integration is a response to the increasing use of artificial intelligence agents by malicious actors.
• The platform aims to enhance security operations by bringing functions together under a unified AI-driven framework.
• Microsoft's strategy involves rebuilding security operations products with a focus on AI agents to improve defense capabilities.