Microsoft integrates SOC capabilities with Defender for enterprises

Microsoft 365 E5 and E7 customers can now run security information and event management (SIEM) inside Microsoft Defender at no extra license cost. Microsoft is delivering the capability through the Integrated Security Operations Center (ISOC) in Microsoft Defender, which combines SIEM with Defender’s existing XDR, threat intelligence, automation and AI tools in a single portal. “Security cannot operate at AI speed when protection and operations are built as separate systems,” Rob Lefferts, corpo