Microsoft Sentinel is Microsoft's cloud platform for SIEM (security information and event management) and SOAR (security orchestration, automation and response). It collects logs from Microsoft 365, Azure, firewalls and other sources, detects threats with analytics rules and behavior analysis, and automates responses. It was formerly called Azure Sentinel, and its queries use KQL (Kusto Query Language).
Go deeper on the TecnetBlog: Best SIEM Solutions in 2026: Top 10 Compared
Azure Sentinel, Sentinel SIEM, Microsoft SIEM, Sentinel SOAR, Sentinel KQL