Microsoft Expands Sentinel Into Agentic Security Platform
Data lake hits general availability, with graph and Model Context Protocol server entering public preview for agent workflows.
Announcements on September 30
Microsoft advanced Sentinel beyond cloud‑native SIEM by launching a data lake to general availability and unveiling Sentinel graph and an MCP server in public preview. Agents integrate with Security Copilot through no‑code and developer interfaces. A marketplace distributes security agents. :contentReference[oaicite:32]{index=32}
What it enables
The platform aims for faster detection, deeper context, and automated response across identities and assets. Graph relationships model attack paths, while the MCP server standardizes agent access to security context. Early implementations emphasize sub‑second validations. :contentReference[oaicite:33]{index=33}
Risks to manage
Agent sprawl, telemetry exposure, and vendor trust are key concerns. …
Archive Access
This article is older than 24 hours. Create a free account to access our 7-day archive.