Microsoft Sentinel

GPTKB entity

Statements (66)
Predicate Object
gptkbp:instanceOf cloud-native SIEM
gptkbp:competesWith gptkb:IBM_QRadar
Splunk
Sumo Logic
gptkbp:developedBy gptkb:Microsoft
gptkbp:enables security automation
gptkbp:features custom dashboards
https://www.w3.org/2000/01/rdf-schema#label Microsoft Sentinel
gptkbp:includes data connectors
KQL_(Kusto_Query_Language)
gptkbp:integratesWith Azure services
gptkbp:isAccessibleBy web interface
gptkbp:isAvailableIn mobile devices
multiple regions
Azure Marketplace
subscription-based pricing
gptkbp:isCompatibleWith gptkb:Azure_Active_Directory
third-party tools
gptkbp:isIntegratedWith gptkb:Microsoft_Defender
gptkb:Microsoft_Graph_Security_API
gptkbp:isPartOf gptkb:Microsoft_Azure
gptkb:Microsoft_Azure_Security_Center
gptkb:Microsoft_365_Defender
gptkb:Microsoft_Security_suite
gptkbp:isSuitableFor yes
gptkbp:isSupportedBy Microsoft_support_team
gptkbp:isUsedBy security teams
enterprises
gptkbp:isUsedFor compliance reporting
risk assessment
security operations
vulnerability management
threat hunting
gptkbp:offers data visualization
incident response capabilities
security insights
customizable alerts
endpoint detection and response
workbooks
playbooks
security posture management
cloud security monitoring
investigation tools
gptkbp:provides automated responses
data ingestion
real-time monitoring
user behavior analytics
threat intelligence
log analytics
security analytics
alerting capabilities
user activity monitoring
security information and event management
network security monitoring
gptkbp:releaseDate 2020
gptkbp:supports compliance management
data enrichment
incident management
multi-cloud environments
threat detection
data retention
collaboration features
user-defined rules
API_access
gptkbp:uses artificial intelligence
gptkbp:utilizes machine learning