Microsoft Sentinel
Cloud and workloads

Sentinel Overview

In brief

The overview now links to “Build and publish Microsoft Sentinel SIEM solutions” at the updated documentation path.

What Defender admins need to know

Administrators looking for solution publishing guidance should use the updated guide link.

Summaries are generated from the documentation change itself.

Documentation change

The comparison below shows only the changed extract. Use the full-page view for complete context.

  • Microsoft Sentinel SIEM content such as connectors, analytic rules, hunting queries, and playbooks.
  • Microsoft Sentinel platform content, such as connectors, Jupyter notebook jobs to analyze the data, and agents that correlate that data with existing lake content. The agent can then interact with other endpoints and external applications to provide customers with a powerful unified experience.

For more information, see Build and publish Microsoft Sentinel solutionsBuild and publish Microsoft Sentinel SIEM solutions.

Get started