News

Microsoft Opens Azure Sentinel Marketplace for Partner Solutions

Microsoft recently announced preview releases of several Azure Sentinel improvements, including connectors for partner solutions within Azure Sentinel.

Azure Sentinel Solutions for Azure Sentinel, now in preview, provides a means to bring non-Microsoft solutions into Azure Sentinel. It's modeled after the Azure Marketplace, a software repository that showcases Microsoft's integrated partner products.

Azure Sentinel currently can access 32 Azure Sentinel Solutions products, although all of them are just available now at the preview stage. There are cloud workload integrations (Cloudflare and Palo Alto Prisma), threat intelligence solutions (ReversingLabs and RiskIQ), identity management (PingFederate) and audit solutions for Oracle and Azure SQL database management applications, among other solutions.

The Azure Sentinel Solution for SAP, currently at preview, was highlighted in Microsoft's announcement. It pulls SAP logs into Azure Sentinel. IT pros can view data, conduct investigations and create custom alerts on SAP-managed data.

Microsoft published another announcement about the Azure Sentinel enhancements in this post. It notably lists the software upload steps for Azure Sentinel Solutions partners.  

Microsoft Teams Integration Preview
Azure Sentinel now integrates with the Microsoft Teams collaboration service at the preview level, as described in this announcement.

Teams integration is conceived as an easier way for IT personnel to collaborate on security incidents. It's done by forming a team. Some functions get automatically added to these teams, namely "Posts, Incident Page, OneNote and Files," which show up as "tabs" within the team.

One benefit to this communication approach using Teams is that automatic archiving happens for security incidents.

"When the incident is closed in Azure Sentinel, the Team is automatically archived, providing a record of the investigation should you need to reference it in the future," Microsoft's announcement explained.

Anomaly Detections Preview
Also at preview is the ability to create machine learning "anomaly" detections in Azure Sentinel. The anomalies reflect "11 of the 14 total MITRE ATT&CK tactics," Microsoft explained.

The parameters used in the machine learning model for the anomalies can be customized. IT pros might want to do customization of the parameters to tune down "noise" in the detection results. Microsoft described how it works in this announcement.

About the Author

Kurt Mackie is senior news producer for 1105 Media's Converge360 group.

Featured

  • Microsoft Appoints Althoff as New CEO for Commercial Business

    Microsoft CEO and chairman Satya Nadella on Wednesday announced the promotion of Judson Althoff to CEO of the company's commercial business, presenting the move as a response to the dramatic industrywide shifts caused by AI.

  • Broadcom Revamps VMware Partner Program Again

    Broadcom recently announced a significant update regarding its VMware Cloud Service Provider (VCSP) program, coinciding with the release of VMware Cloud Foundation (VCF) 9.0, a key component in Broadcom’s private cloud strategy.

  • Closeup of the new Copilot keyboard key

    Microsoft Updates Copilot To Add Context-Sensitive Agents to Teams, SharePoint

    Microsoft has rolled out a new public preview for collaborative "always on" agents in Microsoft 365 Copilot, bringing enhanced, context-aware tools into Teams channels, meetings, SharePoint sites, Planner workstreams and Viva Engage communities.

  • Windows 365 Cloud Apps Now Available for Public Preview

    Microsoft announced this week that Windows 365 Cloud Apps are now available for public preview. This aims to allow IT administrators to stream individual Windows applications from the cloud, removing the need to assign Cloud PCs to every user.