Microsoft Sentinel
SIEM / SOAR
A cloud-native SIEM and SOAR built on Azure that collects security telemetry across cloud and on-prem, applies analytics and ML to surface incidents, and automates response with playbooks. Tightly integrated with the Microsoft Defender and Entra ecosystem.