Microsoft Sentinel

Microsoft Sentinel is Microsoft's cloud-native SIEM/SOAR product. It collects security events from on-premises, cloud and multi-vendor sources, correlates them with AI-based detection and automates response workflows. Scales massively (pay-per-ingest) and integrates seamlessly with Defender XDR.