. home.aspx



Microsoft Security Services Put AI, Experts to Work Against Threats

March 05, 2019 / Wayne Rash

Microsoft is rolling out a brace of threat fighting capabilities for Windows 10 administrators that promise to bring the big guns of the company’s security experts, as well as its AI capabilities, to bear against attackers. The new services are Microsoft Azure Sentinel and Microsoft Threat Experts, which is part of Windows Defender ATP. Both are intended to be used for security operations administrators and managers. Sentinel is a cloud-based threat analysis service that uses Microsoft’s cloud AI capabilities to monitor cloud and on-premises infrastructure against threats. According to Microsoft, Sentinel will monitor for threats on an enterprise-wide basis, including all devices and users, in locations that are in the cloud or on-premises. Sentinel is a Security Information and Event Management (SIEM) tool that’s able to detect threats in a number of ways, including their activity in the enterprise, traces left in logs and changes to protected systems, then use AI to...