Microsoft has created a powerful portfolio of security tools which include Microsoft Sentinel and the Defender suite. Microsoft Sentinel is a cloud-native security information and event manager (SIEM) platform that uses built-in machine learning to analyse large volumes of data. When combined with the platform’s security orchestration and automated response (SOAR) capability, it becomes an ideal tool for cloud-scale security protection, ensuring that active threats or suspicious behaviour are identified, automatically analysed and enriched, so that they can be contained. Offering a flexible ‘pay for what you need’ model, Sentinel has the ability to provide intelligent security analytics from across your entire organisation, including users’ accounts, business applications, critical IT infrastructure, and other high priority data sources across infrastructure and cloud environments.