Feed on
Posts
Comments

Monthly Archive for March, 2026

Following my post on the unified SOC portal, a question for management: how many security consoles does your SOC have? In many organisations the answer is five or more. One for endpoints, one for email, one for identity, one for the SIEM, one for the firewall, one for vulnerability management. Often from different vendors, often […]

Read Full Post »

Microsoft has announced that Sentinel is moving fully into the Defender portal, and that the Azure portal experience will be retired. For many SOCs, that is a bigger change than it sounds. For years, many SOC teams have worked in two places. Defender for the endpoint, identity, email and cloud app incidents, and Sentinel in […]

Read Full Post »