Curated threat intel for security leaders
incident-resp 2026-09-23

Here is the rewritten summary in 80 characters or less:

Here is the rewritten summary in 80 characters or less:

Microsoft Defender's ISOC unifies SIEM and threat protection capabilities.

Bottom line: Microsoft Defender's ISOC unifies SIEM and threat protection capabilities.

What's happening: Microsoft is releasing ISOC in Microsoft Defender, building on its Security Operations Center (SOC) framework. This new foundation integrates leading solutions for SIEM and threat protection, including threat intelligence from OpenDNS and endpoint protection from Windows Defender.

What to do: Security leaders should review ISOC's capabilities and ensure their teams are trained on the new platform, as well as its integration with other security tools, including Azure Sentinel and Sentinel One.

Source: Microsoft Security Blog