Microsoft Events presents a Microsoft Ignite 2025 session featuring Krishna Kumar Parthasarathy, Reena Pathak, Evangeline White, and Scott Woodgate on scaling security operations with Microsoft Sentinel’s AI-driven, graph-integrated platform.

Power Agentic Defense with Microsoft Sentinel

Speakers: Krishna Kumar Parthasarathy, Reena Pathak, Evangeline White, Scott Woodgate
Event: Microsoft Ignite 2025 — Intermediate (200) Breakout

Overview

This session demonstrates how Microsoft Sentinel is transforming security operations into an agentic, AI-ready platform by combining:

• Graph Intelligence: Enabling advanced threat detection and investigation through custom and organization-specific graph models.
• Azure Data Lake Integration: Powering Sentinel Data Lake for scalable, unified data analysis and management.
• Agentic Workflows: Automating threat response and case management for faster mitigation.

Key Topics Covered

1. Evolution to Agentic, AI-Ready Platform

• Sentinel's journey from traditional SIEM to a central hub for security operations leveraging AI and automation.

2. Market Recognition & Industry Leadership

• Overview of Sentinel’s market position and adoption by enterprises.

3. Security Store and Ecosystem Integrations

• Launch of the Security Store with expanded partner integrations and extensibility options.

4. Sentinel Data Lake — General Availability

• Introduction of unified data models within Azure Data Lake for efficient large-scale security data management.

5. Threat Hunting with KQL Jobs

• Practical demo: Using KQL (Kusto Query Language) Jobs to identify historical indicators of compromise (IoCs).

6. Real-World Cyber Defense Transformation

• Case study spotlight: Centrica’s mission in energy sector cybersecurity using Sentinel for integrated defense.

7. Improving Case Management & Coordination

• Enhancements for integrating and managing security incidents and responses across teams.

8. Graph Customizations

• Instructions and scenarios for building custom graphs tailored to specific organizational threats and assets.

Learn More

• Sentinel AI Security Overview
• Sentinel Data Lake Announcements
• Sentinel Graph Integration
• Microsoft Cloud Platform Security

Related Ignite Sessions

• THR748: Advanced Sentinel Use Cases
• THR749: Partner Integrations
• THR744: Unified Security Models

Conclusion

Microsoft Sentinel now enables security teams to automate, investigate, and respond more efficiently using cutting-edge AI, graph-powered analytics, and scalable data lake solutions. These innovations support more proactive and unified defense across complex digital environments.

Microsoft Events at Microsoft Ignite 2025