Microsoft announces public preview of unified security operations platform

Microsoft has announced the public preview of its unified security operations platform, which brings together the full capabilities of cloud-native security information and event management (SIEM), extended detection and response (XDR), and generative AI built specifically for cybersecurity to deliver a truly unified analyst experience in the security operations center (SOC).

With the recent addition of unified exposure management capabilities that provide continuous, proactive end-to-end visibility of assets and cyberattack paths, the platform provides a true end-to-end experience for detecting, investigating, responding to, and protecting against cyberthreats.

"Security teams need a single pane of glass to manage today's IT environments. Long gone are the days when teams could operate in silos and protect their environments. With today’s announcement, Microsoft is moving another step forward in helping businesses protect their systems, customers and reputations. Microsoft combining the full capabilities of an industry-leading cloud-native SIEM and XDR with the first generative AI built specifically for cybersecurity is a game changer for the industry," said Chris Kissel, IDC Research Vice President, Security and Trust.

By leveraging XDR and AI, Microsoft's unified security operations platform quickly disrupts advanced attacks like ransomware, business email compromise, and adversary-in-the-middle attacks with automatic attack disruption.

It also integrates Microsoft Security Copilot which helps you summarize investigations and explore built-in threat intelligence. Microsoft said that Early adopters are seeing their analysts move an average of 22% faster and accelerate time to resolution (Based on Microsoft Copilot for Security randomized controlled trial (RCT) with experienced security analysts conducted by Microsoft Office of the Chief Economist, January 2024).