Microsoft Sentinel
Microsoft's cloud-native SIEM/SOAR — pay-per-ingest, AI-based anomaly detection, 350+ pre-built data connectors.
Microsoft Sentinel in practice
Microsoft Sentinel is Microsoft's SIEM and SOAR platform, built on Log Analytics: no hardware of your own, new data sources attached through ready-made connectors, billing by the volume of data ingested. Anyone planning today has to plan the move as well — Sentinel now lives in the Microsoft Defender portal, and operation through the Azure portal ends on 31 March 2027, after which remaining customers are redirected automatically.
The second planning question is cost, because it hangs almost entirely on data volume. The tiers help: analytics tables for everything that must be detected in real time, cheaper tiers and the Sentinel data lake for logs kept only for later investigation. From 100 gigabytes a day a commitment tier pays off. Alendris runs Sentinel as the detection layer for NIS2 and KRITIS clients, with rules aligned to MITRE ATT&CK tactics and automated response playbooks.
How Alendris helps
From our projects
- Zero Trust Infrastructure from the Data Center to the Remote WorkplaceComplete modernization of server infrastructure, identity, and remote access into a consistent Zero Trust architecture — from hyperconverged storage to hardened server and client baselines to secure remote work without a single publicly reachable device.
- Replacement of Citrix environment with Azure Virtual DesktopFull migration of 8,000 Citrix users to a highly automated AVD target architecture.
- Security Modernization with a Focus on Microsoft 365 & SOC ReadinessSustainable improvement of the security posture in the Microsoft ecosystem with a focus on identity protection, tenant hardening, and SOC readiness.
- Complete IT Renewal with Security by DesignComprehensive IT modernization with a focus on ransomware resilience, Zero Trust, and Modern Workplace.
- NIS2 Compliance Implementation for Critical InfrastructureHolistic implementation of NIS2 requirements: From gap analysis and technical implementation to audit readiness.
- Enterprise Rollout of Copilot for Microsoft 365Structured rollout of Microsoft 365 Copilot: From tenant preparation and governance to user adoption.
- AI-powered Automation with Azure AI Foundry & n8nComplete automation of document-based business processes through AI-supported workflows – from data extraction to decision support.