SIEM? XDR? SOAR? Let's Break it Down

SIEM? XDR? SOAR? How are they defined, and which one is best for my cloud security strategy?

Check out this snippet from our webinar "How Microsoft Sentinel is Disrupting the SIEM and XDR Markets", where Brandon Cox helps define these cloud security acronyms and how they relate to Microsoft Sentinel.

This video defines the following cloud security acronyms as they apply to Microsoft Sentinel:
- Endpoint Detection and Response (EDR)
- Security Information and Event Management (SIEM)
- eXtended Detection and Response (XDR)
- Security Orchestration, Automation and Response (SOAR)

Curious about Microsoft Sentinel?
Microsoft Sentinel is a cloud native SIEM that aggregates data from multiple sources, including users, applications, servers, and devices running on-premises or in any cloud, allowing for the analysis of millions of records, using artificial intelligence to scrutinize threat data. A high number (and growing) of supported data source connectors enable rapid onboarding of many security solutions, as well as provide for open standards such as CEF and Syslog.

Microsoft Sentinel addresses many of the issues that plague traditional SIEMs – eliminating the cost and time associated with deploying hardware or virtual data collection appliances, allowing for speedy connectivity to security logs data sources, and providing quick visibility into risk and security threats across multi-cloud and hybrid environments. Sentinel provides efficient data queries, intelligent security analytics, and an advanced security orchestration automation and response (SOAR) engine.

Microsoft Sentinel provides native bi-directional connectivity to additional Microsoft security hubs such as Microsoft 365 Security Center and Microsoft Defender for Cloud (formerly known as Azure Security Center). Sentinel also connects directly to individual Microsoft products, for example Microsoft Teams, Defender for Cloud Apps (formerly known as Microsoft Cloud App Security, or MCAS), Defender for Identity, and Defender for Endpoint.