Microsoft Sentinel

A cloud-native SIEM and SOAR platform running in Azure that ingests logs, applies analytics, and automates response playbooks. Sentinel offers scalable log retention, advanced hunting with Kusto Query Language, and built-in connectors for Microsoft and third-party data sources