Empowering defenders in the era of agentic AI with Microsoft Sentinel

Microsoft is presenting Sentinel as the security platform for an agentic era, combining data, context, automation and intelligent agents to defend at AI speed. The blog notes that Sentinel began as cloud-native SIEM and has since added a unified security data lake, with the public previews of Sentinel graph and the MCP server, and the general availability of the data lake, all designed to power agentic AI workflows.

It emphasises that Security Copilot agents can be built no-code and integrated into Security Copilot, VS Code with GitHub Copilot, or other developer platforms, with more than a dozen agents launched for scenarios such as phish triage and access governance. Microsoft also highlights partnerships with Accenture, ServiceNow and Zscaler to strengthen the ecosystem, and says Sentinel enables AI-powered reasoning over unified data through its graph-based context.

In a quote attributed to Bernard Knaapen, Chief Product Owner, Monitoring and Incident Response, ABN AMRO, the benefit is unified silos, scaled operations and automated processes to transform security posture. Finally, the piece notes ongoing protections for AI, including agent identity and prompt-shield enhancements announced at Build 2025, and invites readers to learn more and join upcoming events.