Integrated Security Operations Center (ISOC) in Microsoft Defender
Integrated Security Operations Center (ISOC) in Microsoft Defender brings XDR, SIEM, threat intelligence, automation, and AI capabilities together in the Microsoft Defender portal. Starting September 23, 2026, it's available to eligible Microsoft 365 E5 and E7 customers without an active Microsoft Sentinel workspace. For more information, see ISOC in Microsoft Defender.
Terms in this update
This is in the weekly digest for week 40 · What changed this week? →
More Defender XDR updates
Identity Security dashboard and Coverage & Maturity
AI agent posture risk in Microsoft Defender
Real-time protection for Microsoft Agent 365 tooling servers
The Domain investigation page allows you to investigate an Active Directory domain
Threat detection for Microsoft Agent 365 agents
Entity enrichments with threat intelligence**: Entity pages for IP addresses, domains, URLs, and files now include a
Text by Microsoft, from Microsoft's documentation. Features and dates may change. Terms and the timeline are added by 365Fanatic.
