{"id":38466,"date":"2020-12-01T17:00:33","date_gmt":"2020-12-01T17:00:33","guid":{"rendered":"https:\/\/www.microsoft.com\/security\/blog\/?p=92154"},"modified":"2020-12-01T17:00:33","modified_gmt":"2020-12-01T17:00:33","slug":"azure-sentinel-achieves-a-leader-placement-in-forrester-wave-with-top-ranking-in-strategy","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/azure-sentinel-achieves-a-leader-placement-in-forrester-wave-with-top-ranking-in-strategy\/","title":{"rendered":"Azure Sentinel achieves a Leader placement in Forrester Wave, with top ranking in Strategy"},"content":{"rendered":"

I\u2019m thrilled to announce Forrester Research has named Microsoft Azure Sentinel<\/a> as a \u201cLeader\u201d in The Forrester Wave\u2122: Security Analytics Platform Providers, Q4 2020.<\/a> When we released Azure Sentinel almost a year ago\u2014the industry\u2019s first cloud-native SIEM on a major public cloud\u2014our goal was to provide a new, innovative approach to help organizations modernize security operations. We\u2019ve been excited and humbled to see enthusiastic adoption across verticals like IT, financial services, e-commerce, big data, and other industries. It\u2019s been particularly fulfilling to work alongside many of you to see the unique ways that Azure Sentinel can improve your security operations.<\/p>\n

\"The<\/p>\n

Today\u2014and this year more than ever\u2014security operations centers (SOCs) are being asked to do more with less, all while protecting a decentralized digital estate. We\u2019re honored that in this time of transformative change, Azure Sentinel can help security teams achieve this goal.<\/p>\n

The Azure Sentinel vision<\/h2>\n

We are especially honored to see that Azure Sentinel received the top ranking in the \u201cStrategy\u201d category because one of our core values is to enable SecOps teams to do more with less by offering a different path forward than traditional, on-premises SIEMs. The key lies in Azure Sentinel\u2019s cloud-native nature. For many of our customers, moving to the cloud has been a transformative change. At Avanade, for example, moving to Azure Sentinel enabled the security team to shift their focus from on-premises management and instead spend time on strategic work to make their organization safer<\/a>. As a cloud-native SIEM, Azure Sentinel makes it easy to deploy, scale, and use. You can collect, correlate, and analyze data across users, devices, applications, and infrastructure at cloud scale\u2014on premises and in multiple clouds. And instead of investing time and money into inflexible infrastructure, you only pay for the resources you need.<\/p>\n

Most importantly, by eliminating the infrastructure and maintenance of an on-premises SIEM, you empower your team to focus on what\u2019s most important: protecting your organization.<\/p>\n

Azure Sentinel helps you detect and investigate threats more efficiently by harnessing AI. Azure Sentinel uses a technique called Fusion to find threats that fly under the radar by combining low fidelity, \u201cyellow\u201d anomalous activities into high fidelity \u201cred\u201d incidents. Fusion combines data from disparate data sets across both Microsoft and partner data sources, then uses graph-based machine learning and a probabilistic kill chain to produce high-fidelity alerts. This process reduces alert fatigue by 90 percent<\/a>, ensuring that SecOps teams are only spending time on real, actionable alerts. And with integrated automation, it further optimizes your team\u2019s time by automating responses to common tasks.<\/p>\n

With these innovations, we\u2019ve helped our customers protect their organizations more efficiently\u2014like at ASOS, where the SecOps team cut issue resolution times in half<\/a>, or at ABM Industries, where the security team reduced the number of alerts they analyze by 50 percent.<\/a><\/p>\n

Our goals are not just limited to transforming the SIEM market. In September, we shared our vision for how organizations can get fight threats in today\u2019s complex landscape with integrated SIEM and Extended Detection and Response (XDR)<\/a> from a single vendor. With this combination, you get the best of both worlds\u2014end-to-end threat visibility across all your resources; correlated, prioritized alerts based on Microsoft\u2019s deep understanding of specific resources with AI that stitches that signal together; and coordinated action across the organization. That\u2019s why we\u2019ve optimized Azure Sentinel for ease of integration across Microsoft products, provide many sources of Microsoft 365 data ingestion for free, and have recently launched a Microsoft 365 data grant benefit<\/a> to help you realize even more value from integrated security.<\/p>\n

Just getting started<\/h2>\n

We\u2019re constantly working with partners and customers on ways to improve Azure Sentinel\u2014and we\u2019re only just getting started. Here are just a few of the innovations we announced at Microsoft Ignite 2020<\/a>:<\/p>\n