Microsoft Sentinel Fully Integrated into the Defender Portal: What Businesses Need to Know
Microsoft is executing a significant transition in its security strategy—Microsoft Sentinel is now generally available within the Microsoft Defender portal, bringing together Security Information and Event Management (SIEM) and Extended Detection and Response (XDR) for a holistic, AI-powered security operations experience. As of July 2025, new Sentinel customers are automatically onboarded to the Defender portal, with existing users encouraged to prepare for a complete transition by July 2026, when the classic Azure portal experience will retire.
What Does the Unified Defender Portal Offer?
-
Centralized Security Management:
Organizations can manage endpoint protection, cloud and identity security, email defense, threat intelligence, and exposure management—all within a single interface. This reduces tool switching and delivers broader incident context. -
Unified Incident Management:
Incidents, alerts, and investigations—previously spread across separate tools—are now streamlined. AI and Security Copilot assist in incident summarization, hunting, and response. Unified incidents aggregate signals from Defender XDR and Sentinel sources. -
Advanced Threat Detection:
The platform leverages up-to-the-minute AI and machine learning models for faster, more accurate threat detection, while integrated hunting features draw on both Defender and Sentinel data sources. -
Optimized Operations and Visibility:
New tools enable advanced analytics, risk assessments, attack path visualization, and cost-saving optimization recommendations.
Sentinel Data Lake Public Preview
One of the standout features rolling out alongside this integration is the Sentinel Data Lake (now in Public Preview). This purpose-built, cloud-native security data lake makes long-term log storage and retrieval dramatically more cost-effective—sometimes less than 15% the cost of traditional log analytics retention.
Key Features of Sentinel Data Lake:
-
Centralization: Ingests security logs from 350+ Microsoft and third-party data connectors into a unified, cost-effective lake.
-
AI-Ready Analytics: Supports advanced analytics and modeling with Kusto Query Language (KQL), Python, Spark jobs, and Jupyter notebooks.
-
Security Copilot Integration: Direct integration with Defender XDR and Security Copilot, facilitating real-time AI-driven analytics and automation.
-
Long-Term Retention: Offers affordable and scalable storage, crucial for industries with extended regulatory or investigative requirements.
The Data Lake is already being lauded for its role in reducing SIEM operating costs, cutting data silos, and providing a practical on-ramp for AI-centric security workflows at scale.
What’s Next for Sentinel Users?
By July 2026, all Microsoft Sentinel customers will use only the Defender portal, with legacy Azure interface support ending. Existing users should begin migration planning to reap the benefits of enhanced, AI-powered security operations and minimize disruption. For onboarding and migration guidance, refer to official transition documentation and planning resources.
Useful source links for further reading:
August 2025: .NET and .NET Framework Monthly Servicing Updates
In parallel with its security platform transformation, Microsoft continues its commitment to robust support for developers. The company released its .NET and .NET Framework servicing updates for August 2025 on August 5, 2025.
What’s Included in the Update?
-
Non-Security Fixes:
These updates deliver reliability and performance enhancements, addressing various customer-reported issues and internal findings. -
Support for Latest Frameworks:
Updates cover the newest stable versions (.NET 8.0.19, .NET 9.0.8), ensuring that enterprise and individual developers can confidently maintain, upgrade, and deploy crucial workloads. -
Recommended Installation:
Microsoft strongly recommends applying these updates promptly as part of standard security and maintenance practices.
“We encourage all .NET and .NET Framework developers to keep their systems current by installing the latest monthly updates to take advantage of cumulative improvements,” reads the official .NET Blog notice.
Why These Changes Matter
Unifying Microsoft’s Security Tools: The deeper integration of Sentinel into the Defender portal is designed to streamline security operations, break down data silos, and empower organizations with AI-driven insights—all while controlling costs and supporting compliance. The new Data Lake elevates analytics capabilities, helping large enterprises and regulated industries remain agile amid rising cyber threats.
Keeping Developer Tools Secure and Stable: Regular .NET servicing updates further Microsoft’s track record of dependable software support, minimizing vulnerabilities and technical debt for businesses relying on the .NET ecosystem.
Discover more from Microsoft News Now
Subscribe to get the latest posts sent to your email.
