Looking to push security teams off their island, Microsoft is previewing a new SecOps platform to increase security efficiency and responsiveness.

Microsoft announced a new SecOps security platform in November and is now allowing the first registrations, it writes in a blog. The platform is available to customers who have subscribed to Sentinel and Defender XDR. Microsoft aims to leverage the SOCs platform to provide a consolidated view and management of security activities to better streamline workflows and increase efficiency.

According to Microsoft, this is urgently needed. SOCs face many difficulties today. The security industry is facing an acute shortage of trained personnel, resulting in security teams being overwhelmed with alerts and notifications. Additionally, in many companies, the security department operates on an island and there is little to no integration into the overall IT picture. The idea behind SecOps is that IT security and operations speak a common language.

A touch of AI

Many of these problems can be solved by adding more AI to security, Microsoft argues. The new platform is therefore packed with AI functionalities, both classic and generative AI. The core is included Attack Disorder, which uses AI to nip cyberattacks in the bud in real time. Attacks are becoming more sophisticated and faster, and AI is helping SOCs get to the target at the right time.

Of course, a co-pilot should not be missing either. Copilot for Security has been available to the general public since April 1st and the chatbot will be integrated into the SecOps platform. This version of Copilot is specifically designed to support security teams. You can have AI perform analysis on security data and ask additional questions in natural language to identify unknown threats faster.