Note
Access to this page requires authorization. You can try signing in or changing directories.
Access to this page requires authorization. You can try changing directories.
This article is part of the Microsoft Security Adoption Framework (SAF). It connects the SecOps discipline's mission, operating model, and practices to technical implementation guidance.
SecOps technology supports centralized visibility, detection, investigation, response, threat hunting, threat intelligence, automation, and continuous improvement across identities, endpoints, applications, data, infrastructure, networks, and AI.
Important
Looking for specific security controls or implementation steps? Technology pillars define where Zero Trust controls are applied, and technical solutions provide end-to-end, product-level implementation guidance. Start with Implement Zero Trust solutions and Technology pillars.
Start with Zero Trust implementation guidance
Product and platform guidance
- Integrate Microsoft Defender XDR into security operations
- Microsoft Defender for Office 365 security operations guide
- Microsoft Entra security operations guide
- Investigate incidents with Microsoft Sentinel
- Respond to security alerts in Microsoft Defender for Cloud
Use SAF discipline and practice guidance to define outcomes, responsibilities, processes, and architectural intent. Use the linked implementation guidance to configure and operate the technologies that deliver those outcomes.