Intelligent Security Operations Center - ISOC

Pavel Hrabec

5d • 🚨 News & Updates

Microsoft is pushing the SOC further toward an agentic operating model.

ISOC brings SIEM, XDR, Threat Intelligence, automation and AI together directly inside the Microsoft Defender portal.

🤖 AI agents can investigate, reason and help take action

🔄 Detection, investigation and response become one continuous workflow

🧠 Humans move more toward decision-making, engineering and directing the defense

⚡ Some SIEM capabilities are available without starting with a traditional Sentinel deployment

Microsoft describes ISOC as a foundation for the agentic SOC — and I think that wording matters.

We are slowly moving away from the traditional model where L1/L2 analysts manually process endless queues of alerts. The future SOC will likely be built around security engineers + AI agents + automation, all operating on the same context.

ISOC is currently in preview. In this preview phase, it is available to eligible Microsoft Defender Suite, Microsoft 365 E5 and E7 customers that don't already have an active Microsoft Sentinel workspace.

Definitely something worth watching.

👉 Learn more: https://www.microsoft.com/en-us/security/blog/2026/09/23/reimagining-the-soc-for-the-agentic-era-in-microsoft-defender/

4 comments

Intelligent Security Operations Center - ISOC

AI Cybersecurity Academy

skool.com/ai-cybersecurity-academy

Break into Cybersecurity with AI. Then use your skills to grow from beginner to expert in AI cybersecurity with 6 figure salary.💰

Leaderboard (30-day)