Microsoft Sentinel is a scalable, cloud-native solution that provides security information and event management (SIEM) and security orchestration, automation, and response (SOAR). It delivers intelligent security analytics and threat intelligence across the enterprise, providing a single solution for attack detection, threat visibility, proactive hunting, and threat response. Microsoft Sentinel can collect data at cloud scale across all users, devices, applications, and infrastructure, both on-premises and in multiple clouds, making it the best choice for centrally managing security incidents, analyzing logs, auditing activities, and searching for potential threats across all deployed services.