[REVISION HISTORY]

Microsoft Defender ISOC integration and adoption

Updated 1 time since CLSTR started tracking revisions of this situation.

What changed

2026-09-29 02:21 UTC → 2026-09-29 15:45 UTC · added ~~removed~~

Microsoft announced the launch of the Integrated Security Operations Center (ISOC) within Microsoft Defender. This update unifies security information and event management (SIEM) with extended detection and response (XDR) capabilities to streamline threat detection and response workflows. For Microsoft 365 E5 and E7 customers, SIEM capabilities are available within Defender without additional licensing costs for logs from Microsoft’s own security products. However, beginning October 1, data ingested from third-party security tools will incur a pay-as-you-go rate of $2.40 per GB. The ISOC feature is currently in public preview. Following the announcement, cybersecurity firm BlueVoyant introduced a deployment service to assist enterprises with the adoption of Microsoft Defender ISOC. This service includes a readiness assessment, product configuration, custom detection walkthroughs, and use-case engineering to refine automation and detection rules. In September 2026, reports indicated that global ransomware activity has reached a significant inflection point. Data from Cyble Research and Intelligence Labs showed that in August 2026, 88 distinct ransomware gangs publicly named 1,034 organizations as victims, averaging 33 victims per day. This surge has heavily impacted the industrial sector, including manufacturing, professional services, IT services, and healthcare.

Versions

Only revisions since CLSTR began indexing content versions appear here. Select a version to see what changed compared to the one before it.