Webinar
Building a resilient SOC with Microsoft Sentinel
Date
- 14 May 2026
Time
- 11:00 – 12:00
Location
- Microsoft Teams
Learn how to build a Security Operations Centre that actually improves response outcomes – not just alert volumes.
Security teams today are collecting more data, generating more alerts, and deploying more tools than ever before. Yet incident response outcomes aren’t improving. For most organisations, the challenge isn’t detection. It’s how the SOC is designed and operated once alerts appear.
Microsoft Sentinel plays a critical role in modern security operations, but having Sentinel enabled is not the same as running an effective SOC. Without the right operating model, data strategy, and investigation‑led workflows, teams quickly become overwhelmed by noise, cost, and complexity.
The insights shared from our experts are built on 5+ years operating real-world Microsoft Sentinel SOCs. Focusing on real investigation workflows, response challenges, cost decisions, and analyst experience – not theoretical best practice.
Key takeaways:
What distinguishes effective SOCs from reactive ones
Why most SOC failures occur after an alert fires
What “good” looks like for a modern SOC built on Sentinel
How to reduce alert noise without reducing coverage
How a focused data strategy improves outcomes and controls cost
Technology in focus:
Speakers
Presenter
Anna Webb
Presenter
Zlatko Apelic
