# Microsoft launches integrated security operations center preview in Defender

Digest AI · Enterprise & Industry · published 2026-09-23T09:00:00Z

Canonical: https://digestai.news/story/microsoft-launches-integrated-security-operations-center-preview-in-de

## Summary

Microsoft announced the Integrated Security Operations Center (ISOC) as a preview feature of Microsoft Defender. ISOC combines security information and event management (SIEM) with threat protection into a single platform, giving both human analysts and autonomous agents a shared foundation of signals, context, and actuators. The design lets agents act at machine speed while operators set priorities and apply judgment, eliminating the need to stitch together separate tools.

The announcement builds on the cyber stack introduced in July 2026 with Project Perception, which delivered models, a harness, and specialized agents for perception, reasoning, and action. ISOC extends that stack by unifying the detection, prediction, and response loop, allowing continuous pre‑breach protection and real‑time threat adaptation. Practitioners can focus more on decision‑making rather than manual integration, and the system can evolve as new capabilities are added. The preview is available now, with a recording of the launch and a whitepaper provided for deeper details.

## Key points

- ISOC merges SIEM and threat protection in Microsoft Defender, now available in preview.
- Unified signals, context, and actuators let agents and humans act together at machine speed.
- Reduces manual tool stitching, enabling analysts to focus on judgment and outcomes.

## Why it matters

Integrating operations and protection lets organizations counter AI‑driven attacks faster and with less complexity, improving continuous defense across the enterprise.

## Sources

1. [Reimagining the SOC for the agentic era in Microsoft Defender](https://microsoft.com/en-us/security/blog/2026/09/23/reimagining-the-soc-for-the-agentic-era-in-microsoft-defender) (microsoft.com, 2026-09-23, primary source)

## Cite

Digest AI, "Microsoft launches integrated security operations center preview in Defender", 23 September 2026, https://digestai.news/story/microsoft-launches-integrated-security-operations-center-preview-in-de

---

Written by Digest AI's editorial model from the linked sources; the sources are the record. Headlines, digests and key points are written by Digest AI and may be quoted with a link to the story page. Linked articles belong to their publishers. Terms: https://digestai.news/terms#reuse
JSON: https://digestai.news/story/microsoft-launches-integrated-security-operations-center-preview-in-de.json