Bringing in custom application data, on-premises logs, or migrating from another SIEM into Microsoft Sentinel can be complex and full of hidden pitfalls. In this session, we’ll share strategies to overcome common ingestion challenges, improve SOC detections and hunting, optimize data retention, and get the most value from the Sentinel data lake. Join the discussion to exchange real-world lessons learned and approaches that work.

Connection Pods accommodate up to 15 people. Please RSVP and arrive at least 5 minutes before the start time, at which point remaining spaces are open to standby attendees.