Nov 14, 2025
Modern Data Architecture with Sentinel data lake
When discussing Microsoft Sentinel data lake, the narrative centers on immediate value: cheaper ingestion, long-term storage, and historical correlation. These benefits are real, but they don’t address some interesting options. Sentinel data lake with KQL Jobs and Notebooks transforms how SIEM data flows. Instead of direct ingestion, these tools allow data forwarding from one table […]
Read More Aug 4, 2025
Sentinel data lake: Old and New Table Tiers
Microsoft has just introduced Sentinel data lake (SDL) in public preview, and there’s already a flurry of excitement in the cybersecurity world. Most community blog posts so far focus on how to turn it on and when you might want to use it, but very few delve into how it will change your day-to-day experience […]
Read More 
