sentinel docs auto-onboard auto-redirect

Author: batamig

articles/sentinel/automation/automation.md

@@ -51,7 +51,7 @@ For more information, see [Automate threat response with playbooks in Microsoft
 
 ## Automation in the Microsoft Defender portal
 
-After onboarding your Microsoft Sentinel workspace to the Defender portal, note the following differences in the way automation functions in your workspace:
+Note the following details about how automation works for Microsoft Sentinel in the Defender portal. If you're an existing customer who's transitioning from the Azure portal to the Defender portal, you may note differences in the way automation functions in your workspace after onboarding to the Defender portal.
 
 [!INCLUDE [automation-in-defender](../includes/automation-in-defender.md)]
 

articles/sentinel/best-practices.md

@@ -39,7 +39,7 @@ More than ingesting alerts and logs from other sources, Microsoft Sentinel also:
 
 For more information about integrating data from other services or providers, see [Microsoft Sentinel data connectors](connect-data-sources.md).
 
-Consider onboarding Microsoft Sentinel to the Microsoft Defender portal to unify capabilities with Microsoft Defender XDR like incident management and advanced hunting. For more information, see the following articles:
+If you're using Microsoft Sentinel in the Azure portal, consider onboarding Microsoft Sentinel to the Microsoft Defender portal to unify capabilities with Microsoft Defender XDR like incident management and advanced hunting. For more information, see the following articles:
 
 - [Connect Microsoft Sentinel to Microsoft Defender XDR](/defender-xdr/microsoft-sentinel-onboard)
 - [Microsoft Sentinel in the Microsoft Defender portal](microsoft-sentinel-defender-portal.md)

articles/sentinel/business-continuity-disaster-recovery.md

@@ -49,7 +49,7 @@ To support BCDR in a regional outage, Microsoft Sentinel uses a customer-enabled
 
 Customer-enabled BCDR involves:
 
-- Creating two identical Log Analytics workspaces that are enabled for Microsoft Sentinel in the appropriate regions. For more information, see [Quickstart: Onboard Microsoft Sentinel](quickstart-onboard.md).
+- Creating two identical Log Analytics workspaces that are enabled for Microsoft Sentinel in the appropriate regions. For more information, see [Onboard Microsoft Sentinel](quickstart-onboard.md).
 
     In the backup workspace, focus on the data sources, analytic rules, and other configurations that are critical for your business continuity.
 

articles/sentinel/configure-content.md

@@ -1,10 +1,10 @@
 ---
 title: Configure Microsoft Sentinel content
 description: In this step of your deployment, you configure the Microsoft Sentinel security content, like your data connectors, analytics rules, automation rules, and more.
-author: cwatson-cat
+author: batamig
+ms.author: bagol
 ms.topic: how-to
-ms.date: 07/05/2023
-ms.author: cwatson
+ms.date: 06/12/2025
 
 
 #Customer intent: As a security engineer, I want to configure Microsoft Sentinel security content so that analysts can detect, monitor, and respond to security threats effectively.

articles/sentinel/connect-microsoft-365-defender.md

@@ -1,10 +1,10 @@
 ---
 title: Connect Microsoft Defender XDR data to Microsoft Sentinel| Microsoft Docs
 description: Learn how to ingest incidents, alerts, and raw event data from Microsoft Defender XDR into Microsoft Sentinel.
-author: yelevin
-ms.author: yelevin
+author: batamig
+ms.author: bagol
 ms.topic: how-to
-ms.date: 05/22/2025
+ms.date: 06/12/2025
 appliesto:
     - Microsoft Sentinel with Defender XDR in the Microsoft Defender portal
     - Microsoft Sentinel in the Azure portal

articles/sentinel/deploy-overview.md

@@ -1,10 +1,10 @@
 ---
 title: Deployment guide for Microsoft Sentinel
 description: Learn about the steps to deploy Microsoft Sentinel including the phases to plan and prepare, deploy, and fine tune.
-author: cwatson-cat
-ms.author: cwatson
+author: batamig
+ms.author: bagol
 ms.topic: conceptual
-ms.date: 06/28/2024
+ms.date: 06/12/2025
 ms.service: microsoft-sentinel
 
 

articles/sentinel/extend-sentinel-across-workspaces-tenants.md

@@ -1,10 +1,10 @@
 ---
 title: Extend Microsoft Sentinel across workspaces and tenants
 description: How to use Microsoft Sentinel to query and analyze data across workspaces and tenants.
-author: yelevin
+author: batamig
+ms.author: bagol
 ms.topic: concept-article
-ms.date: 03/17/2025
-ms.author: yelevin
+ms.date: 06/12/2025
 appliesto:
     - Microsoft Sentinel in the Microsoft Defender portal
     - Microsoft Sentinel in the Azure portal

articles/sentinel/includes/unified-soc-preview-without-alert.md

@@ -4,9 +4,9 @@ description: "include file"
 services: microsoft-sentinel
 author: batamig
 ms.topic: "include"
-ms.date:  10/16/2024
+ms.date: 06/12/2025
 ms.author: bagol
 ms.custom: "include file"
 ---
 
-Microsoft Sentinel is generally available in the Microsoft Defender portal, including for customers without Microsoft Defender XDR or an E5 license. For more information, see [Microsoft Sentinel in the Microsoft Defender portal](../microsoft-sentinel-defender-portal.md).
+Existing customers from before July 1, 2025 can use Microsoft Sentinel in the Azure portal, or onboard to the Microsoft Defender portal for a unified security operations (SecOps) experience. New customers onboarding after July 1, 2025, with permissions of a subscription [Owner](/azure/role-based-access-control/built-in-roles#owner) or a [User access administrator](/azure/role-based-access-control/built-in-roles#user-access-administrator), have their workspaces automatically onboarded to the Defender portal, and use [Microsoft Sentinel in the Defender portal](../microsoft-sentinel-defender-portal.md) only.

articles/sentinel/includes/unified-soc-preview.md

@@ -4,10 +4,10 @@ description: "include file"
 services: microsoft-sentinel
 author: batamig
 ms.topic: "include"
-ms.date: 10/16/2024
+ms.date: 06/12/2025
 ms.author: bagol
 ms.custom: "include file"
 ---
 
 > [!IMPORTANT]
-> Microsoft Sentinel is generally available in the Microsoft Defender portal, including for customers without Microsoft Defender XDR or an E5 license. For more information, see [Microsoft Sentinel in the Microsoft Defender portal](../microsoft-sentinel-defender-portal.md).
+>Existing customers from before July 1, 2025 can use Microsoft Sentinel in the Azure portal, or onboard to the Microsoft Defender portal for a unified security operations (SecOps) experience. New customers onboarding after July 1, 2025, with permissions of a subscription [Owner](/azure/role-based-access-control/built-in-roles#owner) or a [User access administrator](/azure/role-based-access-control/built-in-roles#user-access-administrator), have their workspaces automatically onboarded to the Defender portal, and use [Microsoft Sentinel in the Defender portal](../microsoft-sentinel-defender-portal.md) only.