You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: unified-secops-platform/overview-plan.md
+26-1Lines changed: 26 additions & 1 deletion
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -5,7 +5,7 @@ author: batamig
5
5
ms.author: bagol
6
6
ms.service: unified-secops-platform
7
7
ms.topic: concept-article #Don't change.
8
-
ms.date: 12/02/2024
8
+
ms.date: 02/09/2025
9
9
ms.collection:
10
10
- usx-security
11
11
@@ -148,6 +148,29 @@ Plan your Microsoft Sentinel budget, considering cost implications for each plan
148
148
-[Log retention plans in Microsoft Sentinel](/azure/sentinel/log-plans)
149
149
-[Plan costs and understand Microsoft Sentinel pricing and billing](/azure/sentinel/billing?tabs=simplified%2Ccommitment-tiers)
150
150
151
+
## Understand the security portals and admin centers
152
+
153
+
While the Microsoft Defender portal is the home for monitoring and managing security across your identities, data, devices, and apps, you need to access various portals for certain specialized tasks.
154
+
155
+
Microsoft security portals include:
156
+
157
+
| Portal name | Description | Link |
158
+
|---|---|---|
159
+
| Microsoft Defender portal | Monitor and respond to threat activity and strengthen security posture across your identities, email, data, endpoints, and apps with [Microsoft Defender XDR](microsoft-365-defender.md)|[security.microsoft.com](https://security.microsoft.com/) <br/><br/>The Microsoft Defender portal is where you view and manage alerts, incidents, settings, and more. |
160
+
| Defender for Cloud portal | Use [Microsoft Defender for Cloud](/azure/security-center/security-center-intro) to strengthen the security posture of your data centers and your hybrid workloads in the cloud |[portal.azure.com/#blade/Microsoft_Azure_Security](https://portal.azure.com/#blade/Microsoft_Azure_Security/SecurityMenuBlade/0)|
161
+
| Microsoft Security Intelligence portal | Get security intelligence updates for Microsoft Defender for Endpoint, submit samples, and explore the threat encyclopedia |[microsoft.com/wdsi](https://microsoft.com/wdsi)|
162
+
163
+
The following table describes portals for other workloads that can impact your security. Visit these portals to manage identities, permissions, device settings, and data handling policies.
164
+
165
+
| Portal name | Description | Link |
166
+
|---|---|---|
167
+
| Microsoft Entra admin center | Access and administer the [Microsoft Entra](/entra) family to protect your business with decentralized identity, identity protection, governance, and more, in a multicloud environment|[entra.microsoft.com](https://entra.microsoft.com/)|
168
+
| Azure portal | View and manage all your [Azure resources](/azure/azure-resource-manager/management/overview)|[portal.azure.com](https://portal.azure.com/)|
169
+
| Microsoft Purview portal | Manage data handling policies and ensure [compliance with regulations](/compliance/regulatory/offering-home)|[purview.microsoft.com](https://purview.microsoft.com/)|
170
+
| Microsoft 365 admin center | Configure Microsoft 365 services; manage roles, licenses, and track updates to your Microsoft 365 services |[admin.microsoft.com](https://go.microsoft.com/fwlink/p/?linkid=2166757)|
171
+
| Microsoft Intune admin center | Use [Microsoft Intune](/mem/intune/fundamentals/what-is-intune) to manage and secure devices. Can also combine Intune and Configuration Manager capabilities. |[intune.microsoft.com](https://intune.microsoft.com/)|
172
+
| Microsoft Intune portal | Use [Microsoft Intune](/mem/intune/fundamentals/what-is-intune) to deploy device policies and monitor devices for compliance |[intune.microsoft.com](https://intune.microsoft.com/#blade/Microsoft_Intune_DeviceSettings/DevicesMenu/overview)|
173
+
151
174
## Plan roles and permissions
152
175
153
176
Use Microsoft Entra role based access control (RBAC) to create and assign roles within your security operations team to grant appropriate access to services included in Microsoft's unified SecOps platform.
@@ -199,6 +222,8 @@ For more information about implementing Zero Trust principles in Microsoft's uni
199
222
200
223
For more information, see the [Zero Trust Guidance Center](/security/zero-trust/zero-trust-overview).
0 commit comments