Microsoft Sentinel Adds Custom Graphs for Security Data Visualization -- Redmondmag.com

Redmond Dispatch

Microsoft Sentinel Adds Custom Graphs for Security Data Visualization

Microsoft has introduced a public preview of custom graphs in Microsoft Sentinel, aimed at improving how security teams visualize and analyze threat data. The feature allows users to create customized graph-based views of security data, enabling analysts to map relationships between entities such as users, devices and events. Powered by Fabric, these visualizations are designed to help identify patterns, investigate incidents and understand potential attack paths more effectively. With custom graphs, users can understand the blast radius, reconstruct real attack chains and spot hidden risks and anomalies.

Microsoft Sentinel is a cloud-native security information and event management (SIEM) platform used to collect and analyze security telemetry. By adding custom graph capabilities, Microsoft aims to give organizations more flexibility in how they explore and interpret complex datasets. Security teams are increasingly relying on graph-based analysis to detect sophisticated threats, including lateral movement and identity-based attacks. Users can also use the Sentinel VS Code extension to generate custom graphs that can help with validating hunting hypotheses. The feature is now available in public preview via Microsoft Sentinel.

Posted by Redmondmag.com Editors on 03/31/2026

Featured

Where Air Gapped Backups Actually Fail, Part 2

Air gapped backups can still fail when configuration drift, lost encryption keys and routine human mistakes go unnoticed until recovery is needed.
Nadella Says Enterprise AI's Future May Depend Less on Frontier Models Than Learning Systems

Satya Nadella is making the case that the next phase of enterprise AI will not be won by the company with the highest-scoring model on a public leaderboard.
AI Agents Could Put Enterprise GenAI Budgets Under Pressure

Enterprises moving generative AI from pilots into production may be underestimating the cost of running those systems at scale, particularly as inference workloads and AI agents become more common, according to a new Gartner report.
Banks Targeted by Fileless Phantom Stealer Phishing Campaign

A new phishing campaign is targeting banks and other high-value organizations with Phantom Stealer, a commercially available infostealer that runs in memory to avoid traditional detection, according to new research from Fortra.
Where Air Gapped Backups Actually Fail, Part 1

Air gapped backups can provide critical ransomware resilience, but restore testing gaps, documentation drift and media rotation mistakes can leave organizations unsure whether they can actually recover.