Behind the Build with Gigamon:... Note

Behind the Build with Gigamon: Enriching Microsoft Sentinel with Network-Derived Telemetry

Microsoft's "Behind the Build" series showcases impactful partner integrations, focusing on technical and strategic decisions. This edition highlights a collaboration with Gigamon to enhance Microsoft Sentinel. Security teams face challenges with fragmented visibility across various environments like identity, endpoint, and cloud. Gigamon, with over twenty years of experience, provides the Deep Observability Pipeline. This pipeline extracts actionable network-derived telemetry from complex and modern infrastructures. The Gigamon solution complements Microsoft Sentinel by enriching its existing broad data collection. Gigamon contributes crucial runtime context about system and application communications. This combined data allows for more comprehensive threat detection and investigation. Network telemetry, as Gigamon explains, is essential for completing the security picture alongside logs, metrics, and traces. Together, these enriched signals empower AI-driven security analysis for deeper insights.