Microsoft Sentinel and Defender Experts Add Multi-Cloud MDR Coverage
Microsoft's August 2026 security update extends Defender Experts MDR to third-party data sources ingested via Sentinel — including Palo Alto Networks, AWS, and Okta — and introduces Entra Tenant Governance for centralised multi-tenant visibility and drift monitoring. These additions close a meaningful gap for organisations running hybrid or multi-cloud environments, where managed detection historically stopped at Microsoft-native telemetry boundaries. Realising the full benefit requires P2 licensing, mature Sentinel ingestion pipelines, and organisational readiness to act on cross-tenant configuration drift alerts.