Expand Security Operations Across Tenants with Enhanced Content Distribution
Microsoft Sentinel is expanding multitenant content distribution capabilities with support for new content types. Security partners managing multiple customer tenants can now distribute a broader range of security content, enabling centralized control with localized execution.
What's New
Multitenant content distribution now supports these content types:
- Analytics Rules - Distribute custom detection rules across customer tenants
- Automation Rules - Replicate automation workflows for incident response
- Workbooks - Share security dashboards and visualizations
- Alert Tuning Rules - Maintain consistent alerting standards across tenants
Key Benefits
Accelerated Onboarding - Quickly establish consistent security baselines for new customer tenants
Operational Consistency - Ensure all customer tenants have aligned detection and response capabilities
Scalable Security Operations - Manage security content for dozens or hundreds of customers from a single interface