Microsoft is attempting to build a unified platform for cloud-based security with its Sentinel product. At its core, Sentinel is a security information and event management (SIEM) system that collects information from as many sources as customers are willing to provide. Logs, metrics, and other signals can be forwarded into Sentinel for analysis, looking for signs of malicious activity somewhere in the increasingly complex array of enterprise technologies.