Provides read-only access to Microsoft Sentinel data for querying, incident viewing, and resource exploration, designed for use with LLMs in test environments.
Sentinel enables security operations and analysis by providing a modular interface to a Microsoft Sentinel instance. It facilitates read-only access to logs, incidents, analytics, and Entra ID data, making it ideal for integration with LLMs like Claude in non-production environments. Explore your Sentinel data through a queryable interface, accessing various security insights and resources.