/cdx → M365 Copilot → microsoft-sentinel-data-federation

Simulated ExperienceAzure Security Center, Azure Sentinel, Communication Compliance, Compliance Center, Conditional Access, Configuration Manager, Data Connectors, GitHub, Graph Security API, Insider Risk, Intelligent Security Graph, Intune, Intune for Education, Intune Suite, Live Events, Microsoft Compliance Manager, Microsoft Data Loss Prevention, Microsoft Defender Advanced Threat Protection, Microsoft Defender for Business, Microsoft Defender for Cloud, Microsoft Entra, Microsoft Entra ID, Microsoft Information Protection, Microsoft Insider Risk, Microsoft Insider Risk Management, Microsoft Intune, Microsoft Priva, Microsoft Privileged Access Management, Microsoft Purview, Microsoft Purview Audit, Microsoft Purview Data Lifecycle Management, Microsoft Purview Records Management, Microsoft Relationship Sales, Microsoft Secure Score, Microsoft Sentinal, Security Center, Security Copilot, Security Policy AdvisorLevel 200

Microsoft Sentinel Data Federation

Part of the scenario: March and April 2026 DMC Parity Project

This demo shows how Microsoft Sentinel data federation enables security teams to investigate across a broader digital estate without moving or duplicating data. It highlights how teams can analyze external data in place, register federated tables alongside native Sentinel data, and query everything through a unified KQL experience. You’ll also see how federated and native data are correlated to uncover complex insider threats while maintaining governance and compliance. Runs in a live demo tenant with realistic data — you try the real thing, not a slide deck.

More demos in this story

6 related

Agent 365: Defend Against AI Threats & Vulnerabilities

In this demo, you will see how IT and Security Operations teams work together to ensure that AI agent and user activity is monitored in real time, with unsafe actions blocked at execution and incidents surfaced to security teams for rapid investigation.

M365 Copilot
Simulated Experience
L100

BDM10 min

Agent 365: Observe Agents and Prevent Sprawl

When agents live across platforms, a lack of visibility quickly turns into operational, security, and governance risk. This demo shows how Agent 365 gives organizations the observability, governance, and security required across teams to operate agents at scale.

M365 Copilot
Simulated Experience
L100

BDM10 min

Agent 365: Onboard Agents with Access Packages

Without the right policies at onboarding, agents can be over-privileged from day one, creating unnecessary governance risk. This demo shows how Agent 365 applies policy templates and review workflows as agents are onboarded.

M365 Copilot
Simulated Experience
L100

BDM10 min

Agent 365: Protect Data Oversharing and Leaks

One of the biggest challenges with AI agents is data leakage. Agents access, create, and share data so without the right guardrails, oversharing can happen fast. In this demo, we’ll show you how IT and security teams work together to protect data from oversharing and leaks.

M365 Copilot
Simulated Experience
L100

BDM10 min

BRK265: Secure Access for AI Agents with Microsoft Entra

BRK265 - Sharon - for Nick to publish

M365 Copilot
Simulated Experience
L100

BDM10 min

Continuously Optimizing Conditional Access with Security Copilot

In this demo, we’ll show how the Conditional Access Optimization Agent in Microsoft Entra helps organizations move from manually managing policies to continuously optimizing identity security with AI. You’ll see how the latest features, like context-aware recommendations, safe policy deployment, continuous gap analysis, least-privilege enforcement, posture reporting, and passkey campaigns, work together to strengthen Conditional Access without disrupting users.

M365 Copilot
Simulated Experience
L200

CTO10 min

Product: Azure Security Center, Azure Sentinel, Communication Compliance, Compliance Center, Conditional Access, Configuration Manager, Data Connectors, GitHub, Graph Security API, Insider Risk, Intelligent Security Graph, Intune, Intune for Education, Intune Suite, Live Events, Microsoft Compliance Manager, Microsoft Data Loss Prevention, Microsoft Defender Advanced Threat Protection, Microsoft Defender for Business, Microsoft Defender for Cloud, Microsoft Entra, Microsoft Entra ID, Microsoft Information Protection, Microsoft Insider Risk, Microsoft Insider Risk Management, Microsoft Intune, Microsoft Priva, Microsoft Privileged Access Management, Microsoft Purview, Microsoft Purview Audit, Microsoft Purview Data Lifecycle Management, Microsoft Purview Records Management, Microsoft Relationship Sales, Microsoft Secure Score, Microsoft Sentinal, Security Center, Security Copilot, Security Policy Advisor
Runs on: Windows E3, Windows E5
Type: Simulated Experience
Audience: Business Decision Maker
Stage: Empower & Achieve
Level: Level 200
Duration: 10 min
Published: 2026-04-01
Updated: 2026-07-20