Blog Post

Microsoft Security Community Blog
4 MIN READ

Announcing public preview of custom graphs in Microsoft Sentinel

ManojRaheja's avatar
ManojRaheja
Icon for Microsoft rankMicrosoft
Apr 01, 2026
Security attacks span identities, devices, resources, and activity, making it critical to understand how these elements connect to expose real risk. In November, we shared how Sentinel graph brings t...
Published Apr 01, 2026
Version 1.0
azure
cloud security
email security
enterprise security
exposure management
identity and access management
insider risk management
microsoft defender for cloud
microsoft defender for cloud apps
microsoft defender for endpoint
Azat's avatar
Azat
Copper Contributor
Apr 02, 2026

This is a strong capability. To help customers adopt it responsibly, how do you envision custom graphs being governed and operationalized over time—who builds them, who validates them, and how they are used consistently across CSPM, CWPP, and SOC workflows?