Catch Microsoft Defender and Sentinel at Ignite 2026

Join us at Microsoft Ignite 2026, November 17 to 20, in San Francisco and online. Find the Defender and Sentinel sessions that fit your role, and what you will take away from each. Times are Pacific (PT).

1. Start here

If you only catch one session, make it this one.

BRK324: The Alert Is Dead. The Blueprint for the Agentic SOC

Wed, Nov 18, 9:00 to 9:45 AM PT | Moscone West, Level 3, Room 3014 | Level 200

The blueprint for the Agentic SOC: how humans and AI split the work, and what changes in your architecture.

Speakers: Rob Lefferts, CVP, Defender; Amir Gharib, Principal Security Researcher; Allie Mellen, Principal Strategist

Session details and RSVP

2. Breakouts in detail

2.1 BRK316: Winning the Race Against Time with Autonomous Protection

Wed, Nov 18, 11:30 AM to 12:15 PM PT | Moscone West, Level 2, Room 2001 | Level 400

Deep dive for experienced defenders on autonomous protection as the gap between discovery and exploitation shrinks.

Speakers: Noam Hadash, Raviv Tamir, Ken Robb   Session details and RSVP

2.2 BRK320: Agentic Security Unfiltered with Allie Mellen: Hype vs. Reality

Wed, Nov 18, 3:00 to 3:45 PM PT | Moscone West, Level 2, Room 2014 | Level 200

For CISOs and IT leaders weighing agents: where they can safely automate, where they break change controls, and what guardrails to set.

Speakers: Tanmay Ganacharya, Kim Kischel, Raviv Tamir, Allie Mellen   Session details and RSVP

2.3 BRK321: Threat Intelligence reimagined: From signals to protection at AI speed

Thu, Nov 19, 9:00 to 9:45 AM PT | Moscone West, Level 3, Room 3006 | Level 200

Turn threat intelligence into action with expert research and AI automation. Includes demos.

Speakers: Tanmay Ganacharya, Yoni Nave   Session details and RSVP

2.4 BRK332: Identity Knows What Your SOC Doesn’t: Stop Threats Faster Together

Thu, Nov 19, 4:00 to 4:45 PM PT | Moscone West, Level 2, Room 2009 | Level 300

How Entra and Defender bring identity risk signals into SOC investigations. Shared with the Entra team.

Speakers: Etan Basseri, Martin Schvartzman, Yair Tor   Session details and RSVP

2.5 BRK340: A Zero Trust approach to securing AI runtime with Microsoft Defender

Thu, Nov 19, 5:15 to 6:00 PM PT | Marriott Marquis, Lower B2, Yerba Buena Salon 9 | Level 200

How Defender applies Zero Trust to AI agents and stops prompt injection, tool misuse and identity abuse, mapped to OWASP and MITRE.

Speakers: James Brotsos, Krishna Sunkavalli   Session details and RSVP

2.6 BRK333: How Threat Research Powers Attack Disruption in the AI Era

Fri, Nov 20, 9:00 to 9:45 AM PT | Moscone West, Level 3, Room 3006 | Level 300

See how real attacks become protection through the unified security graph, attack disruption and built in agents.

Speakers: Caroline Lee, Shachaf Levy, Jaime Coll   Session details and RSVP

2.7 BRK334: Modern Phishing Doesn't End at the Click

Fri, Nov 20, 11:30 AM to 12:15 PM PT | Moscone West, Level 3, Room 3006 | Level 300

How identity, email and collaboration security work together against AI powered phishing. Shared with the Entra team.

Speakers: Cristian Craioveanu, Ankur Patel, Sangeeta Ranjit   Session details and RSVP

3. Pick your path

4. Day by day

Theater sessions and lightning talks are in person only

5. Resources

• Can't be there? Breakouts will be recorded and available on demand. Recording links will be added here after Ignite.
• Visit us: Stop by the Microsoft Security and Agent 365 Neighborhood at Moscone Center to meet the team.
• Ignite session catalog