Event banner
Event details
Will there be a moment where custom log sources can be onboarded (like firewall logs) on the Defender XDR side so without having the need for Sentinel at all? Or should I see it more that Sentinel will become a sub-feature of XDR that is taking care of all those external (non-Microsoft) log sources?
Sentinel will still have a purpose in the M365 XDR offering as it provides features not found in other products included in M365 and can gather information from different sources.