Connect Microsoft signals
Configure the required Graph permissions and available Entra and Microsoft 365 sources.
INVESTIGATE / SENTINEL ITDR
See identity threats with the human context behind them.
SkillNod Sentinel connects Microsoft Entra and Microsoft 365 identity signals with human-risk context, helping security teams investigate findings and configure supported response actions.
HOW IT WORKS
Identity signals. Human context. Controlled action.
Sentinel is a separately enabled additional module for Microsoft identity environments. Start with detection and investigation, then enable supported technical response actions individually.
Investigate with context
Review suspicious activity alongside available behavioural and human-risk insights.
Control the response
Use manual review and configurable automation for supported technical actions.
DESIGNED FOR THE WAY YOU WORK
Signals you can investigate.
Actions you can control.
Look beyond a single sign-in
Review suspicious sign-in patterns, including impossible travel where the necessary logs are available. Entra ID Protection coverage depends on licensing and permissions.
Review grants, rules and authentication
Detect risky OAuth grants, suspicious external forwarding or concealment rules, MFA posture and newly registered authentication methods.
Enable response deliberately
Supported actions include revoking sessions, disabling accounts, requiring password resets, deleting suspicious inbox rules and revoking OAuth grants. Permissions and configuration govern availability.
A FEW USEFUL ANSWERS
The details
that matter.
Is Sentinel part of every deployment?
Sentinel is an additional module enabled separately for Microsoft Entra and Microsoft 365 environments.
Are all Microsoft signals available to every tenant?
No. Microsoft licensing, Graph permissions, log availability and configuration determine coverage.
Can we choose which response actions are enabled?
Yes. Detection is the default. Supported technical actions can be enabled individually, with manual review and configurable automation.
LET’S CONNECT THE DOTS
See how SkillNod fits
your security programme.
Walk through the platform, explore the modules and discuss the integrations your organisation needs.