Best Buy: Stream Team: Tanium + Microsoft Sentinel = SIEMplicity
Best Buy built a production-ready integration between Tanium and Microsoft Sentinel in under six weeks—reducing log ingestion costs by 18% and increasing endpoint visibility by 46%. By using Tanium as a high-fidelity telemetry source, the team enriched Sentinel with real-time endpoint data, improved detection of lateral movement, and reduced noise across their SOC. In this session, they’ll share how they used modular JSON templates, validation scripts, and failover mechanisms to streamline telemetry from distributed endpoints and tune the integration for speed, scale, and security impact.
Speakers
                                    
                Additional details:
Session Tag
                                    Endpoint Management, Security Operations Management, Incident Response, Risk & Compliance, Exposure Management
                                        Session Type
                                    In-Person, Breakout