added ms.subservice: sentinel-platform

EdB-MSFT · EdB-MSFT · commit c08d952a48bd · 2026-02-19T00:50:22.000+02:00
diff --git a/articles/sentinel/datalake/asset-data-tables.md b/articles/sentinel/datalake/asset-data-tables.md
@@ -3,12 +3,11 @@ title: Asset data tables in Microsoft Sentinel data lake
 titleSuffix: Microsoft Security  
 description: Asset data tables in security data lake
 author: mberdugo  
-ms.service: microsoft-sentinel  
+ms.service: microsoft-sentinel
+ms.subservice: sentinel-platform
 ms.topic: reference
-ms.custom: sentinel-graph
 ms.date: 06/11/2025
 ms.author: monaberdugo  
-
 ms.collection: ms-security
 
 # Customer intent: As a Microsoft Sentinel user, I want to view the asset data tables in the Microsoft Sentinel data lake so that I can understand the structure and content of the data available for analysis.
diff --git a/articles/sentinel/datalake/auditing-lake-activities.md b/articles/sentinel/datalake/auditing-lake-activities.md
@@ -2,7 +2,7 @@
 title: Audit log for Microsoft Sentinel data lake and graph in Microsoft Purview portal
 description: Learn how to use the audit log to search for Microsoft Sentinel data lake activities to help with investigation.
 ms.service: microsoft-sentinel
-ms.subservice: sentinel-graph
+ms.subservice: sentinel-platform
 ms.author: edbaynash
 author: EdB-MSFT
 ms.topic: how-to
diff --git a/articles/sentinel/datalake/enable-data-connectors.md b/articles/sentinel/datalake/enable-data-connectors.md
@@ -3,12 +3,11 @@ title: Asset data in Microsoft Sentinel data lake
 titleSuffix: Microsoft Security  
 description: Asset data in security data lake 
 author: mberdugo  
-ms.service: microsoft-sentinel  
+ms.service: microsoft-sentinel
+ms.subservice: sentinel-platform  
 ms.topic: conceptual
-ms.custom: sentinel-graph
 ms.date: 11/04/2025
 ms.author: monaberdugo  
-
 ms.collection: ms-security
 
 #Customer intent: As a Microsoft Sentinel user, I want to understand the ingestion of asset data and analysis of security-related data from various sources.
diff --git a/articles/sentinel/datalake/kql-jobs-summary-rules-search-jobs.md b/articles/sentinel/datalake/kql-jobs-summary-rules-search-jobs.md
@@ -3,12 +3,11 @@ title: KQL jobs, summary rules, and search jobs
 titleSuffix: Microsoft Security  
 description: A comparison of KQL jobs, summary rules, and search jobs in Microsoft Sentinel to choose the best tool for querying and analyzing security data.
 author: EdB-MSFT  
-ms.service: microsoft-sentinel  
+ms.service: microsoft-sentinel
+ms.subservice: sentinel-platform  
 ms.topic: how-to
-ms.subservice: sentinel-graph
 ms.date: 08/19/2025
 ms.author: edbaynash  
-
 ms.collection: ms-security  
 
 # Customer intent: As a security analyst, I need to choose the right tool for querying and analyzing data in Microsoft Sentinel.
diff --git a/articles/sentinel/datalake/kql-jobs.md b/articles/sentinel/datalake/kql-jobs.md
@@ -4,12 +4,10 @@ titleSuffix: Microsoft Security
 description: Use the Defender portal's Data lake exploration KQL queries to create and schedule jobs to promote data to the analytics tier.
 author: EdB-MSFT  
 ms.author: edbaynash  
-ms.service: microsoft-sentinel  
+ms.service: microsoft-sentinel
+ms.subservice: sentinel-platform  
 ms.topic: conceptual
-ms.subservice: sentinel-graph
 ms.date: 11/19/2025
-
-
 ms.collection: ms-security  
 
 # Customer intent: As a security engineer or administrator, I want to create jobs in the Microsoft Sentinel data lake so that I can run KQL queries against the data in the lake tier and promote the results to the analytics tier.
diff --git a/articles/sentinel/datalake/kql-manage-jobs.md b/articles/sentinel/datalake/kql-manage-jobs.md
@@ -3,12 +3,11 @@ title: Manage KQL jobs
 titleSuffix: Microsoft Security  
 description: Managing KQL jobs in the Defender portal for Microsoft Sentinel data lake
 author: EdB-MSFT  
-ms.service: microsoft-sentinel  
+ms.service: microsoft-sentinel
+ms.subservice: sentinel-platform  
 ms.topic: conceptual
-ms.subservice: sentinel-graph
 ms.date: 07/09/2025
 ms.author: edbaynash  
-
 ms.collection: ms-security  
 
 # Customer intent: As a threat hunter, security engineer or an security administrator, I want to manage jobs in the Microsoft Sentinel data lake so that I can run KQL queries  against the data in the lake tier and promote the results to the analytics tier.
diff --git a/articles/sentinel/datalake/kql-overview.md b/articles/sentinel/datalake/kql-overview.md
@@ -4,11 +4,10 @@ titleSuffix: Microsoft Security
 description: Exploring and interacting with the Microsoft Sentinel data lake using KQL
 author: EdB-MSFT  
 ms.service: microsoft-sentinel
+ms.subservice: sentinel-platform
 ms.topic: conceptual
-ms.subservice: sentinel-graph
 ms.date: 08/27/2025
 ms.author: edbaynash  
-
 ms.collection: ms-security  
 
 # Customer intent: As a security analyst, I want to understand how I can use KQL to explore and analyze data in the Microsoft Sentinel data lake, so that I can effectively investigate incidents and enhance my security operations.
diff --git a/articles/sentinel/datalake/kql-queries.md b/articles/sentinel/datalake/kql-queries.md
@@ -3,12 +3,11 @@ title:  Run KQL queries against the Microsoft Sentinel data lake
 titleSuffix: Microsoft Security  
 description: Use the Defender portal's Data lake exploration KQL queries to query and interact with the Microsoft Sentinel data lake. Create, edit, and run KQL queries to explore your data lake resources
 author: EdB-MSFT  
-ms.service: microsoft-sentinel  
+ms.service: microsoft-sentinel
+ms.subservice: sentinel-platform  
 ms.topic: how-to
-ms.subservice: sentinel-graph
 ms.date: 12/10/2025
 ms.author: edbaynash  
-
 ms.collection: ms-security  
 ---  
  
diff --git a/articles/sentinel/datalake/kql-sample-queries.md b/articles/sentinel/datalake/kql-sample-queries.md
@@ -2,11 +2,10 @@
 title: Sample KQL queries for Microsoft Sentinel data lake
 titleSuffix: Microsoft Security
 description: Use KQL queries to explore and analyze data in the Microsoft Sentinel data lake.
-
 author: EdB-MSFT
 ms.service: microsoft-sentinel
+ms.subservice: sentinel-platform
 ms.topic: how-to
-ms.subservice: sentinel-graph
 ms.date: 12/10/2025
 ms.author: edbaynash
 ms.collection: ms-security
diff --git a/articles/sentinel/datalake/kql-troubleshoot.md b/articles/sentinel/datalake/kql-troubleshoot.md
@@ -3,12 +3,11 @@ title: Troubleshoot KQL queries for the data lake
 titleSuffix: Microsoft Security   
 description:  Troubleshoot KQL queries for the Microsoft Sentinel data lake.
 author: EdB-MSFT  
-ms.service: microsoft-sentinel  
-ms.subservice: sentinel-graph 
+ms.service: microsoft-sentinel
+ms.subservice: sentinel-platform  
 ms.topic: how-to
 ms.author: edbaynash  
 ms.date: 08/27/2025
-
 ms.collection: ms-security  
 
 # Customer intent: As a security engineer, I want to troubleshoot KQL queries in the Microsoft Sentinel data lake so that I can resolve common issues and ensure successful query execution.
diff --git a/articles/sentinel/datalake/notebook-examples.md b/articles/sentinel/datalake/notebook-examples.md
@@ -7,8 +7,7 @@ ms.topic: how-to
 ms.date: 08/27/2025
 ms.author: edbaynash  
 ms.service: microsoft-sentinel
-ms.subservice: sentinel-graph
-
+ms.subservice: sentinel-platform
 
 # Customer intent: As a security engineer or data scientist, I want to see examples of how to query the Microsoft Sentinel data lake using Jupyter notebooks, so I can analyze security data effectively.
 ---
diff --git a/articles/sentinel/datalake/notebook-jobs.md b/articles/sentinel/datalake/notebook-jobs.md
@@ -5,7 +5,7 @@ description: This article describes how to explore and interact with lake data u
 author: EdB-MSFT  
 ms.author: edbaynash  
 ms.service: microsoft-sentinel
-ms.subservice: sentinel-graph
+ms.subservice: sentinel-platform
 ms.topic: how-to  
 ms.date: 07/09/2025
 
diff --git a/articles/sentinel/datalake/notebooks-overview.md b/articles/sentinel/datalake/notebooks-overview.md
@@ -4,7 +4,7 @@ titleSuffix: Microsoft Security
 description: This article gives an overview of Jupyter notebooks in Visual Studio Code for the Microsoft Sentinel data lake.
 author: EdB-MSFT 
 ms.service: microsoft-sentinel
-ms.subservice: sentinel-graph
+ms.subservice: sentinel-platform
 ms.topic: conceptual
 ms.date: 07/09/2025
 ms.author: edbaynash 
diff --git a/articles/sentinel/datalake/notebooks.md b/articles/sentinel/datalake/notebooks.md
@@ -6,9 +6,8 @@ author: EdB-MSFT
 ms.author: edbaynash 
 ms.topic: how-to  
 ms.service: microsoft-sentinel
-ms.subservice: sentinel-graph
+ms.subservice: sentinel-platform
 ms.date: 07/16/2025
- 
 
 # Customer intent: As a security engineer or data scientist, I want to explore and analyze security data in the Microsoft Sentinel data lake using Jupyter notebooks, so that I can gain insights and build advanced analytics solutions.
 ---
diff --git a/articles/sentinel/datalake/sentinel-graph-overview.md b/articles/sentinel/datalake/sentinel-graph-overview.md
@@ -8,7 +8,7 @@ ms.topic: overview
 ms.date: 11/13/2025
 ms.author: monaberdugo
 ms.service: microsoft-sentinel
-ms.subservice: sentinel-graph
+ms.subservice: sentinel-platform
 
 #customer intent: As a security analyst, I want to understand Microsoft Sentinel graph capabilities so that I can detect complex attack paths and relationships that are difficult to identify with traditional tabular queries.
 ---
diff --git a/articles/sentinel/datalake/sentinel-lake-connectors.md b/articles/sentinel/datalake/sentinel-lake-connectors.md
@@ -3,12 +3,11 @@ title: Set up connectors for the Microsoft Sentinel data lake
 titleSuffix: Microsoft Security  
 description: Set up and configuring connectors for Microsoft Sentinel data lake.
 author: EdB-MSFT  
-ms.service: microsoft-sentinel  
+ms.service: microsoft-sentinel
+ms.subservice: sentinel-platform  
 ms.topic: conceptual
-ms.subservice: sentinel-graph
 ms.date: 11/05/2025
 ms.author: edbaynash  
-
 ms.collection: ms-security  
 
 # Customer intent: As a security admin, I want to set up connectors for Microsoft Sentinel data lake so that I can mirror and retain security data for long-term analysis.
diff --git a/articles/sentinel/datalake/sentinel-lake-onboard-defender.md b/articles/sentinel/datalake/sentinel-lake-onboard-defender.md
@@ -7,7 +7,7 @@ ms.topic: how-to
 ms.date: 11/13/2025
 ms.author: monaberdugo
 ms.service: microsoft-sentinel
-ms.subservice: sentinel-graph
+ms.subservice: sentinel-platform
   
 # Customer intent: As an administrator I want to onboard to the Microsoft Sentinel data lake from my Defender portal so that I can benefit from the storage and analysis capabilities of the data lake.
 ---
diff --git a/articles/sentinel/datalake/sentinel-lake-onboarding.md b/articles/sentinel/datalake/sentinel-lake-onboarding.md
@@ -7,7 +7,7 @@ ms.topic: how-to
 ms.date: 11/13/2025
 ms.author: edbaynash
 ms.service: microsoft-sentinel
-ms.subservice: sentinel-graph
+ms.subservice: sentinel-platform
   
 # Customer intent: As an administrator I want to onboard to the Microsoft Sentinel data lake so that I can benefit from the storage and analysis capabilities of the data lake.
 ---
diff --git a/articles/sentinel/datalake/sentinel-lake-overview.md b/articles/sentinel/datalake/sentinel-lake-overview.md
@@ -3,8 +3,8 @@ title: Microsoft Sentinel data lake overview
 titleSuffix: Microsoft Security  
 description: An overview of Microsoft Sentinel data lake, a cloud-native platform that extends Microsoft Sentinel with highly scalable, cost-effective long-term storage, advanced analytics, and AI-driven security operations.
 author: EdB-MSFT  
-ms.service: microsoft-sentinel  
-ms.subservice: sentinel-graph
+ms.service: microsoft-sentinel
+ms.subservice: sentinel-platform  
 ms.topic: conceptual
 ms.custom: references_regions
 ms.date: 08/11/2025
diff --git a/articles/sentinel/datalake/sentinel-lake-service-limits.md b/articles/sentinel/datalake/sentinel-lake-service-limits.md
@@ -3,8 +3,8 @@ title: Microsoft Sentinel data lake service limits
 titleSuffix: Microsoft Security  
 description: Service limits for the Microsoft Sentinel data lake service.
 author: EdB-MSFT  
-ms.service: microsoft-sentinel  
-ms.subservice: sentinel-graph
+ms.service: microsoft-sentinel
+ms.subservice: sentinel-platform  
 ms.topic: conceptual
 ms.custom: sentinel-graph
 ms.date: 07/09/2025
diff --git a/articles/sentinel/datalake/sentinel-mcp-agent-creation-tool.md b/articles/sentinel/datalake/sentinel-mcp-agent-creation-tool.md
@@ -7,6 +7,7 @@ ms.topic: how-to
 ms.date: 01/30/2026
 ms.author: pauloliveria
 ms.service: microsoft-sentinel
+ms.subservice: sentinel-platform
 
 #customer intent: As a security analyst, I want to know the different tools available to create AI agents
 ---
diff --git a/articles/sentinel/datalake/sentinel-mcp-billing.md b/articles/sentinel/datalake/sentinel-mcp-billing.md
@@ -7,6 +7,7 @@ ms.topic: concept-article
 ms.date: 12/09/2025
 ms.author: pauloliveria
 ms.service: microsoft-sentinel
+ms.subservice: sentinel-platform
 ms.custom: references_regions
 
 #customer intent: As a security analyst, I want to understand Microsoft Sentinel MCP server pricing, limits, and availability 
diff --git a/articles/sentinel/datalake/sentinel-mcp-chatgpt-connector.md b/articles/sentinel/datalake/sentinel-mcp-chatgpt-connector.md
@@ -7,6 +7,7 @@ ms.topic: how-to
 ms.date: 12/09/2025
 ms.author: pauloliveria
 ms.service: microsoft-sentinel
+ms.subservice: sentinel-platform
 
 #customer intent: As a security analyst, I want to use a custom Microsoft Sentinel MCP connector in ChatGPT.
 ---
diff --git a/articles/sentinel/datalake/sentinel-mcp-create-custom-tool.md b/articles/sentinel/datalake/sentinel-mcp-create-custom-tool.md
@@ -7,6 +7,7 @@ ms.topic: get-started
 ms.date: 11/24/2025
 ms.author: pauloliveria
 ms.service: microsoft-sentinel
+ms.subservice: sentinel-platform
 
 #customer intent: As a security analyst, I want to create a custom Microsoft Sentinel Model Context Protocol (MCP) tool using saved KQL queries in advanced hunting so I can have granular control over the data accessible to my AI agents.
 ---
diff --git a/articles/sentinel/datalake/sentinel-mcp-data-exploration-tool.md b/articles/sentinel/datalake/sentinel-mcp-data-exploration-tool.md
@@ -7,6 +7,7 @@ ms.topic: how-to
 ms.date: 12/12/2025
 ms.author: pauloliveria
 ms.service: microsoft-sentinel
+ms.subservice: sentinel-platform
 
 #customer intent: As a security analyst, I want to know the different tools available to explore security data in Microsoft Sentinel data lake
 ---
diff --git a/articles/sentinel/datalake/sentinel-mcp-get-started.md b/articles/sentinel/datalake/sentinel-mcp-get-started.md
@@ -7,6 +7,7 @@ ms.topic: get-started
 ms.date: 01/30/2026
 ms.author: pauloliveria
 ms.service: microsoft-sentinel
+ms.subservice: sentinel-platform
 
 #customer intent: As a security analyst, I want to configure Microsoft Sentinel MCP server so that I can use natural language to query security data and accelerate investigations.
 ---
diff --git a/articles/sentinel/datalake/sentinel-mcp-logic-apps.md b/articles/sentinel/datalake/sentinel-mcp-logic-apps.md
@@ -7,6 +7,7 @@ ms.topic: how-to
 ms.date: 12/12/2025
 ms.author: pauloliveria
 ms.service: microsoft-sentinel
+ms.subservice: sentinel-platform
 
 #customer intent: As a security analyst, I want to build Azure Logic Apps using Microsoft Sentinel MCP tools.
 ---
diff --git a/articles/sentinel/datalake/sentinel-mcp-overview.md b/articles/sentinel/datalake/sentinel-mcp-overview.md
@@ -7,6 +7,7 @@ ms.topic: overview
 ms.date: 12/01/2025
 ms.author: monaberdugo
 ms.service: microsoft-sentinel
+ms.subservice: sentinel-platform
 
 #customer intent: As a security analyst, I want to understand Microsoft Sentinel’s support for Model Context Protocol (MCP)
 ---
diff --git a/articles/sentinel/datalake/sentinel-mcp-responsible-ai-faq.md b/articles/sentinel/datalake/sentinel-mcp-responsible-ai-faq.md
@@ -7,6 +7,7 @@ ms.topic: concept-article
 ms.date: 11/18/2025
 ms.author: pauloliveria
 ms.service: microsoft-sentinel
+ms.subservice: sentinel-platform
 
 #customer intent: As a security analyst, I want to know the frequently asked questions about responsible AI in relation to using Microsoft Sentinel's collection of MCP tools 
 ---
diff --git a/articles/sentinel/datalake/sentinel-mcp-tools-overview.md b/articles/sentinel/datalake/sentinel-mcp-tools-overview.md
@@ -7,6 +7,7 @@ ms.topic: article
 ms.date: 12/01/2025
 ms.author: pauloliveria
 ms.service: microsoft-sentinel
+ms.subservice: sentinel-platform
 
 #customer intent: As a security analyst, I want to understand the different tools in Microsoft Sentinel MCP server 
 ---
diff --git a/articles/sentinel/datalake/sentinel-mcp-triage-tool.md b/articles/sentinel/datalake/sentinel-mcp-triage-tool.md
@@ -7,6 +7,7 @@ ms.topic: how-to
 ms.date: 12/01/2025
 ms.author: pauloliveria
 ms.service: microsoft-sentinel
+ms.subservice: sentinel-platform
 
 #customer intent: As a security analyst, I want to know the different tools available to triage incidents and hunt for threats 
 ---
diff --git a/articles/sentinel/datalake/sentinel-mcp-use-tool-azure-ai-foundry.md b/articles/sentinel/datalake/sentinel-mcp-use-tool-azure-ai-foundry.md
@@ -7,6 +7,7 @@ ms.topic: how-to
 ms.date: 01/30/2026
 ms.author: pauloliveria
 ms.service: microsoft-sentinel
+ms.subservice: sentinel-platform
 
 #customer intent: As a security analyst, I want to add Sentinel MCP tools in Microsoft Foundry.
 ---
diff --git a/articles/sentinel/datalake/sentinel-mcp-use-tool-copilot-studio.md b/articles/sentinel/datalake/sentinel-mcp-use-tool-copilot-studio.md
@@ -7,6 +7,7 @@ ms.topic: how-to
 ms.date: 11/18/2025
 ms.author: pauloliveria
 ms.service: microsoft-sentinel
+ms.subservice: sentinel-platform
 
 #customer intent: As a security analyst, I want to add Sentinel MCP tools in Microsoft Copilot Studio.
 ---
diff --git a/articles/sentinel/datalake/sentinel-mcp-use-tool-security-copilot.md b/articles/sentinel/datalake/sentinel-mcp-use-tool-security-copilot.md
@@ -7,6 +7,7 @@ ms.topic: how-to
 ms.date: 09/30/2025
 ms.author: pauloliveria
 ms.service: microsoft-sentinel
+ms.subservice: sentinel-platform
 
 #customer intent: As a security analyst, I want to add Sentinel MCP tools in Microsoft Security Copilot.
 ---
diff --git a/articles/sentinel/datalake/sentinel-mcp-use-tool-visual-studio-code.md b/articles/sentinel/datalake/sentinel-mcp-use-tool-visual-studio-code.md
@@ -7,6 +7,7 @@ ms.topic: how-to
 ms.date: 11/18/2025
 ms.author: pauloliveria
 ms.service: microsoft-sentinel
+ms.subservice: sentinel-platform
 
 #customer intent: As a security analyst, I want to add Sentiel MCP tool in Visual Studio Code.
 ---
diff --git a/articles/sentinel/datalake/sentinel-provider-class-reference.md b/articles/sentinel/datalake/sentinel-provider-class-reference.md
@@ -3,7 +3,8 @@ title: Microsoft Sentinel data lake Microsoft Sentinel Provider class reference
 description: Reference documentation for the Microsoft Sentinel Provider class, which allows you to connect to the Microsoft Sentinel data lake and perform various operations.
 author: EdB-MSFT
 ms.service: microsoft-sentinel
-ms.subservice: sentinel-graph
+ms.subservice: sentinel-platform
+
 ms.topic: reference 
 ms.author: edbaynash  
 ms.date: 02/08/2026
diff --git a/articles/sentinel/datalake/troubleshoot-sentinel-mcp.md b/articles/sentinel/datalake/troubleshoot-sentinel-mcp.md
@@ -7,6 +7,7 @@ ms.topic: how-to
 ms.date: 12/01/2025
 ms.author: pauloliveria
 ms.service: microsoft-sentinel
+ms.subservice: sentinel-platform
 
 #customer intent: As a security analyst, I want to understand how to troubleshoot issues when using Microsoft Sentinel's collection of MCP tools 
 ---
