AI-Powered Security Threat Detection and Response

Microsoft Sentinel is an artificial intelligence-powered security system deployed by the Canada School of Public Service to centralize threat detection, investigation, and response across the enterprise. The system analyzes security logs, Microsoft 365 alerts, and hybrid cloud workloads to detect anomalies in logins, web visits, emails, file access, and cloud activity using machine learning and graph-based analytics. This system processes personal information and is currently in production. GC employees are the primary users of this system, and it provides enhanced security monitoring and incident response capabilities across the organization.