sentinel updates May 2026

Author: alexverboon

docs/sentinel.md

@@ -8,6 +8,25 @@
 
 ## Microsoft Tech Community Blogs
 
+- [Agent 365 connector: Monitor, hunt, and investigate AI agent activity in Microsoft Sentinel](https://techcommunity.microsoft.com/blog/microsoftsentinelblog/agent-365-connector-monitor-hunt-and-investigate-ai-agent-activity-in-microsoft-/4520836)
+- [Extending Sentinel Data Integration: Azure Blob Storage Support for CCF Connectors](https://techcommunity.microsoft.com/blog/microsoftsentinelblog/extending-sentinel-data-integration-azure-blob-storage-support-for-ccf-connector/4516896)
+- [What’s new in Microsoft Sentinel: April 2026](https://techcommunity.microsoft.com/blog/microsoftsentinelblog/what%E2%80%99s-new-in-microsoft-sentinel-april-2026/4516354)
+- [Use Data Wrangler to Streamline Your Microsoft Sentinel data lake Notebook Development](https://techcommunity.microsoft.com/blog/microsoftsentinelblog/use-data-wrangler-to-streamline-your-microsoft-sentinel-data-lake-notebook-devel/4490214)
+- [Enforce Cost Limits on KQL Queries and Notebooks in the Microsoft Sentinel Data Lake](https://techcommunity.microsoft.com/blog/microsoftsentinelblog/enforce-cost-limits-on-kql-queries-and-notebooks-in-the-microsoft-sentinel-data-/4511329)
+- [Running KQL queries on Microsoft Sentinel data lake using API](https://techcommunity.microsoft.com/blog/microsoftsentinelblog/running-kql-queries-on-microsoft-sentinel-data-lake-using-api/4503128)
+- [Microsoft Sentinel data federation: Expand visibility while preserving governance](https://techcommunity.microsoft.com/blog/microsoftsentinelblog/microsoft-sentinel-data-federation-expand-visibility-while-preserving-governance/4511258)
+- [How to Ingest Microsoft Intune Logs into Microsoft Sentinel](https://techcommunity.microsoft.com/blog/microsoftsentinelblog/how-to-ingest-microsoft-intune-logs-into-microsoft-sentinel/4508562)
+- [Estimate Microsoft Sentinel Costs with Confidence Using the New Sentinel Cost Estimator](https://techcommunity.microsoft.com/blog/microsoftsentinelblog/estimate-microsoft-sentinel-costs-with-confidence-using-the-new-sentinel-cost-es/4507062)
+- [Introducing the New Microsoft Sentinel Logstash Output Plugin (Public Preview!)](https://techcommunity.microsoft.com/blog/microsoftsentinelblog/introducing-the-new-microsoft-sentinel-logstash-output-plugin-public-preview/4508904)
+- [Accelerate Agent Development: Hacks for Building with Microsoft Sentinel data lake](https://techcommunity.microsoft.com/blog/microsoftsentinelblog/accelerate-agent-development-hacks-for-building-with-microsoft-sentinel-data-lak/4503039)
+- [Microsoft Sentinel MCP Server with external AI models (Claude) for natural language investigations](https://techcommunity.microsoft.com/blog/microsoftsentinelblog/microsoft-sentinel-mcp-server-with-external-ai-models-claude-for-natural-languag/4507013)
+- [How Granular Delegated Admin Privileges (GDAP) allows Sentinel customers to delegate access](https://techcommunity.microsoft.com/blog/microsoftsentinelblog/how-granular-delegated-admin-privileges-gdap-allows-sentinel-customers-to-delega/4503123)
+- [Agentic Use Cases for Developers on the Microsoft Sentinel Platform](https://techcommunity.microsoft.com/blog/microsoftsentinelblog/agentic-use-cases-for-developers-on-the-microsoft-sentinel-platform/4503041)
+- [Microsoft Sentinel is now supported in Unified RBAC with row-level access](https://techcommunity.microsoft.com/blog/microsoftsentinelblog/microsoft-sentinel-is-now-supported-in-unified-rbac-with-row-level-access/4503121)
+- [Turning historical patterns into actionable detection pipelines with Microsoft Sentinel data lake](https://techcommunity.microsoft.com/blog/microsoftsentinelblog/turning-historical-patterns-into-actionable-detection-pipelines-with-microsoft-s/4503126)
+- [Top 5 Microsoft Sentinel Queries for Threat Hunting](https://techcommunity.microsoft.com/blog/microsoftsentinelblog/top-5-microsoft-sentinel-queries-for-threat-hunting/4497667)
+- [Unlocking value with Microsoft Sentinel data lake](https://techcommunity.microsoft.com/blog/microsoftsentinelblog/unlocking-value-with-microsoft-sentinel-data-lake/4497660)
+- [Introducing the next generation of SOC automation: Sentinel playbook generator](https://techcommunity.microsoft.com/blog/microsoftsentinelblog/introducing-the-next-generation-of-soc-automation-sentinel-playbook-generator/4494438)
 - [Accelerate Your UEBA Journey: Introducing the Microsoft Sentinel Behaviors Workbook](https://techcommunity.microsoft.com/blog/microsoftsentinelblog/accelerate-your-ueba-journey-introducing-the-microsoft-sentinel-behaviors-workbo/4488278)
 - [Three ways to run KQL on Microsoft Sentinel data lake: Interactive, Async, or Jobs](https://techcommunity.microsoft.com/blog/microsoftsentinelblog/three-ways-to-run-kql-on-microsoft-sentinel-data-lake-interactive-async-or-jobs/4494657)
 - [Unlocking the power of Notebooks with Microsoft Sentinel data lake](https://techcommunity.microsoft.com/blog/microsoftsentinelblog/unlocking-the-power-of-notebooks-with-microsoft-sentinel-data-lake/4494656)