SOC optimization, the unified Defender portal and MSSP operation
How SOC optimization finds unused tables and missing detections, what the Defender portal adds to Sentinel and what stays in Azure, the one-primary-workspace rule, running Sentinel for many tenants with Lighthouse, B2B and the multitenant portal, health and audit tables, content as code, and a 30-60-90 day plan for a mid-size SOC.