Security operations center (SOC) teams use centralized SIEM and SOAR solutions to protect their increasingly decentralized digital estate. While legacy SIEMs can maintain good coverage of on-premises assets, on-premises architectures may have insufficient coverage for cloud assets, in different cloud platforms. In contrast, Microsoft Sentinel can ingest data from both on-premises and cloud assets, ensuring coverage over the entire estate. In this course we will discuss the reasons for migrating from a legacy SIEM, and you will learn how to plan out the different phases of your migration.