The Microsoft Security Insights Show

Join us this week as we talk with Merill Fernando, Principal Product Manager about all things Microsoft Entra. There's been lots of news and announcement recently. In this episode, Merill will attempt to explain them all. And maybe we can get his take on the rebranding of AAD. Show Notes/Links: Entra.News - Your weekly dose of Microsoft Entra Entra.News - Your weekly dose of Microsoft Entra Entra.News is a weekly newsletter of the latest Microsoft Entra related news, blog posts and videos from Microsoft, MVPs and infosec experts, curated by Merill Fernando. To feature your content on Entra.News tag with #entra or mail [email protected] By Merill Fernando Merill's blog: https://merill.net Identity Blog: https://aka.ms/IdentityBlog Microsoft Entra Family: https://www.microsoft.com/en-us/security/business/microsoft-entra Microsoft Entra delivers 240 percent ROI, according to new Forrester study: https://www.microsoft.com/en-us/security/blog/2023/04/20/microsoft-entra-delivers-240-percent-roi-according-to-new-forrester-study/ Entra Learn Paths: https://learn.microsoft.com/en-us/training/browse/?products=entra Microsoft Certified: Identity and Access Administrator Associate - SC-300: https://learn.microsoft.com/en-us/certifications/identity-and-access-administrator/ Azure AD is now Microsoft Entra ID: https://techcommunity.microsoft.com/t5/microsoft-entra-azure-ad-blog/azure-ad-is-becoming-microsoft-entra-id/ba-p/2520436 Conditional Access for Protected Actions is Now Generally Available: https://techcommunity.microsoft.com/t5/microsoft-entra-azure-ad-blog/conditional-access-for-protected-actions-is-now-generally/ba-p/3888723 Navigating Microsoft Security & Compliance Products: Skill Map - A Guided Journey for Experts and Beginners Alike: https://www.linkedin.com/posts/samehyounis_microsoftsecurity-cybersecurityskills-navigateyourgrowth-activity-7097185759572480000-VcUS/ Security 101: https://www.microsoft.com/en-us/security/business/security-101 Open book Microsoft certification exams: https://techcommunity.microsoft.com/t5/microsoft-learn-blog/introducing-a-new-resource-for-all-role-based-microsoft/ba-p/3500870   Catch the full experience with the live show video replay…              

Join us this week as we dig into some of the burning Microsoft Security topics of the day and listen to hear how many times the term 'AI' is used. Show Notes/Links: Microsoft Entra Management and Security Tools: https://www.cloud-architekt.net/links/ How to Setup User Risk Reports to Email in Microsoft Entra: https://ourcloudnetwork.com/how-to-setup-user-risk-reports-to-email-in-microsoft-entra/ Microsoft Defender for Identity expands its coverage with new AD CS sensor! https://techcommunity.microsoft.com/t5/microsoft-365-defender-blog/microsoft-defender-for-identity-expands-its-coverage-with-new-ad/ba-p/3894215 AZ Mask Plugin for Masking: https://chrome.google.com/webstore/detail/az-mask/amobeamdmdnloajcaiomgegpakjdiacm I AM AI Merch: https://must-learn-kql.creator-spring.com/listing/get-i-am-ai After the Blog Episode 2: https://rodtrent.substack.com/p/episode-2-azure-openai-content-filtering#details Catch the full experience with the live show video replay…  

It's been a long, long while since we've not had a guest on the show. But there's been lots and lots of news, thoughts, and discussions we've wanted to catch you all up on. This is the episode for all of that! Come join us as we dig deep into the burning horizons of security at Microsoft. We live for audience questions! Show Notes and Links Azure Stack Sentinel Support - November 13, 2019: https://techcommunity.microsoft.com/t5/azure-stack-blog/the-latest-security-enhancements-for-azure-stack-hub/ba-p/1006241 Help Protect your Exchange Environment With Microsoft Sentinel - https://techcommunity.microsoft.com/t5/microsoft-sentinel-blog/help-protect-your-exchange-environment-with-microsoft-sentinel/ba-p/3872527 Last time we had a show without a guest - February 6, 2023 - https://microsoftsecurityinsights.com/microsoft-security-insights-show-episode-138-just-us-probably KQL Datasets for Azure OpenAI Bot: https://github.com/rod-trent/OpenAISecurity/tree/main/Datasets Must Learn AI Security series: https://aka.ms/MustLearnAISecurity   Catch the full experience with the live show video replay…  

Join us as we discuss what was important enough for Matt Soseman to leave 11 years at Microsoft to join The Partner Masters as their CTO & Co-Founder. If you're a Microsoft partner struggling to take advantage of all that partnership has to offer or don't believe that your org is getting the best value, this episode will awaken you to the benefits of a managed partnership. Show Notes/Links: Must Learn AI Security: https://aka.ms/MustLearnAISecurity The Partner Masters website: https://thepartnermasters.com/ Matt Soseman LinkedIn: https://www.linkedin.com/in/mattsoseman/ There were no demos this episode, but make sure to catch the full experience with the live show video replay…    

Welcome back Chris Stelzer! Chris was on the show recently but is back to show us how he's architected ChatGPT into SOC operations with Microsoft Sentinel. Now that ChatGPT has been updated with many new features - including functions - don't miss this live! Lots of demos. Show Notes/Links: WSUS News: https://techcommunity.microsoft.com/t5/windows-it-pro-blog/importing-updates-into-wsus-is-changing/ba-p/3882937 Microsoft Security Insights Show Episode 136 - Chris Stelzer, Senior TS at Microsoft: https://microsoftsecurityinsights.com/microsoft-security-insights-show-episode-136-chris-stelzer-senior-ts-at-microsoft Episode 127: Microsoft Sentinel StaT with Mike Palitto and Andrea Fisher https://microsoftsecurityinsights.com/episode-127-microsoft-sentinel-stat-with-mike-palitto-and-andrea-fisher Chris' Postman page: https://www.postman.com/scstelz There’s LOTS of demos this episode, so make sure to catch the live show video replay…   Live show video replay: https://www.youtube.com/live/_JHXnkKcfq4?feature=share Want to watch the live show? You can always go back and watch this episode and others on our YouTube channel. Subscribe today!

What a unique and valuable time. We chat with Philippe Humeau, the CEO and co-founder of CrowdSec (crowdsec.net). CrowdSec is an open-source & collaborative IPS able to analyze visitor behavior by parsing logs & provide an adapted response to all kinds of attacks. The game-changer is that the solution also enables users to protect each other. Each time an IP is blocked, all community members are informed so they can also block it. That way, they are generating a real-time crowdsourced CTI database. We’ll be working together to create an integration with Microsoft Sentinel. Stay tuned for a future update. Show Notes/Links: CrowdSec Basic Steps to Create Your Own Simple Copilot Bing Chat Enterprise, your AI-powered chat for work, available in Microsoft Edge sidebar Microsoft adds a 'Security Copilot' to its AI assistant line-up Microsoft puts a price tag on its AI "copilots" for business Want to watch the live show? You can always go back and watch this episode and others on our YouTube channel. Subscribe today!

Join us this episode as we cover the burning, audience requested topic of Cybersecurity Insurance. John O'Neill, Sr. CIO at MFG is an expert in this area and speaks about it regularly at conferences and in webinars. Show links Azure AD is Becoming Microsoft Entra ID - Microsoft Community Hub Microsoft Entra Internet Access Preview Microsoft Incident Response  

Join the crew as we chat with Morten Waltorp Knudsen, the hardest working Microsoft MVP around about some solutions he's developed. In this episode, we get a couple extra wonderful surprise in Nick Kiest, the PM for Data Collection Rules (DCRs), and Niclas Madson, Microsoft Community Connection Program Blackbelt! Show Links: AzLogDcrIngestPS PowerShell Module on GitHub: https://github.com/KnudsenMorten/AzLogDcrIngestPS Module in the PowerShell gallery: https://www.powershellgallery.com/packages/AzLogDcrIngestPS/1.4.1 Master Azure Logging in depth: https://mortenknudsen.net/?p=1687 Set up resources required to send data to Azure Monitor Logs using the Logs Ingestion API: https://learn.microsoft.com/en-us/azure/azure-monitor/logs/set-up-logs-ingestion-api-prerequisites Migrate from the HTTP Data Collector API to the Log Ingestion API to send data to Azure Monitor Logs: https://learn.microsoft.com/en-us/azure/azure-monitor/logs/custom-logs-migrate Join the Custom Connection Program: https://aka.ms/JoinCCP

This week we talk with Grant Thornton’s National Cybersecurity Leader Peter Morin about the differences between IT and OT (the Hatfield’s and the McCoys) and securing critical scale operations for manufacturing, energy, and the like. What a most interesting discussion! And of course, there were first-ever announcements. There are always announcements.   Show links: PSA: Migrate from the Threat Intelligence Platform Connector to the Threat Intelligence Solution in Microsoft Sentinel KQL Queries Behind the Microsoft Sentinel Overview Page Grant Thornton

In this episode, we catch up with friend of the show, Rin Ure, about his new role at Microsoft and how he sees AI changing the way SOCs operate. Rin runs the Cyber Defense Operations Center One Cloud SOC Triage and Analysis team in the US. They are the team that handles the triage and analysis SOC requests for Microsoft, it’s services and for their Cloud and AI customers. Show Links: Weekly OpenAI Newsletter: https://rodtrent.com/jtl Azure OpenAI community on LinkedIn: https://rodtrent.com/65g Microsoft Cyber Defense Operations Center (CDOC): https://rodtrent.com/594 Microsoft Security Copilot: https://rodtrent.com/6pt Microsoft Corporate, External, and Legal Affairs (CELA): https://rodtrent.com/hdy Pluralsight AI learning: https://rodtrent.com/3i5 SANS (SEC595: Applied Data Science and AI/Machine Learning for Cybersecurity Professionals): https://rodtrent.com/1i3 Microsoft Security Insights Discord Server: https://discord.gg/2ktJHTrSAt