The Microsoft Security Insights Show

It's Partner month on the MSI Show! This year we're focused solely on our Copilot for Security partners. Stop by to learn more about Copilot for Security and how Microsoft's partners are building solutions around this new AI service for security. Notes/Links: Learn Lives: https://learn.microsoft.com/en-us/shows/learn-live/microsoft-copilot-for-security/ Midwest Management Summit MOA: https://mmsmoa.com/registration/mms-2024-at-moa Microsoft Build: https://build.microsoft.com/ Copilot for Security Community Group: https://www.linkedin.com/groups/14345161/ Copilot for Security pricing table: https://azure.microsoft.com/pricing/details/microsoft-copilot-for-security/#pricing Copilot for Security pricing calculator: https://azure.microsoft.com/pricing/calculator/ Public Plugin List: https://learn.microsoft.com/en-us/security-copilot/plugin-overview Grant partners access to Microsoft Copilot for Security: https://learn.microsoft.com/en-us/security-copilot/grant-access-external-users Prompt Library: https://github.com/rod-trent/Copilot-for-Security/tree/main/Prompts Watch the Live Replay  

Our final 2024 episode for Women in Cybersecurity Month 2024! Show Notes/Links: Experts Live Kenya: https://www.expertslive.ke/ Cybergirls: https://cybergirls.cybersafefoundation.org/ ADPList: https://adplist.org/ Microsoft Build: https://build.microsoft.com/ Watch the live replay  

Hey! It's our 200th episode! What better way to celebrate than highlighting and celebrating Women in Cybersecurity Month 2024! Show Notes/Links LATAM Women in Cybersecurity - https://womcy.org/ Donate - https://womcy.org/product/donate-to-womcy/ Smartless podcast - https://www.smartless.com/   Developers, Developers, Developers…   Watch the Live Replay  

  Show Notes/Links: Women in Cloud: https://womeninCloud.com MDE common deployment mistakes: https://lnkd.in/dEtk7rCB Connect ServiceNow to Defender for Cloud https://lnkd.in/eGKrPHQ9 Create a ticket in Defender for Cloud https://lnkd.in/ePqUdNH5 Create automatic tickets with governance rules https://lnkd.in/exAcrQeF Protect your resources with Defender CSPM https://lnkd.in/eBaeyH9y Register now for the Microsoft Windows Server Summit 2024: https://www.microsoft.com/windows-server/blog/2024/03/11/register-now-for-the-microsoft-windows-server-summit-2024/ Watch the live replay  

Stop by as we highlight and celebrate Women in Cybersecurity Month 2024 and learn a bit about Star Trek! Show Notes/Links:     Watch the live replay…      

Stop by as we highlight and celebrate Women in Cybersecurity Month 2024! Show Notes/Links:     Watch the live replay…  

We take a short break in the Women in Cybersecurity month festivities to celebrate something else. You don't want to miss this! Show Notes/Links: Copilot for Security announcement: https://techcommunity.microsoft.com/t5/microsoft-security-copilot-blog/microsoft-copilot-for-security-general-availability-details/ba-p/4079970 Prompt Library: https://github.com/rod-trent/Security-Copilot/tree/main/Prompts Wallpaper: https://github.com/rod-trent/Security-Copilot/tree/main/Images/WindowsBackgrounds   Watch the live replay…  

Stop by as we highlight and celebrate Women in Cybersecurity Month 2024! "Don't have to be a turd to flush the toilet" - Kate Proctor Show Notes/Links: Catch us live on the next show: The Microsoft Security Insights Show - Women in Cybersecurity Month - March 2024 Watch the live replay…  

Stop by as we highlight and celebrate Women in Cybersecurity Month 2024! Show Notes/Links: Maria Young on LinkedIn: https://www.linkedin.com/in/maria-verardi/ Microsoft Pegasus: https://www.microsoft.com/startups/pegasus and https://foundershub.startups.microsoft.com/signup Copilot for Security: https://www.microsoft.com/security/business/ai-machine-learning/microsoft-security-copilot Must Learn KQL: https://aka.ms/MustLearnKQL The Definitive Guide to KQL from Microsoft Press: https://amzn.to/3TlGKil Microsoft Cybersecurity for Beginners – a curriculum: https://github.com/microsoft/Security-101 CompTIA Security + Exam Guide (SYO-601): https://amzn.to/3Pb3jDM   Watch the live replay…  

Stop by as we highlight and celebrate Women in Cybersecurity Month 2024! Show Notes/Links: Intern Program: https://www.microsoft.com/en-IE/earlycareers/internsapprenticeships What went Generally Available (GA) since February 2024? Granular filtering of Conditional Access (CA) policy list – CA policies can now be filtered on actor, target resources, conditions, grant control and session control. The granular filtering experience can help admins quickly discover policies containing specific configurations. Microsoft Entra ID Protection: Suspicious API traffic detection for users – This new detection is reported when abnormal Microsoft Graph traffic or directory enumeration is observed by a user. Suspicious API traffic might suggest that a user is compromised and conducting reconnaissance in their environment. Microsoft Entra ID Protection: Risk remediation on the Azure mobile app – Adds remediation capabilities of Microsoft Entra ID Protection which were previously only available in the Microsoft Entra portal to the Azure mobile app. This capability includes comprehensive reporting, offering insights into risky behaviors such as compromised user accounts and suspicious sign-ins, and includes the Risky users and Risky sign-ins report. New public previews Authentication Flows for Conditional Access – Supports the ability to configure CA policies to restrict or block the usage of certain authentication flows. The first iteration of this feature is limited to device code flow and authentication transfer. Conditional Access: Require reauthentication every time - Lets you require users to interactively provide credentials again before accessing critical applications and taking sensitive actions on any resource protected by CA. Workbook for impact analysis of risk-based Conditional Access policies - The Microsoft ID Protection risk analysis workbook helps admins understand what would happen if you create and enable Microsoft Entra ID Protection risk based CA policies in your environment. Workbooks are a collection of information, including queries, tables, and visualizations over a period of time to help you make sense of underlying data from an existing Log Analytics workspace.   Watch the live replay…  

Josh is a Senior Technical Specialist at Microsoft focused on Security in Healthcare and Life Sciences. That's a mouthful, but not at all boring. Stop by live as this discussion could go off the rails. Show Notes/Links: HIMSS - https://hde.himss.org/global-conference March is Women in Cybersecurity month. We have a stacked deck. 2 shows per week: https://securityinsights.substack.com/p/the-microsoft-security-insights-show And then Partner month in April - leading up to RSA in San Francisco - but focused on Copilot for Security. Upcoming Learn Lives with the MSI crew: https://learn.microsoft.com/en-us/shows/learn-live/microsoft-copilot-for-security/   Watch the live replay…  

Stop by and catch up with New Zealander Andre Camillo, Technology Specialist - Security and Compliance at Microsoft. Show Notes/Links: Ninja Training: https://aka.ms/NinjaTraining Microsoft Defender for Cloud Apps webinars: https://learn.microsoft.com/en-us/defender-cloud-apps/webinars Microsoft Defender for Cloud Apps e-books: https://learn.microsoft.com/en-us/defender-cloud-apps/e-books Learn Path - Secure cloud apps using Microsoft Defender for Cloud Apps: https://learn.microsoft.com/en-us/training/paths/m365-cloud-app-security-fundamentals/ Extended Detection and Response (XDR) | Microsoft Security: https://www.microsoft.com/en-us/security/business/solutions/extended-detection-response-xdr Detect and respond to modern attacks with unified SIEM and XDR capabilities: https://mslearn.cloudguides.com/en-us/guides/Investigate%20security%20incidents%20in%20a%20hybrid%20environment%20with%20Azure%20Sentinel William 'Bill' Post, inventor of Pop-Tarts, dies at 96: https://www.nbcnews.com/news/us-news/william-bill-post-inventor-pop-tarts-dies-96-rcna138784 Change the way we do security and the way security gets done.   Watch the live replay…  

Edward and Andrea are in Seattle. Brodie is back from the ski slopes. And Rod - well -- Rod is here, too. No telling what this episode might bring. Heads-up: Unfortunately, someone hit the big red button that stops the live stream, so this episode is quite a bit shorter than normal. However, we covered a LOT of ground in a short period of time. Show Notes/Links: Experts Live Denmark - https://events.justattend.com/events/conference-hub/584b32f5 Microsoft AI Tour - https://envision.microsoft.com Tip from Andrea: WDAT Conditional Access Policy - disable to allow Sentinel to connect to Defender XDR connector over API Microsoft AI Tour deck: Securing Generative AI applications Microsoft Entra Verified ID introduces Face Check in preview - https://www.microsoft.com/en-us/security/blog/2024/02/06/microsoft-entra-verified-id-introduces-face-check-in-preview/ Secure your resources with Microsoft-managed Conditional Access policies - Microsoft Entra ID | Microsoft Learn - https://learn.microsoft.com/en-us/entra/identity/conditional-access/managed-policies Watch the live replay…  

Sarahzin Shane and Andrew McMurray join us this week to talk about all things Microsoft Purview. Show Notes/Links: What is Microsoft Purview: https://learn.microsoft.com/en-us/purview/purview Just in Time for Purview: https://learn.microsoft.com/en-us/purview/endpoint-dlp-using-jit-protection Purview, turn on OCR capabilities: https://learn.microsoft.com/en-us/purview/ocr-learn-about Join the preview for the Cold Data Crawl: https://aka.ms/JoinCCP   Watch the live replay…  

Come meet Purav Desai! Purav talks about M365 Forensics and is the author of the DecipheringUAL Github series. This show, we'll talk about Microsoft Security across Defender, Sentinel and Purview Compliance. Show Notes/Links: DecipheringUAL GitHub Repo: https://github.com/PuravsPoint/DecipheringUAL Purav on LinkedIn: https://www.linkedin.com/in/purav-da346393/ Watch the live replay…