Everyday Defender

02x07-b2c_you_later.auth

In this episode: Koos recently had to help a customer getting their Entra ID External ID connected to the SOC and discovered that it wasn't as straightforward as you might think. Let's revisit what…

• Transcript

02x06-silence_of_the_logs.kql

In this episode Chris takes a look at Exchange-attribute Source of Authority (SOA) transfer - could this finally be the answer to removing that last Exchange server we've all been waiting for? Koos…

• Transcript

02x05-maester_of_puppets.ps1

Live and face-to-face again, this time recorded from Experts Live Netherlands. Chris previews his EL:NL session on practical SecOps for Microsoft 365: how to automate the boring-but-critical parts…

• Transcript

02x04-terminal_velocity.tui

In this episode Chris covers some common Intune deployment mistakes he's come across while working with various customer environments.Koos has become a full-time Claude (Code) user over the past…

02x03-azure_fridays_but_its_us.now

In this episode Koos discusses the Odido data breach in The Netherlands by hacker group Shinyhunters, one of the largest public data leaks in Dutch history. Touching on vishing, misconfigurations,…

• Transcript

02x02_you_shall_not_pass.key

In this episode, Chris take a look at PowerShell modules and how managing M365 and Entra ID has changed over the years. And Koos likes to re-visit Passkeys. This is not new and we covered it earlier…

• Transcript

02x01_scu_later_alligator.json

In this episode, Chris explores Agent 365 while Koos takes another look at Security Copilot. Since our last episode, several new announcements have dropped, making this a great time to dive in and…

• Transcript

02x00_insert_disk_2.img

Not your regular episode but an announcement for our upcoming second season. Chris and I share what we've been working in preparations for season 2, and what you can expect from us during the…

• Transcript

01x12_df3ndr.eof.01.tar.gz

📍 Live from Times Square, New York City 🇺🇸 This was the first edition of Experts Live in the United States, and we couldn't be more proud to be part of it!We wrap up Season One with a special in-pers…

• Transcript

01x11_trust_me_im_a_keyboard.hid

In this episode Chris asks "To block or not to block?" as he looks at geo blocking in Conditional Access, while Koos explores the human element in cybersecurity.Full show notes available…

• Transcript

01x10_lake_it_till_you_make_it.log

In this episode Koos takes a look at the recent release of Sentinel data lake and Chris shares 5 tips to help your Entra Privileged Identity Management (PIM) deployment.Full show notes available on…

• Transcript

01x09 | open_port_regrets.pcap

In this episode Chris revisits Microsoft Entra Suite and takes a deep dive into GSA - Global Secure Access. Koos did a project recently where Defender for External Attack Surface Management (EASM)…

• Transcript

01x08 | copilot_reinstall.bat

In this episode Koos returns to a somewhat controversial topic - Security Copilot, but this time without the hype and of course with some practical tips. Chris introduces Microsoft Entra Suite in…

• Transcript

01x07 | summarize harden(Tenant) | take 5

In this episode Chris shares 5 things you should configure in Microsoft 365 to make your tenant more secure and Koos introduces "Summary Rules" in Microsoft Sentinel. What are…

• Transcript

01x06_ctrl_alt_disrupt.bat

In this episode we look at one of Defender XDRs most exiting features at the moment: Attack Disruption! Why it is so exiting and how you can start using it today? Full show notes available on our…

• Transcript

01x05_DEVICEHIGH=MVPSUMMIT.SYS

In this episode... Booting high on community energy! In this special in-person episode, recorded on-site at the Microsoft Campus during the MVP Summit 2025, Koos and Chris share behind-the-scenes…

• Transcript

01x04_RE:authmail.eml-and-siem.kql

In this episode...* Chris revisits his e-mail authentication and security from last time to dig a little deeper.* Koos recently did some talks about SIEM migrations to Sentinel and keeping things as…

• Transcript

01x03_authmail.eml-and-identity.gov

In this episode...Chris takes a look at email security and digs into SPF, DMARC and all the other acronyms.Koos recently had some experience with Entra ID Entitlement Management he wants to share.…

• Transcript

01x02_Get-Ignite24Recap.ps1

In this episode we do a recap of some of the security announcements from Microsoft Ignite 2024. Chris takes a look at the upcoming changes to Intune while Koos shares some thoughts on new…

• Transcript

01x01_mfa.exe

In this episode Chris has some thoughts about MFA usage and deployment, and Koos recently ran into some issues with Passkeys and wants to share a couple of do's and don't's and also discuss future…

• Transcript