I’m thrilled to share that I’ve been awarded the Microsoft MVP status once again – this time in the Security category, with a focus on Cloud Security. This recognition feels particularly meaningful as it marks a full-circle moment in my professional journey. The Journey So Far My first stint as an MVP ran from 2018 […]
From MVP to Microsoft and Back Again: My Return to the Security MVP Community Read Post »
Introduction Modern cyberattacks are no longer linear or slow-moving. Adversaries pivot across identities, endpoints, and cloud workloads in minutes, exploiting trust relationships rather than individual vulnerabilities. While automated detection and response have dramatically reduced reaction time, they still assume that the attacker has already acted. At Microsoft Ignite 2025, Microsoft introduced Predictive Shielding in Defender XDR—a capability
Predictive Shielding in Microsoft Defender XDR: Moving from Disruption to Anticipation Read Post »
Microsoft Defender for Servers offers two powerful protection tiers—Plan 1 and Plan 2—but knowing which one to choose (and how to configure it properly) can make a major difference in cost and security outcomes. In this post, we’ll break down the key capability differences between Defender for Servers P1 and P2, explore granular configuration options
Cyber threats are evolving in sophistication and scale. From phishing emails to credential theft, from privilege escalation to cloud data exfiltration, attackers rely on chained techniques that slip past siloed defenses. Modern security operations demand a unified approach—one that combines Extended Detection and Response (XDR) with Security Information and Event Management (SIEM), enriched by intelligence
Advanced Hunting Across Microsoft 365 Defender and Sentinel Read Post »
Security teams everywhere face the same challenge: too many alerts, too little time. Microsoft Defender for Cloud is designed to reduce noise and highlight what matters most, but there’s a feature many SOC teams overlook—the alert feedback loop. This simple capability doesn’t just send input back to Microsoft. With the right process, your SOC can turn feedback
Closing the Loop: How to Use Alert Feedback in Microsoft Defender for Cloud Read Post »
Security teams today face an overwhelming reality: attackers are stealthier, data volumes are exploding, and compliance requirements are tightening. With the announcement of the Sentinel Data Lake, Microsoft is rethinking what a modern SIEM should look like. But why does a SIEM even need a data lake in the first place? Let’s break it down. 1.
Why a SIEM Needs a Data Lake: The Case of Microsoft Sentinel Read Post »
This brief post highlights the differences in feature availability depending on how your MX records are configured—specifically, whether they point directly to Exchange Online Protection (EOP), which is the recommended setup, or if you’re routing mail through a third-party email filtering solution before (or after) Microsoft Defender for Office 365 (MDO). While this overview is
Defender for Office 365 Dual Use / Defense In-Depth Read Post »
In today’s interconnected world, managing cybersecurity across multiple tenants is both a challenge and an opportunity. For organizations and Managed Service Providers (MSPs) working with countless customers—each with their own Azure and Microsoft 365 tenant—Microsoft Sentinel stands out as a powerful tool for ensuring robust security. Whether you’re scaling Sentinel deployments across distributed tenants or
This article contain security best practices to use when you’re designing, deploying, and managing your Exchange Online solution by using Microsoft 365. The best practices are intended to be a resource for IT pros. This might include designers, architects, developers, and testers who build and work with secure Exchange Online solutions.
Exchange Online Security Best Practices – 10 Tips From The Field Read Post »
This article contain security best practices to use when you’re designing, deploying, and managing your Exchange Hybrid solution by using on-premises Exchange and Microsoft 365. The best practices are intended to be a resource for IT pros. This might include designers, architects, developers, and testers who build and work with secure Exchange Hybrid solutions.
Exchange Hybrid Security Best Practices – 7 Tips From The Field Read Post »
