S6E28 - Automate Your Security Baseline with Microsoft’s Open-Source Assessment Tool
In this episode, we dive into Microsoft’s Zero Trust Assessment - an open-source, automated tool that scans hundreds of Entra ID and Intune settings against NIST, CISA, CIS, and Microsoft’s own internal baselines. Discover how it aligns with the Secure Future Initiative, delivers actionable remediation, and turns Zero Trust from theory into measurable reality. Perfect for CISOs, SecOps teams, and anyone tired of spreadsheet audits.
Key Takeaways:
The Pain of Manual Zero Trust Audits
What the Zero Trust Assessment Actually Does
Why automate your security assessments
What did you think of this episode? Give us some feedback via our contact form, Or leave us a voice message in the bottom right corner of our site.Read transcript
--------
31:55
--------
31:55
S6E27 - Microsoft updates October- new products and features released
This week, Alan and Sam talk about new features and services that have gone into Public Preview or General Available status in the last month. We dive into a couple of these updates that peaked our interest.
Some of the Microsoft product features and update we covered:
Key Microsoft Entra, Intune and Defender features and updates
Lots of Azure changes and new features
What did you think of this episode? Give us some feedback via our contact form, Or leave us a voice message in the bottom right corner of our site.Read transcript
--------
46:12
--------
46:12
S6E26 - Classify and protect your data using Purview sensitivity labels
In this episode, Alan and Sam drive into the importance of classifying data in an organisation. Alan goes through the capability in Purview to tag files and encrypt them. Here are a few things we covered in this episode:
Why is it important to classify data in an organisation
How can Purview help with the applying labels to data
How to get started and the process for getting users to adopt the process
How is the Purview capability licensed
What did you think of this episode? Give us some feedback via our contact form, Or leave us a voice message in the bottom right corner of our site.Read transcript
--------
40:00
--------
40:00
S6E25 - Securing Azure's Core: Microsoft Defender for Resource Manager, Key Vault, and APIs
In this episode, we dive into three key Cloud Workload Protection Platform (CWPP) offerings within Microsoft Defender for Cloud: Defender for Resource Manager, Defender for Key Vault, and Defender for APIs. Our Q&A format explores how these tools safeguard Azure environments against sophisticated threats, from management layer exploits to API vulnerabilities.
Key Takeaways:
Defender for Resource Manager monitors and protects against suspicious operations in Azure's management layer.
Defender for Key Vault adds native threat protection to detect anomalous access to secrets and credentials.
Defender for APIs provides full lifecycle security for APIs in Azure API Management, including inventory, posture recommendations, and runtime threat detection.
These plans integrate seamlessly into Defender for Cloud's broader CNAPP framework for multi-cloud and hybrid protection.
What did you think of this episode? Give us some feedback via our contact form, Or leave us a voice message in the bottom right corner of our site.Read transcript
--------
57:21
--------
57:21
S6E24 - Microsoft updates September - new products and features released
This week, Alan and Sam talk about new features and services that have gone into Public Preview or General Available status in the last month. We dive into a couple of these updates that peaked our interest.
Some of the Microsoft product features and update we covered:
Key Microsoft Entra, Intune and Defender features and updates
Lots of Azure changes and new features
What did you think of this episode? Give us some feedback via our contact form, Or leave us a voice message in the bottom right corner of our site.Read transcript
Listen with Alan Armstrong and Sam Foot as we talk about all things Microsoft Azure!
We are both technical consultants working with Azure day in, day out. Alan focuses on Identity and Security automation while Sam is a .NET developer deploying PaaS and SaaS solutions on Azure.
Each episode we have a topic we cover and we highlight some key news that we are interested in. No fluff, sales or products here, just two technical people having a light hearted chat.
France