關於這一集
Modern security teams are not short on alerts. The bigger challenge is knowing what deserves attention first and responding before an incident spreads.
In this episode of Demystifying Microsoft, Austin Kelly from Sourcepass MCOE explains how Microsoft Defender has evolved beyond traditional antivirus into a broader security platform for identities, endpoints, email, collaboration tools, cloud applications and data. The episode covers five Microsoft Defender features that help organizations connect security signals, prioritize real risk, and respond faster to active threats.
What You’ll Learn:
- How Microsoft Defender has expanded beyond endpoint antivirus
- Why Attack Disruption matters when an attacker is already inside the environment
- How Unified XDR connects separate alerts into one security incident
- Why email, Teams, SharePoint and OneDrive remain major areas for attack prevention
- How Exposure Management helps prioritize vulnerabilities by actual risk
- Why vulnerability volume alone does not show what needs to be fixed first
- How Microsoft Defender can surface unusual data movement and insider risk
- Where Microsoft Security Copilot can support faster investigation without replacing security professionals
About the Host:
Austin Kelly is a Client Success Manager at Sourcepass MCOE, a company focused on helping organizations simplify, secure, and optimize their Microsoft environments. He works closely with businesses to evaluate licensing, improve security posture, and align Microsoft investments with real operational needs.
Episode Highlights:
Austin explains why thinking of Defender purely as an endpoint antivirus misses most of what the platform now covers, including identities, email, cloud apps, devices and data.
Attack Disruption can automatically disable compromised accounts and contain affected devices. Austin explains why reducing the gap between detection and containment matters when attackers are trying to move laterally.
Email remains a common entry point, but the collaboration surface now extends across Outlook, Teams, SharePoint and OneDrive. Austin explains why protection needs to follow users across that stack.
Finding hundreds of vulnerabilities is easy. Deciding which ones materially reduce risk is harder. Austin explains how Exposure Management helps IT prioritize accordingly.
Austin shifts the conversation from keeping attackers out to controlling where sensitive information goes. Unusual downloads, risky sharing, and suspicious user activity matter whether the cause is malicious or accidental.
Episode Resources:
Reach out to Sourcepass MCOE for a Microsoft Defender strategy that keeps up with the times: https://sourcepassmcoe.com/demystifying-microsoft-contact?utm_source=podcast&utm_medium=show-notes&utm_campaign=demystifying-microsoft-show
Quotes:
- “The problem isn’t finding those vulnerabilities. The problem is finding out which ones matter.”
- “Protecting the data itself is really what security is all about.”
- “AI isn’t replacing security professionals. It’s really helping them work smarter and respond faster.”
- “Microsoft Defender, it’s not just another antivirus product anymore. It is a security platform.”
Demystifying Microsoft is handcrafted by our friends over at: fame.so
英語
美國
逐字稿 🔗
Are you the producer of this podcast?
Add a podcast transcript
Need Audio-to-Text?
Transcribe with Listen411 in Just 60 Seconds
本 Podcast 中的其他單集
Microsoft has a habit of dropping new capabilities into subscriptions without much noise. Business Premium is no longer just a "basic" option for small teams and Austin Kelly highlights why. The most immediate gain is the increase to a 100GB mailbox, which removes a long-standing frustration for he…
GoDaddy can make Microsoft 365 easy to adopt when a company is small. The friction tends to appear later, when IT needs access to controls that sit outside GoDaddy’s managed experience.
In this episode of Demystifying Microsoft, Nathan Taylor sits down with Lindsay Cowan, Senior Sales and Business …
Organizations tend to approach AI risk from one of two directions: restrict it heavily or encourage adoption quickly. Gabriel Friedlander, Founder and CEO of Wizer and former founder of ObserveIT, sees problems with both.
In this episode of Demystifying Microsoft, Nathan and Gabriel discuss why org…
For years, the AVD decision was closely tied to an Azure infrastructure decision. If you wanted Microsoft’s brokered remote desktop experience, the assumption was usually that the session hosts would live in Azure too.
AVD Hybrid changes that equation.
In this episode of Demystifying Microsoft, Nat…
免責聲明: 本頁面嵌入的 Podcast 和封面圖片來自 Sourcepass Center of Excellence for Microsoft，歸其所有者所有，與 Listen Notes, Inc. 無關聯，也未獲得 Listen Notes, Inc. 背書。
