Avsnitt
-
How can Entra ID Protection help keep your organization resist security breaches? Richard talks to Corissa Koopmans about thinking beyond authentication and authorization and into conditional access - knowing what is normal and abnormal behavior for your users. Corissa recommends looking at the Entra ID Protection Dashboard - whether you have configured anything or not - to see what potential risks you have today. Whether it's logins from places where you have no workers or some "impossible travel" or weird browser connections, ID Protection detects and identifies those events. When combined with conditional access, Defender for Cloud, or even Microsoft Intune - you get a "better together" effect that makes it easier to know when something bad is happening!
Links
Microsoft Entra ID ProtectionAzure Active Directory Conditional AccessEntra ID Protection DashboardLog Analytics AgentMicrosoft IntuneMicrosoft Defender for CloudMicrosoft SentinelRecorded December 10, 2024
-
Do you Kusto? Richard talks to Mark Morowczynski about his new book, The Definitive Guide to KQL, and the power of Kusto to look across your Azure tenant and understand operational and security issues. Mark talks about being able to query across all log sets, telemetry, the M365 graph, and more - to help understand issues. The book provides example queries you could run today, including knowing the first and last time a user logged on and what devices they used. There are examples of calculating baseline behavior for an account so that you can see when unusual activity starts. There are a ton of excellent queries for operational excellence and cybersecurity - get started today! And for RunAs listeners, you can use code KUSTO to get 30% off the book!
Links
Threat Intelligence BlogPhishing-Resistant Passwordless AuthenticationKusto Query LanguageMicrosoft SentinelMicrosoft Security CopilotKQL Guide on GitHubRecorded December 19, 2024
-
Saknas det avsnitt?
-
What about SQL Server in Microsoft Fabric? Richard chats with Anna Hoffman about the preview release of SQL 2025 in Microsoft Fabric and the power of having your data store where you are doing your analytics and machine learning! Anna talks about new applications being developed using AI technologies like large language models and that often those applications need a data store - so why not keep it with the application in a configuration ideally suited for that work? The conversation digs into the relationship between existing SQL data stores and Fabric, how interconnections can happen, and perhaps a future of motion between them - but for now, it's a preview, so take a look!
Links
SQL Database in Microsoft FabricMicrosoft PurviewMicrosoft EntraAzure Private Link for Azure SQL DatabaseMicrosoft Copilot for Azure SQL Databasesp_invokeRecorded December 16, 2024
-
Are your docs part of your DevOps cycle? Richard chats with Mattias Karlsson about automating documentation for APIs, cloud resources, and more! Mattias talks about using tools to build text files that contain every Azure resource being utilized, hopefully per application, along with API info, NuGet packages, and more. He also digs into the different audiences for that documentation - business wants to know what website exist, both interior and publically facing. Operations need to know what resources are consumed on-premises and in the cloud. Development is always looking for versions of APIs, calling approaches, etc. Maintaining documentation by hand is tedious and perpetually out-of-date. But if you can get up to speed with the tooling, you can make your documentation generate at the speed of deployment!
Links
BicepAzure Resource InventoryAzure CLIPulumiRecorded October 29, 2024
-
How is least privilege different in 2025? Richard talks to Bailey Bercik about the ongoing efforts to minimize users, administrators, and applications' privileges in 2025. Bailey talks about the power of Entra Permissions Management to help you see what permissions are going unused on various accounts so that you can tailor rights to individual accounts without things becoming unmanageable. Artificial intelligence is a forcing function for many permission issues, with these new tools potentially creating problems when given unnecessary rights. But those same tools can help you understand where permissions are being underutilized and help protect your systems!
Links
Principle of Least PrivilegeEnable Permission ManagementEntra Permissions ManagementMicrosoft Security CopilotCopilot in Microsoft EntraSEC545: GenAI and LLM Application SecurityHow Attackers Use Apps to Attack VideoRecorded December 16, 2024
-
For the first show of 2025, let's talk about being a sysadmin in the coming year. This is the sixth year of Richard going solo on the show to talk about the things he's seen in the past year and speculate a bit on the next year, at least for sysadmins. Economic uncertainty is still a thing, as is employment. The security situation continues to be tough - and getting worse. But remarkable new tools, including large language models, are on the horizon to make things a bit easier. The adoption rates for LLMs aren't as quick as some people would like, but things are happening, and they can provide value. However, you have to do your homework. Oh, and then there's Windows!
Links
Microsoft CopilotMicrosoft 365 CopilotMicrosoft Security CopilotGitHub CopilotPrivileged Identity ManagementExtended Security Updates program for Windows 10Plan for Windows 10 EOS with Windows 11, Windows 365, and ESULAPSMicrosoft FabricRecorded December 31, 2024
-
What does Windows want for Christmas? Richard chats with Paul Thurrott about the crazy year that Windows has had and what 2025 holds. Paul starts with the Ignite keynote that focused on Windows being an open platform - which sounds funny on the surface, but has some logic to it! Security is a key part of that story, which brings up the issues around Crowdstrike and the Secure Future Initiative. And then there's Windows 10 going out of support in 2025 - what choices do you have going forward? Two grumpy old men ring out the year – have a great holiday season!
Links
Secure Future InitiativeWindows Security and ResiliencyWhat's new in Windows Security, Productivity, and CloudWindows Server 2025Windows 10 End of SupportRecorded December 5, 2024
-
Ready for some real-time intelligence? Richard chats with Yitzhak Kesselman about Real-Time Intelligence in Microsoft Fabric. Yitzhak talks about what it means to be real-time - that your company has a data analytics need with an ROI affected by a short amount of time. Perhaps it's a factory making products incorrectly or even issues with response times in a call center. The process involves bringing streaming data sources into the real-time hub and then attaching dashboards to them to see data as it changes. Fabric simplifies this tooling so domain experts can do much of the exploration. Once you have valuable and actionable information coming in, you have the activator options, including messaging via email or Teams, all the way to Power Automate to affect almost anything!
Links
Real-Time Intelligence in Microsoft FabricFabric Real-Time HubReal-Time DashboardReal-Time ActivatorPower AutomateRecorded October 29, 2024
-
Can government agencies use M365 Copilot? Soon! Richard chats with Angela Dugan about how government entities: federal, state, counties, and cities, are exploring the power of M365 Copilot. Angela talks about the US Government GCC process for making M365 Copilot available in the next few months. The conversation turns to the usual challenges of data governance and security - all the same problems any other organization would have with tools that explore every element of data. Getting your data estate in order isn't easy - but the potential benefits in government are tremendous - providing more services to constituents for less cost!
Links
Microsoft 365 Copilot GCCSharePointOneDrive for US GovernmentMicrosoft PurviewRecorded October 29, 2024
-
Need some gift ideas for your favorite sysadmin? We're here for you! Richard brings back Rick Claus and Joey Snow for another round of great gadgets that sysadmins love. There are some inexpensive options, some expensive options, some silly things, and some awesome toys! Share this show with your loved ones to help them get something great for you!
Links
LinkTreeThe Help Desk Girl Stickers50th anniversary of D&D DiceNixie Tube ClockRGB Raspberry Pi 5 CaseSCRIB3DMeater Pro DuoXBox Series S 2-Slice ToasterSteamDeck OLEDROG Ally XBaby's Blogging KitEmber Baby Bottle SystemTryHackMeWiFiManElgato PrompterDual Arc Electric Candle LighterYoga Slim 7xOzloSleepLeatherman Wave PlusThe Ultimate Guide to Rebuilding a CivilizationRecorded November 29, 2024
-
How does your organization respond to incidents? While at NDC Porto, Richard chatted with Mandi Walls about her experiences with different incidents, from corrupted files to data center failures. Mandi talks about detecting and determining the scope of an incident, whether it is specific to a customer (or group of customers), or possibly system wide. The conversation ranges over external attacks, bad software updates, unique configuration problems, and more. Keeping good records during the incident helps clean up after the event and provides for an effective retrospective.
Links
PagerDutyRecorded October 17, 2024
-
How do you test your database? While at NDC Porto, Richard chatted with Dan Mallott about building unit tests for transactional databases like SQL Server. Dan talks about using testing frameworks constructed for the purpose, like TSQL-T, to make it easier to test individual database elements, from stored procedures to column constraints. The conversation digs into the challenges around testing, tolerating the changes to the database, and tweaking how you write your T-SQL code to be more testable. But the power of getting database tests into your CI/CD pipeline is enormous - catch more problems in testing before they become problems in production!
Links
tsqltDbFitRecorded October 17, 2024
-
What's happening with SQL Server Management Studio? Richard chats with Erin Stellato, now at Microsoft, about the big jump coming for SSMS. Erin talks about how folks felt SSMS was a bit neglected when the reality is that there was a push to catch up with its parent codebase in Visual Studio. However, the next version of SSMS makes that jump, which opens the door to some excellent extension models. The conversation dives into the role of the Copilots in SQL Server through SSMS - helping you understand databases, write queries, and diagnose problems - eventually!
Links
SQL Server Management StudioAzure SQL DatabaseSQL Server Integration ServicesSQL Server Data ToolsSQL FormatterRecorded September 26, 2024
-
How does Software-Defined Networking in Azure work? Richard chats with Aidan Finn about his experiences working with the suite of Azure networking products, including Firewall and Route Server. Aidan talks about the training available on Microsoft Learn to get up to speed with the power of Azure Firewall, including building policy rule sets. The conversation also explores the power of defining how traffic can move within your network to clarify when potentially malicious software is active.
Links
Azure FirewallSecure Networks with Zero TrustAzure Route ServerAzure Firewall TrainingAzure Firewall Policy Rule SetsRecorded September 24, 2024
-
ARM for Windows is here in the form of the Snapdragon Copilot+ PCs - how do you update them? Richard talks with Aria Hanson about how Windows Updates treat ARM like just another Windows device - all the updates! Aria talks about the transition time with Windows 24H2 update, which has some specific Copilot+ PC features. But when looking at ARM-based Windows devices, don't just focus on the Copilot part; check out the great battery life and the simpler architecture that should lead to long-life machines. The conversation also digs into the Windows Insider program, which now has four channels for updates, in order of likelihood to blue screen: Canary, Dev, Beta, and Release Preview.
Links
Windows InsidersCopilot+ PCsWindows Insider BlogWindows AutopatchWindows AutopilotPlutonRecorded September 18, 2024
-
How can you secure your company information with Azure Virtual Desktop? Richard talks to Jim Duffy about his work helping companies comply with NIST SP 800-171 security standards. These are the new standards required for Department of Defense contracting - including all subcontractors and suppliers. The security standard is thorough, with over 100 requirements. And you have to be audited to show that you comply! Even if you don't work with the government, the NIST security standard is excellent, and Jim talks about how you can use AVD to create a secure enclave for protecting data. And if you need help complying with NIST 800-171, Island Systems can help!
Links
Azure Virtual DesktopNIST SP 800-171 Rev 3Secure Future InitiativeIsland SystemsRecorded August 12, 2024
-
Can you pen test yourself? Paula Januszkiewicz says yes! Richard talks to Paula about taking an active role in understanding your organization's security vulnerabilities. Paula talks about the low-hanging fruit she often finds as a professional penetration tester - typically on poorly maintained infrastructure like PKI servers. The conversation digs into tooling you can use to find vulnerabilities - just make sure you trust the source of those tools. Not everyone is a good guy in open source! And, of course, there's always a time to bring in professionals to do a deeper level of testing. Don't wait until the breach happens to take some action!
Links
CqurePenetration TestingGitHub Secrets ScanningHaveIBeenPwnedRecorded August 22, 2024
-
How can OpenAI help you with PowerShell? Richard talks to Doug Finke about his experiences with ChatGPT and GitHub Copilot to help him write PowerShell and how he incorporated the OpenAI API into a PowerShell library to create a conversational interface in his PowerShell scripts! Doug talks about his productivity gains using OpenAI to write better quality PowerShell faster - helping him understand the code, automate test writing, and explore aspects of PowerShell he had never dug into. But beyond writing code for him, adding the conversational interface to a PowerShell script opens a whole new interactive opportunity to make it easier for folks to use scripts and do more with them!
Links
GitHub CopilotPSAIGPT-4oDoug's BlogDoug's YouTube ChannelRecorded August 7, 2024
-
Microsoft 365 Data Governance has always been critical - but it's only getting more important! Richard talks to Nikki Chapple about her experiences working with companies trying to get their "data estate in order." That phrase is what Microsoft recommends before turning on tools like Copilot for M365. Nikki talks about how hard the goal of data security is - that it is just as tricky as any other security goal. Data security is an endless process that needs refining and work on routinely as new data and classes of data arrive in the organization. In the meantime, users are taking advantage of LLMs like ChatGPT for their work whether we want them to or not - so there is a need to act quickly to provide secure capabilities!
Links
Data. Privacy, and Security for Microsoft Copilot for M365Exabeam Business Rewards vs Security Risks ReportMicrosoft 2024 Work Trend Index ReportMicrosoft Purview Data Security and Compliance Protections for Generative AI AppsMicrosoft Copilot Studio for M365Entra Entitlement ManagementShareable Links in OneDrive and SharePoint in M365Nikki's M365 Governance BlogAll Things M365 Governance on YouTubeRecorded August 16, 2024
-
What does Windows Server 2025 bring to Active Directory? Richard chats with Orin Thomas about the new version of Windows Server coming and what to expect around Active Directory. Orin talks about how mature the Windows Server space is, so only incremental improvements are warranted, but they are important ones - like retiring NTLM once and for all. And when it comes to Active Directory, there are new secure features you're going to want, but you do need to up your functional level to get them, and that means getting to at least Server 2016 functional level first... then moving everything else. When was the last time you transferred a FSMO role? Orin also digs into the new certification practice options available, where instead of answering questions, you do the work and get evaluated - cool!
Links
What's New in Server 2025SandwormActive Directory FSMO Roles in WindowsWindows Server Hybrid Administrator AssociateWindows LAPSRecorded August 6, 2024
- Visa fler
