📍 Live from Times Square, New York City 🇺🇸 This was the first edition of Experts Live in the United States, and we couldn't be more proud to be part of it!

We wrap up Season One with a special in-person recording from Microsoft’s office in NYC during Experts Live US.

No planning, no script – just good conversation, best practices, and bad Sentinel acronyms. 😉 Chris and Koos will both be talking about their sessions they gave at the event.

Chris will discuss securitu baseline best-practices. And Koos will be sharing Sentinel tips from the field.

Full show notes available on our blog: https://df3ndr.io/episodes/2025/11/01/01x12_df3ndr.eof.01.tar.gz.html

Follow us on your favourite podcast platform or check us out at https://df3ndr.io

In this episode Chris asks "To block or not to block?" as he looks at geo blocking in Conditional Access, while Koos explores the human element in cybersecurity.

Full show notes available on our blog: https://df3ndr.io/episodes/2025/10/01/01x11_trust_me_im_a_keyboard_hid.html

Follow us on your favourite podcast platform or check us out at https://df3ndr.io

In this episode Koos takes a look at the recent release of Sentinel data lake and Chris shares 5 tips to help your Entra Privileged Identity Management (PIM) deployment.

Full show notes available on our blog: https://df3ndr.io/episodes/2025/09/01/01x10_lake_it_till_you_make_it_log.html

Follow us on your favourite podcast platform or check us out at https://df3ndr.io

In this episode Chris revisits Microsoft Entra Suite and takes a deep dive into GSA - Global Secure Access. Koos did a project recently where Defender for External Attack Surface Management (EASM) was also implemented. And he likes to share how awesome this product is, as well as share some practical tips and pitfalls you need to wary of.

Full show notes available on our blog: https://df3ndr.io/episodes/2025/08/01/01x09_open_port_regrets_pcap.html

Follow us on your favourite podcast platform or check us out at https://df3ndr.io

In this episode Koos returns to a somewhat controversial topic - Security Copilot, but this time without the hype and of course with some practical tips. Chris introduces Microsoft Entra Suite in the first of two episodes taking a look at these capabilities.

Full show notes available on our blog: https://df3ndr.io/episodes/2025/07/01/01x08_copilot_reinstall_bat.html

Follow us on your favorite podcast platform or check us out at https://df3ndr.io

In this episode Chris shares 5 things you should configure in Microsoft 365 to make your tenant more secure and Koos introduces "Summary Rules" in Microsoft Sentinel. What are "Summary Rules"? And what new opportunities might bring it to your logging strategies?

Full show notes available on our blog: https://df3ndr.io/episodes/2025/06/02/01x07_summarize-harden-take5.html

Follow us on your favorite podcast platform or check us out at https://df3ndr.io

In this episode we look at one of Defender XDRs most exiting features at the moment: Attack Disruption! Why it is so exiting and how you can start using it today?

Full show notes available on our blog: https://df3ndr.io/episodes/2025/04/03/01x06_ctrl_alt_disrupt.html

Follow us on your favorite podcast platform or check us out at https://df3ndr.io

In this episode...

Booting high on community energy! In this special in-person episode, recorded on-site at the Microsoft Campus during the MVP Summit 2025, Koos and Chris share behind-the-scenes insights, tech trends, and reflections on the evolving security landscape—all while dodging T-shirt printers and Summit buzz.

Full show notes available on our blog: https://df3ndr.io/episodes/2025/04/03/01x05_DEVICEHIGH=MVPSUMMIT.SYS.html

Follow us on your favorite podcast platform or check us out at https://df3ndr.io

In this episode...

* Chris revisits his e-mail authentication and security from last time to dig a little deeper.

* Koos recently did some talks about SIEM migrations to Sentinel and keeping things as cost-efficient as possible. He also believes a company shouldn't focus solely on Microsoft Sentinel, and should consider looking into alternatives alongside it like Azure Data Explorer. And why are companies so focussed on collecting all those logs in a "legacy" matter?

Full show notes available on our blog:

https://df3ndr.io/episodes/2025/03/01/01x04_REauthmail-and-siem_kql.html

Follow us on your favorite podcast platform or check us out at https://df3ndr.io

In this episode...

Chris takes a look at email security and digs into SPF, DMARC and all the other acronyms.

Koos recently had some experience with Entra ID Entitlement Management he wants to share. What are Access Packages? And why should you look into it?

Full show notes available on our blog: https://df3ndr.io/episodes/2025/02/02/01x03_authmail_eml-and-identity_gov.html

Follow us on your favorite podcast platform or check us out at https://df3ndr.io