Ask Microsoft Anything: Why Cybersecurity Needs a New Security Stack for the AI Era with David Weston
David Weston leads Agentic Security at Microsoft, where he and his team build the AI models, autonomous agents, and evaluation systems redefining how defenders operate. At Microsoft since the Windows 7 era, he has worked across exploit mitigation design, malware analysis, APT research, and led security engineering for Windows, Xbox, Azure OS, and Microsoft's Offensive Security Research & Engineering group. His current work is leading teams training frontier security models, agentic security systems for defenders, and pushing AI-driven vulnerability discovery through Microsoft's Multi-Model Agentic Scanning Harness (MDASH). A longtime member of the research community and former CISA technical advisor, David is a regular presenter at BlueHat, Black Hat, and DEF CON. Key areas Dave and his team can discuss: The vision behind Project Perception How AI is changing the economics of cyber offense and defense Lessons learned from building MDASH and Microsoft's AI security initiatives Security-first AI development and deployment What's next for defenders as agentic systems become mainstream This will be a TEXT-BASED AMA, so ask your questions in the comment section down below and David and team will be answering via comment replies during the live hour!Feedback on Microsoft Intune and the Intune Suite
Do you use Intune to manage your device estate? Are there features you need to go fully cloud-native? What would make day-to-day device management easier? Are you exploring or the Intune Suite to unify endpoint management and security solutions into one bundle? Are there capabilities you need from Enterprise App Management, Microsoft Cloud PKI, Advanced Analytics, or other Intune Suite solutions? Join us for an opportunity to share your feedback and requests with the product team and engineers building Microsoft Intune, the Intune Suite, and the Intune admin center.Ask Microsoft Anything: Microsoft Defender Attack Disruption
Learn more about attack disruption—Microsoft Defender’s built‑in, AI-powered capability that stops in‑progress attacks at machine speed by analyzing attacker intent, identifying compromised assets, and containing threats before they spread. Bring your questions and hear directly from product experts on real‑world scenarios and best practices. What is an AMA? An 'Ask Microsoft Anything' (AMA) session is an opportunity for you to engage directly with Microsoft employees! This AMA will consist of a short presentation followed by taking questions on-camera from the comment section down below! Ask your questions/give your feedback and we will have our awesome Microsoft Subject Matter Experts engaging and responding directly in the video feed. We know this timeslot might not work for everyone, so feel free to ask your questions at any time leading up to the event and the experts will do their best to answer during the live hour. This page will stay up evergreen so come back and use it as a resource anytime. We hope you enjoy!Ask Microsoft Anything: Secure Boot - May 2026
Join us in May for our fourth Ask Microsoft Anything (AMA) about updating Secure Boot certificates on your Windows devices before they start expiring in June of 2026. If you've already bookmarked Secure Boot playbook, but need more details or have a specific question, join us to get the answers you need to prepare for this milestone. No question is too big or too small. Update scenarios, inventorying your estate, formulating the right deployment plan for your organization -- we're here to help! How do I participate? Registration is not required. Simply select Add to calendar then sign in to the Tech Community and select Attend to receive reminders. Post your questions in advance, or any time during the live broadcast Get started with these helpful resources Secure Boot resources and guidance Secure Boot playbookAsk Microsoft Anything: Secure Boot - June 2026
Whether you're actively managing device security or planning your next steps, this AMA is your opportunity to connect directly with Microsoft experts and get clear, actionable guidance on updating Secure Boot certificates and monitoring status of update efforts. Bring your questions on rollout plans, challenges, reporting, and best practices. We’ll cover real-world scenarios, common challenges, and the steps you can take to confidently navigate the process. If Secure Boot certificate updates are on your project list—or you just want to make sure you’ve updated certificates successfully across your estate—this live, interactive event will help you move forward with clarity and confidence. Browse our most recent AMAs Secure Boot AMA - May 2026 Secure Boot AMA - April 2026 Get started with these helpful resources Secure Boot resources and guidance Secure Boot playbookTech Community Live: Microsoft Intune edition
Save your spot and tune in for a brand-new Intune edition of Tech Community Live! Whether you need help with your cloud-native management strategy, tackling Windows Autopilot and enrollment challenges, strengthening security and compliance, or trying to gain better visibility across your device fleet, this event is your chance to get real-world guidance and ask the questions top of mind for your organization. Bring your toughest deployment scenarios, policy debates, troubleshooting pain points, and “how are other IT teams handling this?” questions for a lively, practical conversation designed to help you optimize endpoint management with more confidence—and maybe learn a few new tricks along the way. I'm in. How do I participate? Excited for three hours of interactive Ask Microsoft Anything (AMA) sessions with the engineers, product experts, and teams behind Microsoft Intune? Great! Sign in to the Tech Community, select Add to Calendar and Attend to receive event reminders. Visit each AMA page and do the same. Post your questions (early and often!) in the Comments section on each AMA page. Agenda: June 23, 2026 TIME TOPIC 8:00 AM PDT 3:00 PM UTC On premises to cloud native: Your Intune setup AMA 9:00 AM PDT 4:00 PM UTC AMA: Deployment made easy with Intune and Windows Autopilot 10:00 AM PDT 5:00 PM UTC AMA: Keeping up with security, compliance, and the pace of change 10:30 AM PDT 5:30 PM UTC AMA: Visibility and control across devices with IntuneWindows Server Secure Boot AMA
Join Microsoft engineers for a live Ask Microsoft Anything (AMA) focused on Secure Boot certificate updates in Windows Server environments. We’ll answer your questions about deployment planning, firmware prerequisites, monitoring and troubleshooting, known issues, virtualization scenarios, and how to maintain protection against future boot-level threats. Whether you're managing a handful of servers or a large datacenter, bring your questions and get practical guidance directly from the experts helping customers navigate this important platform security update. How do I participate? Registration is not required. Simply select Add to calendar then sign in to the Tech Community and select Attend to receive reminders. Post your questions in advance, or any time during the live broadcast Get started with these helpful resources Windows Server Secure Boot playbook Secure Boot resources and guidanceAsk Microsoft Anything: The Microsoft Sentinel SIEM Migration Experience
***Update: The event has concluded, but if you missed it- you can watch the recording ON-DEMAND on this page at any time. Happy learning! Join us for a live demo and AMA on the Microsoft Sentinel SIEM migration experience. We’ll show how the experience helps teams move from legacy SIEMs like Splunk and QRadar into Microsoft Sentinel with a more guided, lower-friction path. We’ll cover what it does today, how it works, and the questions customers ask most, then open it up for live Q&A. What is an AMA? An 'Ask Microsoft Anything' (AMA) session is an opportunity for you to engage directly with Microsoft employees! This AMA will consist of a short presentation followed by taking questions on-camera from the comment section down below! Ask your questions/give your feedback and we will have our awesome Microsoft Subject Matter Experts engaging and responding directly in the video feed. We know this timeslot might not work for everyone, so feel free to ask your questions at any time leading up to the event and the experts will do their best to answer during the live hour. This page will stay up so come back and use it as a resource anytime. We hope you enjoy!AMA: Keeping up with security, compliance, and the pace of change
Security and compliance aren’t standing still—and neither is Intune. With new features, enforcement changes, SDK requirements, and evolving security expectations arriving at a rapid pace, IT teams are under constant pressure to stay current without disrupting productivity or overwhelming administrators. Join this Ask Microsoft Anything (AMA) session to discuss the challenges of managing security, compliance, and updates at scale in a fast-moving cloud environment. This is an interactive event so you guide the discussion. From patching strategies, compliance policies, and app protection to reducing operational overhead while maintaining a strong security posture, we'll be here to answer your questions. Whether you’re navigating changing compliance requirements, trying to simplify policy management, or working to balance security with a seamless user experience, come explore practical approaches for staying secure, compliant, and ready for what’s next with Intune. I'm in. How do I participate? Sign in to the Tech Community, select Add to Calendar and Attend to receive event reminders. Post your questions (early and often!) in the Comments below. This session is part of the Tech Community Live: Intune Edition. View the full agenda for more AMAs! This session will also be recorded and available on demand shortly after conclusion of the live event.On premises to cloud native: Your Intune setup AMA
Moving to Intune isn’t just about replacing legacy management tools; it’s about rethinking how devices are deployed, secured, and managed in a cloud-first world. But where should you start? How do you avoid recreating old processes that add complexity, slow down users, or limit the value of cloud-native management? Join our Ask Microsoft Anything (AMA) session to explore the strategies, lessons learned, and real-world considerations that can help you build a simpler, more scalable endpoint management approach with Intune. Bring your questions about device strategy, co-management vs. cloud-only management, policy design, security baselines, user experience tradeoffs, and more. Whether you’re planning a new deployment, modernizing existing processes, or trying to reduce administrative overhead, this AMA is an opportunity to talk directly with Microsoft experts about the decisions, challenges, and best practices shaping modern endpoint management today. I'm in. How do I participate? Sign in to the Tech Community, select Add to Calendar and Attend to receive event reminders. Post your questions (early and often!) in the Comments below. This session is part of the Tech Community Live: Intune Edition. View the full agenda for more AMAs! This session will also be recorded and available on demand shortly after conclusion of the live event.
