Ask Microsoft Anything: Integrated Security Operations Center in Microsoft Defender
Curious how ISOC works in practice and what it means for the future of the SOC? Tune in October 6 at 9 a.m. PST for a live AMA with the engineers behind Integrated Security Operations Center (ISOC) in Microsoft Defender. Bring your questions and hear firsthand how we're building a shared foundation for people and agents to perceive, reason, and act across the environment, enabling defenders to spend less time managing tools and more time driving security outcomes. What is an AMA? An 'Ask Microsoft Anything' (AMA) session is an opportunity for you to engage directly with Microsoft employees! This AMA will consist of a short presentation followed by taking questions on-camera from the comment section down below! Ask your questions/give your feedback and we will have our awesome Microsoft Subject Matter Experts engaging and responding directly in the video feed. We know this timeslot might not work for everyone, so feel free to ask your questions at any time leading up to the event and the experts will do their best to answer during the live hour. This page will stay up evergreen, so come back and use it as a resource anytime. We hope you enjoy!Ask Microsoft Anything: How AI-Powered Attacks Happen- Real Threat Scenarios and Security Controls That Stop Them
See how AI-powered attacks have unfolded in real life —and how you can protect against them at every stage. In this webinar, we’ll walk through real threat attack scenarios, breaking down the attacker’s tactics, the warning signs, and the opportunities to disrupt the attack. At each step, we’ll highlight Microsoft’s recommended security controls to help prevent, detect, and contain threats. You’ll leave with practical guidance to prioritize and implement the necessary security protections and strengthen your organization’s security posture against AI-powered threats. You’ll learn how to: Recognize AI-enabled attack techniques and the weaknesses they exploit. Connect threat scenarios to identity, data, and threat protection controls. Learn practical steps to strengthen your organization’s defenses. What is an AMA? An 'Ask Microsoft Anything' (AMA) session is an opportunity for you to engage directly with Microsoft employees! This AMA will consist of a demo/presentation followed by taking questions on-camera from the comment section down below! Ask your questions/give your feedback and we will have our awesome Microsoft Subject Matter Experts engaging and responding directly in the video feed. We know this timeslot might not work for everyone, so feel free to ask your questions at any time leading up to the event and the experts will do their best to answer during the live hour. This page will stay up evergreen, so come back and use it as a resource anytime. We hope you enjoy!Ask Microsoft Anything: Expert-led security services with Microsoft Defender Experts
Learn how Microsoft Defender Experts deliver expert-led security services to help organizations modernize security operations, outpace bad actors, defend against threats, and build cyber resilience. Ask your questions and connect with Microsoft experts on real-world use cases, service capabilities, and best practices. What is an AMA? An 'Ask Microsoft Anything' (AMA) session is an opportunity for you to engage directly with Microsoft employees! This AMA will consist of a short presentation followed by taking questions on-camera from the comment section down below! Ask your questions/give your feedback and we will have our awesome Microsoft Subject Matter Experts engaging and responding directly in the video feed. We know this timeslot might not work for everyone, so feel free to ask your questions at any time leading up to the event and the experts will do their best to answer during the live hour. This page will stay up evergreen, so come back and use it as a resource anytime. We hope you enjoy!Ask Microsoft Anything: Secure multi-tenant environments with Microsoft Entra Tenant Governance
Learn more about Microsoft Entra Tenant Governance – a built-in solution that helps bring an organization’s tenants under control, reduce shadow-tenant risk, and manage tenant configuration at scale. By enabling centralized policies and cross-tenant delegated administration, it helps strengthen identity foundations for AI-powered operations. Bring your questions and hear directly from product experts about why securing tenants matters. What is an AMA? An 'Ask Microsoft Anything' (AMA) session is an opportunity for you to engage directly with Microsoft employees! This AMA will consist of a short presentation followed by taking questions on-camera from the comment section down below! Ask your questions/give your feedback and we will have our awesome Microsoft Subject Matter Experts engaging and responding directly in the video feed. We know this timeslot might not work for everyone, so feel free to ask your questions at any time leading up to the event and the experts will do their best to answer during the live hour. This page will stay up evergreen so come back and use it as a resource anytime. We hope you enjoy!Ask Microsoft Anything: Why Cybersecurity Needs a New Security Stack for the AI Era with David Weston
David Weston leads Agentic Security at Microsoft, where he and his team build the AI models, autonomous agents, and evaluation systems redefining how defenders operate. At Microsoft since the Windows 7 era, he has worked across exploit mitigation design, malware analysis, APT research, and led security engineering for Windows, Xbox, Azure OS, and Microsoft's Offensive Security Research & Engineering group. His current work is leading teams training frontier security models, agentic security systems for defenders, and pushing AI-driven vulnerability discovery through Microsoft's Multi-Model Agentic Scanning Harness (MDASH). A longtime member of the research community and former CISA technical advisor, David is a regular presenter at BlueHat, Black Hat, and DEF CON. Key areas Dave and his team can discuss: The vision behind Project Perception How AI is changing the economics of cyber offense and defense Lessons learned from building MDASH and Microsoft's AI security initiatives Security-first AI development and deployment What's next for defenders as agentic systems become mainstream This will be a TEXT-BASED AMA, so ask your questions in the comment section down below and David and team will be answering via comment replies during the live hour!Ask Microsoft Anything: Microsoft Defender Attack Disruption
Learn more about attack disruption—Microsoft Defender’s built‑in, AI-powered capability that stops in‑progress attacks at machine speed by analyzing attacker intent, identifying compromised assets, and containing threats before they spread. Bring your questions and hear directly from product experts on real‑world scenarios and best practices. What is an AMA? An 'Ask Microsoft Anything' (AMA) session is an opportunity for you to engage directly with Microsoft employees! This AMA will consist of a short presentation followed by taking questions on-camera from the comment section down below! Ask your questions/give your feedback and we will have our awesome Microsoft Subject Matter Experts engaging and responding directly in the video feed. We know this timeslot might not work for everyone, so feel free to ask your questions at any time leading up to the event and the experts will do their best to answer during the live hour. This page will stay up evergreen so come back and use it as a resource anytime. We hope you enjoy!Windows Server Secure Boot AMA
Join Microsoft engineers for a live Ask Microsoft Anything (AMA) focused on Secure Boot certificate updates in Windows Server environments. We’ll answer your questions about deployment planning, firmware prerequisites, monitoring and troubleshooting, known issues, virtualization scenarios, and how to maintain protection against future boot-level threats. Whether you're managing a handful of servers or a large datacenter, bring your questions and get practical guidance directly from the experts helping customers navigate this important platform security update. How do I participate? Registration is not required. Simply select Add to calendar then sign in to the Tech Community and select Attend to receive reminders. Post your questions in advance, or any time during the live broadcast Get started with these helpful resources Windows Server Secure Boot playbook Secure Boot resources and guidanceAMA: Visibility and control across devices with Intune
This AMA is designed for IT teams looking to cut through the noise and gain clearer insight into what’s really happening across their device estate. You can’t secure or manage what you can’t fully see. As organizations support more users, more device types, and more ways of working, endpoint management has become increasingly complex. Windows, macOS, iOS, Android, personally-owned devices, frontline workers, remote teams: every layer adds new challenges when it comes to visibility, monitoring, compliance, and troubleshooting. Come ready to talk through the sometimes messy realities of endpoint management in today's world. Let's talk about inconsistent reporting, missing signals, compliance blind spots, alert fatigue, cross-platform management, and the challenge of turning raw data into meaningful action. Want to know if your reporting is giving you the full picture? Curious where organizations typically lose visibility or struggle with enforcement at scale? Wondering how others are approaching analytics, monitoring, and troubleshooting across multiple platforms? Bring your toughest questions and compare notes directly with Microsoft experts and peers navigating the same challenges in Intune every day. I'm in. How do I participate? Sign in to the Tech Community, select Add to Calendar and Attend to receive event reminders. Post your questions (early and often!) in the Comments below. This session is part of the Tech Community Live: Intune Edition. View the full agenda for more AMAs! This session will also be recorded and available on demand shortly after conclusion of the live event.AMA: Keeping up with security, compliance, and the pace of change
Security and compliance aren’t standing still—and neither is Intune. With new features, enforcement changes, SDK requirements, and evolving security expectations arriving at a rapid pace, IT teams are under constant pressure to stay current without disrupting productivity or overwhelming administrators. Join this Ask Microsoft Anything (AMA) session to discuss the challenges of managing security, compliance, and updates at scale in a fast-moving cloud environment. This is an interactive event so you guide the discussion. From patching strategies, compliance policies, and app protection to reducing operational overhead while maintaining a strong security posture, we'll be here to answer your questions. Whether you’re navigating changing compliance requirements, trying to simplify policy management, or working to balance security with a seamless user experience, come explore practical approaches for staying secure, compliant, and ready for what’s next with Intune. I'm in. How do I participate? Sign in to the Tech Community, select Add to Calendar and Attend to receive event reminders. Post your questions (early and often!) in the Comments below. This session is part of the Tech Community Live: Intune Edition. View the full agenda for more AMAs! This session will also be recorded and available on demand shortly after conclusion of the live event.AMA: Deployment made easy with Intune and Windows Autopilot
Join this Ask Microsoft Anything (AMA) to dive into the real-world deployment scenarios organizations are navigating every day. A successful Intune deployment is about more than getting devices enrolled. You want a reliable, secure, and frustration-free experience from day one yet even experienced IT teams can run into unexpected challenges during rollout and ongoing management. Small missteps can quickly impact productivity and user trust. Have questions about Windows Autopilot configuration, dynamic groups, enrollment strategies, app packaging and delivery, troubleshooting failed deployments, deployment rings, and avoiding policy conflicts that can lock users out or disrupt workflows? Whether you’re just getting started or refining a mature deployment strategy, this AMA is your opportunity to connect directly with Microsoft experts, share challenges, and learn practical approaches for building a smoother, more resilient deployment experience with Intune. I'm in. How do I participate? Sign in to the Tech Community, select Add to Calendar and Attend to receive event reminders. Post your questions (early and often!) in the Comments below. This session is part of the Tech Community Live: Intune Edition. View the full agenda for more AMAs! This session will also be recorded and available on demand shortly after conclusion of the live event.
