Join Our Microsoft Security Community
Want to help defend the world against cyber attacks? We want you to influence our designs, plans, and guidance so we can have a global impact together. That's why we need your participation in our security community. Please join our email list to be notified about the upcoming webinars, events, and other announcements. Upcoming Webinars DECEMBER 2 (9:00 AM - 10:00 AM) Microsoft Sentinel and Microsoft Defender XDR | Empowering the Modern SOC Microsoft is simplifying the SecOps experience and delivering innovation that will allow your team to scale in new ways. Join us for actionable learnings to help your team modernize your operations and enhance protection of your organization. DECEMBER 3 (8:00 AM -9:00 AM) Microsoft Defender for Identity | Identity Centric Protection in the Cloud Era Microsoft Defender for Identity would like to introduce the new identity centric protection capabilities providing identity centric protection across any identity source. DECEMBER 4 (8:00 AM - 9:30 AM) Security Copilot Skilling Series | Discussion of Ignite Announcements Ignite 2025 is all about driving impact in the era of AI—and security is at the center of it. In this session, we’ll unpack the biggest Security Copilot announcements from Ignite on agents and discuss how Copilot capabilities across Intune, Entra, Purview, and Defender deliver end-to-end protection. DECEMBER 4 (8:00 AM- 9:00 AM) Microsoft Defender for Cloud | Unlocking New Capabilities in Defender for Storage Join us for an in-depth look at the latest enhancements in Microsoft Defender for Storage. In this session, we’ll explore two powerful capabilities now available in public preview: Cloud Storage Aggregated Events and Built-in Automated Malware Remediation for Malicious Blobs. We’ll showcase live demos of these features in action and share best practices for leveraging them effectively. DECEMBER 4 (9:00 AM- 10:00 AM) Microsoft Sentinel | What's New in the Past 6 Months Join us for an insightful session on “What’s New in Microsoft Sentinel.” We’ll spotlight the latest innovations and enhancements, including improvements to the Defender portal that deepen its integration with Microsoft Sentinel. We’ll also explore how data lake capabilities are evolving to support more scalable and flexible security operations. Expect demos, real-world use cases, and a discussion on why these updates matter to our customers. Don’t miss out if you want to stay ahead of what’s new and what’s next! DECEMBER 8 (9:00 AM - 10:00 AM) Microsoft Security Store | Security, Simplified: A look inside the Security Store This session is to introduce the Microsoft Security Store—a centralized destination where customers can discover, deploy, and manage trusted security solutions built to extend Microsoft’s security platforms like Defender, Sentinel, Entra, Purview, and Intune. DECEMBER 9 (8:00 AM - 9:00 AM) Microsoft Defender XDR | A Deep Dive into Automated Attack Disruption Uncover the value of automated attack disruption and how it delivers protection without the complexity. Join the Automatic Attack Disruption team for an exclusive deep dive into these powerful capabilities. You’ll get a front-row seat to a demo, explore the latest innovations, a look at future investments and have your questions answered directly by the experts. Don’t miss this chance to see effortless protection in action. DECEMBER 9 (9:00 AM - 10:00 AM) Microsoft Sentinel | Part 1: Stop Waiting, Start Onboarding: Get Sentinel Defender‑Ready Today Part 1: Stop Waiting, Start Onboarding: Get Sentinel Defender‑Ready Today The Microsoft Sentinel portal in Azure is being retired by July 2026, so now is the perfect time to explore the Microsoft Defender unified portal. In this session, we’ll walk through a day in the life of a SOC, showing how integration and simplicity make security operations smoother. You’ll learn how to navigate the portal, manage incidents with a unified queue, and enrich investigations with UEBA, Threat Intelligence, and Watchlists. Plus, see how automation, dashboards, and case management help smaller setups work smarter. DECEMBER 10 (8:00 AM - 9:00 AM) Azure Network Security | Deep Dive into Azure DDoS Protection Join us for an in-depth exploration of Azure DDoS Protection and learn how to safeguard your applications and infrastructure against distributed denial-of-service attacks. This session will walk through the end-to-end architecture and planning considerations, dive into the detection and mitigation flow, and showcase telemetry, analytics, and alerting best practices. We’ll also cover how Azure DDoS Protection integrates with first-party services to deliver seamless protection and visibility across your environment. DECEMBER 10 (9:00 AM - 10:00 AM) Microsoft Defender for Cloud | Expose Less, Protect More with Microsoft Security Exposure Management Join us for an in-depth look at how Microsoft Security Exposure Management helps organizations reduce risk by identifying and prioritizing exposures before attackers can exploit them. Learn practical strategies to minimize your attack surface, strengthen defenses, and protect what matters most. DECEMBER 11 (8:00 AM - 9:00 AM) Microsoft Defender for Cloud | Modernizing Cloud Security with Next‑Generation Microsoft Defender for Cloud Microsoft Defender for Cloud is evolving to deliver a unified, intuitive, and scalable approach to cloud security. In this session, we’ll discuss how organizations can simplify posture management and threat protection across multicloud environments (Azure, AWS, GCP, and beyond) while improving efficiency and reducing risk. Learn how this direction streamlines operations, enhances clarity for security teams, and supports smarter risk prioritization. DECEMBER 11 (9:00 AM - 10:00 AM) Microsoft Sentinel data lake | Transforming data collection for AI-ready security operations with Microsoft Sentinel Join us to explore how Microsoft Sentinel is transforming security data collection across multicloud and multiplatform environments. In this webinar, we’ll share our vision for a unified, cloud-native approach, highlight the latest capabilities for ingesting data from on-prem systems, Microsoft workloads, and multi-cloud platforms, and showcase the codeless connector framework that accelerates custom integrations. With over 350 connectors available and the App Assure program ensuring reliability, we’ll also share the roadmap for scaling data collection to power AI-driven security operations. DECEMBER 16 (8:00 AM - 9:00 AM) Microsoft Defender for Office 365 | Ask the Experts: Tips and Tricks You’ve watched the latest Microsoft Defender for Office 365 best practices videos and read the blog posts by the esteemed Microsoft Most Valuable Professionals (MVPs), now bring your toughest questions or unique situations straight to the experts. In this interactive panel discussion, Microsoft MVPs will answer your real world scenarios, clarify best practices, and highlight practical tips surfaced in the recent series. We’ll kick off with a who’s who and recent blog/video series recap, then dedicate most of the time to your questions across migration, SOC optimization, fine-tuning configuration, Teams protection, and even Microsoft community engagement. Come ready with your questions (or pre-submit here) for the expert Security MVPs on camera, or the Microsoft Defender for Office 365 product team in the chat! DECEMBER 16 (9:00 AM - 10:00 AM) Microsoft Sentinel | Part 2: Don’t Get Left Behind: Complete Your Sentinel Move to Defender Part 2: Don’t Get Left Behind: Complete Your Sentinel Move to Defender As the transition deadline approaches in July 2026, this session helps you unlock the full potential of Microsoft Defender. We’ll cover data onboarding, retention strategies, and permission models for governance at scale. Explore Content Hub, analytic rules, and summary rules to optimize detection. Learn how Multi-Tenant Organization (MTO) simplifies management and see Security Copilot in action for AI-driven insights. Ideal for teams migrating from Azure Sentinel Portal or looking to strengthen their SOC posture. JANUARY 13 (9:00 AM - 10:00 AM) Microsoft Sentinel | AI-Powered Entity Analysis in Sentinel's MCP Server Assessing the risk of entities is a core task for SOC teams—whether triaging incidents, investigating threats, or automating response workflows. Traditionally, this has required building complex playbooks or custom logic to gather and analyze fragmented security data from multiple sources. With Entity Analyzer, this complexity is eliminated. The tool leverages Sentinel’s semantic understanding of your security data to deliver comprehensive, reasoned risk assessments for any entity your agents encounter. By providing a unified, out-of-the-box solution for entity analysis, Entity Analyzer enables your AI agents to make smarter decisions and automate more tasks—without the need to manually engineer risk evaluation logic for each entity type. This not only accelerates agent development, but also ensures your agents are always working with the most relevant and up-to-date context from across your security environment. And for those building SOAR workflows, Entity Analyzer is natively integrated with Logic Apps, making it easy to enrich entities and automate verdicts within your playbooks. JANUARY 20 (8:00 AM - 9:00 AM) Microsoft Defender for Cloud | What's New in Microsoft Defender CSPM Cloud security posture management (CSPM) continues to evolve, and Microsoft Defender CSPM is leading the way with powerful enhancements introduced after Microsoft Ignite (November 2025). This session will showcase the latest innovations designed to help security teams strengthen their posture and streamline operations. JANUARY 22 (8:00 AM - 9:00 AM) Azure Network Security | Advancing web application Protection with Azure WAF: Ruleset and Security Enhancements In this session, we’ll explore the latest Azure WAF ruleset and security enhancements designed to strengthen your protection, reduce false positives, and simplify management. You’ll learn how to fine-tune WAF configurations, gain deeper visibility into threat patterns, and ensure consistent security across your web workloads. Whether you’re just getting started with Azure WAF or looking to optimize existing deployments, this webinar will help you confidently build a more resilient and adaptive web application security posture. Videos, Webinar Recordings & Decks Subscribe to our YouTube channel. A complete list of past webinar recordings and decks can be found here. For security documentation click here. Private Community Customer Connection Programs We offer several customer connection programs within our private communities. By signing up, you can help us shape our products through activities such as reviewing product roadmaps, participating in co-design, previewing features, and staying up-to-date with announcements. Sign up at aka.ms/JoinCCP. Upcoming Events & Announcements TBA Blogs & Forums Got questions or feedback? Check out our blogs and forums where you can see the latest product developments and speak directly to our engineering teams, and see the latest product developments. GitHub Azure Network Security GitHub Microsoft Defender for Cloud GitHub Microsoft Sentinel GitHub Microsoft Defender XDR GitHub Microsoft Defender for Cloud Apps GitHub Microsoft Defender for Identity Microsoft Purview LinkedIn We have a general discussion group on LinkedIn Ninja Trainings Azure Network Security Microsoft 365 Advanced eDiscovery Microsoft Copilot for Security Microsoft Defender XDR Microsoft Defender External Attack Surface Management Microsoft Defender for Cloud Microsoft Defender for Cloud Apps Microsoft Defender for Endpoint Microsoft Defender Experts Microsoft Defender for Identity Microsoft Defender for IoT Microsoft Defender for Office 365 Microsoft Defender Threat Intelligence Microsoft Defender Vulnerability Management Microsoft Purview Insider Risk Management Microsoft Purview Data Lifecycle & Records Management Microsoft Purview Information Protection Microsoft Purview Data Loss Prevention Microsoft Purview Communication Compliance Microsoft Purview Compliance Manager Microsoft Sentinel Microsoft Sentinel Notebooks Microsoft Unified SOC PlatformMicrosoft 365 Conference event guide to keynotes, AMA, sessions, and more
Join Microsoft and community experts in-person, in one place. The Microsoft 365 Conference returns to Las Vegas, NV, May 2-4, 2023 – with two pre-event and one post-event workshop days. It’s a wonderful event dedicated to AI, SharePoint, Teams, Viva, Syntex, Power Platform, and related Microsoft 365 apps and services. Our new AI track will focus on Copilot across Microsoft 365, Power Platform, Dynamics 365, and more. You’ll hear the latest news and roadmap from top industry experts, filled with real-world solutions across keynotes, sessions, and pre/post event deep-dive workshops to build your expertise - presented by Microsoft product team members, Microsoft MVPs, and community experts. We hope you join in to learn, share, and engage –including evening gatherings, the attendee party, and Microsoft will have a dedicated, fully-staffed booth within the Expo Hall.What’s new in Microsoft Teams – the Enterprise Connect feature round up
This week marks the second anniversary of the worldwide launch of Microsoft Teams and it’s a good time to reflect on the past 2 years here at Microsoft. Explore the features coming to Teams in our special Enterprise Connect edition of the Teams Roundup.
What's New in Microsoft Teams | Microsoft Ignite 2022
Today, we are excited to unveil the latest innovations coming to Microsoft Teams to make teamwork easier, more flexible, and inclusive. This post provides details for all the Teams features and solutions announced at Microsoft Ignite. To read about innovations across Microsoft 365 and Microsoft Viva to empower today’s digitally connected, distributed workforce, check out What’s new in Microsoft 365.Introducing Mesh avatars for Microsoft Teams in Private Preview
At Microsoft, we are committed to offering innovative solutions to encourage collaboration and enhance connection, regardless of work location. One of our latest solutions is Mesh avatars for Microsoft Teams — one of our first steps to enabling metaverse experiences for customers.What’s New in Microsoft Teams | Build Edition 2020
Microsoft Teams has seen tremendous growth, with more people on Teams than ever. Today at Build, we are announcing many new capabilities in Microsoft Teams to continue to provide a rich canvas for developers to build, engage, and transform workflows. This allows Teams to address the full app development journey. Read on to see what is new!#WeAreMEC: IN CASE YOU MISSED IT... MEC is back September 13-14!
It’s been a while since our last MEC, and a lot has changed since then. The MEC Technical Airlift is a free, digital event for IT professionals who work with Exchange Online and/or Exchange Server day-to-day, and ISVs and developers who make solutions that integrate with Exchange.
