Security Copilot- Demystifying SCUs Deep Dive and AMA
Security Compute Units (SCUs) are the required resource units that power Microsoft Security Copilot, ensuring dependable and consistent performance across both standalone and embedded product experiences within Microsoft Security. In this session, we’ll demystify SCUs by unpacking: What SCUs are and how they function The billing models that govern their usage Optimization strategies to maximize value Best practices for SCU planning and deployment You’ll also have the opportunity to engage directly with Security Copilot experts to ask your SCU-related questions and gain practical insights. What is an AMA? An 'Ask Microsoft Anything' (AMA) session is an opportunity for you to engage directly with Microsoft employees! This AMA will consist of a short presentation followed by taking questions on-camera from the comment section down below! Ask your questions/give your feedback and we will have our awesome Microsoft Subject Matter Experts engaging and responding directly in the video feed. We know this timeslot might not work for everyone, so feel free to ask your questions at any time leading up to the event and the experts will do their best to answer during the live hour. This page will stay up so come back and use it as a resource anytime. We hope you enjoy!Ask Microsoft Anything: Why Cybersecurity Needs a New Security Stack for the AI Era with David Weston
David Weston leads Agentic Security at Microsoft, where he and his team build the AI models, autonomous agents, and evaluation systems redefining how defenders operate. At Microsoft since the Windows 7 era, he has worked across exploit mitigation design, malware analysis, APT research, and led security engineering for Windows, Xbox, Azure OS, and Microsoft's Offensive Security Research & Engineering group. His current work is leading teams training frontier security models, agentic security systems for defenders, and pushing AI-driven vulnerability discovery through Microsoft's Multi-Model Agentic Scanning Harness (MDASH). A longtime member of the research community and former CISA technical advisor, David is a regular presenter at BlueHat, Black Hat, and DEF CON. Key areas Dave and his team can discuss: The vision behind Project Perception How AI is changing the economics of cyber offense and defense Lessons learned from building MDASH and Microsoft's AI security initiatives Security-first AI development and deployment What's next for defenders as agentic systems become mainstream This will be a TEXT-BASED AMA, so ask your questions in the comment section down below and David and team will be answering via comment replies during the live hour!Ask Microsoft Anything: Secure multi-tenant environments with Microsoft Entra Tenant Governance
Learn more about Microsoft Entra Tenant Governance – a built-in solution that helps bring an organization’s tenants under control, reduce shadow-tenant risk, and manage tenant configuration at scale. By enabling centralized policies and cross-tenant delegated administration, it helps strengthen identity foundations for AI-powered operations. Bring your questions and hear directly from product experts about why securing tenants matters. What is an AMA? An 'Ask Microsoft Anything' (AMA) session is an opportunity for you to engage directly with Microsoft employees! This AMA will consist of a short presentation followed by taking questions on-camera from the comment section down below! Ask your questions/give your feedback and we will have our awesome Microsoft Subject Matter Experts engaging and responding directly in the video feed. We know this timeslot might not work for everyone, so feel free to ask your questions at any time leading up to the event and the experts will do their best to answer during the live hour. This page will stay up evergreen so come back and use it as a resource anytime. We hope you enjoy!The Virtual Ninja Show | Season 5 Episode 5!
Improve your security posture with Microsoft Defender Experts for XDR This episode is all about the managed extended detection and response service Microsoft Defender Experts for XDR. Learn how it brings expertise to your team to triage, investigate, and respond to incidents quickly and improve your security posture. Service Delivery Managers Sebastian Molendijk and Meiko Lopez share how they help customers drive security operations center efficiency and help teams stay ahead of emerging threats with an end-to-end, turnkey experience. Inquiries for the product team? Post your questions in advance or anytime during the live broadcast for our experts to answer. This episode will be available on-demand immediately after the completion of the live event. Watch all previous Ninja Show episodes and see the full season calendar at >> https://aka.ms/NinjaShow. Thanks for joining us! Our Season 5 finale: The next evolution of automatic attack disruption airs Tuesday, October 12 th at 9 AM PT! Add it to your calendar here >> https://aka.ms/NinjaShow/506/calendarThe Virtual Ninja Show | Season 5 Episode 1!
What's new in the Microsoft Defender for Endpoint Configuration Management space? Our season 5 opener brings you up to speed on major Microsoft Defender for Endpoint feature updates announced in public preview. Senior Product Manager Dan Levy presents what’s new in this space, such as endpoint security policies being available in the Microsoft 365 Defender portal and how these updates improve the day-to-day activities of security admins. Inquiries for the product team? Post your questions in advance or anytime during the live broadcast for our experts to answer. This episode will be available on-demand immediately after the completion of the live event. Watch all previous Ninja Show episodes and see the full season calendar at >> https://aka.ms/NinjaShow. Thank you for joining us! The next episode: Microsoft Defender for Endpoint Configuration Management deep dive airs Wednesday, September 13 th at 9 AM PT! Add it to your calendar here >> https://aka.ms/NinjaShow/502/calendarThe Virtual Ninja Show | Season 6 Episode 6
Security Copilot overview Join us as Product Manager Gabriel Damaschin introduces the capabilities of the highly anticipated Microsoft Security Copilot, driven by cutting-edge generative AI technology. In this episode, we discuss how the extensive capabilities and various applications of this tool enable you to operate at lightning-fast speeds and how Security Copilot extends its valuable support beyond the security operations center. Inquiries for the product team? Post your questions in advance or anytime during the live broadcast for our experts to answer. This episode will be available on-demand immediately after the completion of the live event. Watch all previous Ninja Show episodes and see the full season calendar at >> https://aka.ms/NinjaShow. Thanks for joining us! The next episode: Security Copilot for SOC analysts - boosting efficiency and expertise with Security Copilot in Microsoft Defender XDR airs Wednesday, December 6 th at 9 AM PTThe Virtual Ninja Show | Season 5 finale!
The next evolution of automatic attack disruption Our season finale is going in-depth on an innovative, industry-first capability that marks a significant step forward for defenders gaining ground against human-operated attacks. Principal Product Manager Noam Hadash and Principal Security Research Lead Yair Tsarfaty will demo a sophisticated attack being automatically disrupted early in the kill chain and show you how your organization can benefit from this protection that’s only possible with Microsoft 365 Defender. Inquiries for the product team? Post your questions in advance or anytime during the live broadcast for our experts to answer. This episode will be available on-demand immediately after the completion of the live event. Thanks so much for joining us this season. We’re already eager to bring you more content! In the meantime, watch all previous Ninja Show episodes on-demand at https://aka.ms/ninjashow. Until next time!The Virtual Ninja Show | Season 5 Episode 2!
Microsoft Defender for Endpoint Configuration Management deep dive We’re back with Dan Levy for an in-depth explanation of the Microsoft Defender for Endpoint feature updates introduced in our last episode. Join us to understand what happens on a device that is managed using multiple tools and channels, get recommendations for managing permissions between the Microsoft 365 Defender and Microsoft Intune portal, streamline grouping and targeting efforts, and learn how to mitigate unsupported scenarios. Inquiries for the product team? Post your questions in advance or anytime during the live broadcast for our experts to answer. This episode will be available on-demand immediately after the completion of the live event. Watch all previous Ninja Show episodes and see the full season calendar at >> https://aka.ms/NinjaShow. Thank you for joining us! The next episode: Integrating Microsoft 365 Defender with Azure logic apps airs Monday, September 18 th at 9AM PT Add it to your calendar here >> https://aka.ms/NinjaShow/503/calendarWelcome to The Virtual Ninja Show!
Promptbooks in Copilot for Security Join us as product experts Mamta Kumar, Amit Ghodke, Patrick David, and Dana Iris Gutkind unveil the latest Promptbooks in Copilot for Security. Get an exclusive demo as we explore the cross-products prompts from Microsoft Entra, Intune, Purview, and Defender. Inquiries for the product team? Post your questions in advance or anytime during the live broadcast for our experts to answer. This episode will be available on-demand immediately after the completion of the live event. Watch all previous Ninja Show episodes at >> https://aka.ms/NinjaShow. Thanks for joining us! Our next episode: Defender for Office 365: In-depth defense with dual-use scenario airs Thursday, October 10 th at 9 AM PTWelcome to The Virtual Ninja Show!
Automating Copilot for Security using Logic Apps Learn how Copilot for Security and Logic Apps now work together to streamline automation, enhance insights, and improve analysis - giving SOC teams more time to focus on what really matters: hunting down threats. In this episode, see a demo that highlights a practical use case, proving why automation is a must for modern security teams. Don't miss experts Yaniv Shasha and Craig Freyman reveal the potential of these tools to transform your security operations. Inquiries for the product team? Post your questions in advance or anytime during the live broadcast for our experts to answer. This episode will be available on-demand immediately after the completion of the live event. Watch all previous Ninja Show episodes at >> https://aka.ms/NinjaShow. Thanks for joining us! Our next episode: Defending operational technology (OT) environments with Microsoft Defender XDR airs Thursday, September 26 th at 9 AM PT
