Ask Microsoft Anything: Why Cybersecurity Needs a New Security Stack for the AI Era with David Weston
David Weston leads Agentic Security at Microsoft, where he and his team build the AI models, autonomous agents, and evaluation systems redefining how defenders operate. At Microsoft since the Windows 7 era, he has worked across exploit mitigation design, malware analysis, APT research, and led security engineering for Windows, Xbox, Azure OS, and Microsoft's Offensive Security Research & Engineering group. His current work is leading teams training frontier security models, agentic security systems for defenders, and pushing AI-driven vulnerability discovery through Microsoft's Multi-Model Agentic Scanning Harness (MDASH). A longtime member of the research community and former CISA technical advisor, David is a regular presenter at BlueHat, Black Hat, and DEF CON. Key areas Dave and his team can discuss: The vision behind Project Perception How AI is changing the economics of cyber offense and defense Lessons learned from building MDASH and Microsoft's AI security initiatives Security-first AI development and deployment What's next for defenders as agentic systems become mainstream This will be a TEXT-BASED AMA, so ask your questions in the comment section down below and David and team will be answering via comment replies during the live hour!Security Copilot- Demystifying SCUs Deep Dive and AMA
Security Compute Units (SCUs) are the required resource units that power Microsoft Security Copilot, ensuring dependable and consistent performance across both standalone and embedded product experiences within Microsoft Security. In this session, we’ll demystify SCUs by unpacking: What SCUs are and how they function The billing models that govern their usage Optimization strategies to maximize value Best practices for SCU planning and deployment You’ll also have the opportunity to engage directly with Security Copilot experts to ask your SCU-related questions and gain practical insights. What is an AMA? An 'Ask Microsoft Anything' (AMA) session is an opportunity for you to engage directly with Microsoft employees! This AMA will consist of a short presentation followed by taking questions on-camera from the comment section down below! Ask your questions/give your feedback and we will have our awesome Microsoft Subject Matter Experts engaging and responding directly in the video feed. We know this timeslot might not work for everyone, so feel free to ask your questions at any time leading up to the event and the experts will do their best to answer during the live hour. This page will stay up so come back and use it as a resource anytime. We hope you enjoy!Welcome to The Virtual Ninja Show!
Bulk Sender Insights in Microsoft Defender for Office 365 In this episode, Senior Product Manager Puneeth Kuthati explains the importance of bulk sender insights within Defender for Office 365. Discover how these insights help differentiate trustworthy bulk senders from potential threats, tackle the challenges of fine-tuning bulk email filters, and strike the right balance to ensure important emails reach your inbox without overwhelming it. By analyzing sender behavior and trends, organizations can strengthen email security, reduce unwanted bulk traffic, and minimize false positives. Inquiries for the product team? Post your questions in advance or anytime during the live broadcast for our experts to answer. This episode will be available on-demand immediately after the completion of the live event. Watch all previous Ninja Show episodes at >> https://aka.ms/NinjaShow. Thanks for joining us! Visit https://aka.ms/ninjashow to review any previous episodes and for upcoming show details.Welcome to The Virtual Ninja Show!
Defender for Office 365: In-depth defense with dual-use scenario We are joined by Senior Product Manager Manfred Fischer and Cloud Solution Architect Dominik Hoefling to explore the built-in protection mechanisms in Defender for Office 365. Tune into this episode as we dive deep into a dual-use scenario demonstration to learn how customers using third-party email filtering services can still leverage the powerful features and controls of Microsoft Defender for Office 365. Inquiries for the product team? Post your questions in advance or anytime during the live broadcast for our experts to answer. This episode will be available on-demand immediately after the completion of the live event. Watch all previous Ninja Show episodes at >> https://aka.ms/NinjaShow. Thanks for joining us! Our next episode: Bulk Sender Insights in Microsoft Defender for Office 365 airs Tuesday, October 17 th at 9 AM PTWelcome to The Virtual Ninja Show!
Promptbooks in Copilot for Security Join us as product experts Mamta Kumar, Amit Ghodke, Patrick David, and Dana Iris Gutkind unveil the latest Promptbooks in Copilot for Security. Get an exclusive demo as we explore the cross-products prompts from Microsoft Entra, Intune, Purview, and Defender. Inquiries for the product team? Post your questions in advance or anytime during the live broadcast for our experts to answer. This episode will be available on-demand immediately after the completion of the live event. Watch all previous Ninja Show episodes at >> https://aka.ms/NinjaShow. Thanks for joining us! Our next episode: Defender for Office 365: In-depth defense with dual-use scenario airs Thursday, October 10 th at 9 AM PTWelcome to The Virtual Ninja Show!
Defending operational technology (OT) environments with Microsoft Defender XDR Senior Product Managers Adi Weisberg and Ariel Saghiv share their expertise in this episode, offering valuable guidelines and insights for OT security teams on how to effectively leverage Microsoft Defender XDR capabilities to secure IT and OT environments across your entire digital estate. Inquiries for the product team? Post your questions in advance or anytime during the live broadcast for our experts to answer. This episode will be available on-demand immediately after the completion of the live event. Watch all previous Ninja Show episodes at >> https://aka.ms/NinjaShow. Thanks for joining us! Our next episode: Proactive Protection with Microsoft Security Exposure Management airs Thursday, October 3 rd at 9 AM PTWelcome to The Virtual Ninja Show!
Automating Copilot for Security using Logic Apps Learn how Copilot for Security and Logic Apps now work together to streamline automation, enhance insights, and improve analysis - giving SOC teams more time to focus on what really matters: hunting down threats. In this episode, see a demo that highlights a practical use case, proving why automation is a must for modern security teams. Don't miss experts Yaniv Shasha and Craig Freyman reveal the potential of these tools to transform your security operations. Inquiries for the product team? Post your questions in advance or anytime during the live broadcast for our experts to answer. This episode will be available on-demand immediately after the completion of the live event. Watch all previous Ninja Show episodes at >> https://aka.ms/NinjaShow. Thanks for joining us! Our next episode: Defending operational technology (OT) environments with Microsoft Defender XDR airs Thursday, September 26 th at 9 AM PTWelcome to The Virtual Ninja Show!
Proactive Protection with Microsoft Security Exposure Management: Part 1 In this episode, we explore Microsoft Security Exposure Management, learning how it quantifies risks, generates reports for key stakeholders, unifies the security stack, and optimizes attack surface management. Join us to discover the tools and processes that power proactive risk management, helping organizations stay ahead of evolving threats. Inquiries for the product team? Post your questions in advance or anytime during the live broadcast for our experts to answer. This episode will be available on-demand immediately after the completion of the live event. Watch all previous Ninja Show episodes at >> https://aka.ms/NinjaShow. Thanks for joining us! Our next episode: Proactive Protection with Microsoft Security Exposure Management: Part 2 airs Thursday, October 3 rd at 9 AM PTWelcome to The Virtual Ninja Show!
Simplifying your Microsoft Sentinel migration experience In this episode, we learn common challenges of SIEM Migration and explore initiatives being taken by Microsoft Sentinel to simplify this process for customers with the SIEM Migration capabilities. With expert guidance from Senior Product Manager Prateek Taneja, we explore the latest support enhancements, including new language translation capabilities and other features designed to ensure a seamless and efficient transition to Microsoft Sentinel. Inquiries for the product team? Post your questions in advance or anytime during the live broadcast for our experts to answer. This episode will be available on-demand immediately after the completion of the live event. Watch all previous Ninja Show episodes at >> https://aka.ms/NinjaShow. Thanks for joining us! Our next episode: Demystifying correlations in the Unified Security Operations Platform airs Thursday, September 12 th at 9 AM PTWelcome to The Virtual Ninja Show!
Network Security Protection with Azure Firewall, Azure WAF, and Azure DDoS Join us for an insightful overview of Azure Network Security, where we introduce the robust protection capabilities of Azure Firewall, Azure Web Application Firewall (WAF), and Azure DDoS Protection. Product Manager Andrew Mathu highlights the key features and benefits of these security products, showcasing how they collectively fortify your network against various threats. Inquiries for the product team? Post your questions in advance or anytime during the live broadcast for our experts to answer. This episode will be available on-demand immediately after the completion of the live event. Watch all previous Ninja Show episodes at >> https://aka.ms/NinjaShow. Thanks for joining us! Our next episode: Simplifying your Microsoft Sentinel migration experience airs Tuesday, September 10 th at 9 AM PT
