So what’s this really about? AI security isn’t a brand-new discipline. It’s the same identity, data protection, monitoring and governance work we’ve been doing for years, only now the consequences...
So what’s actually changed? Right, so Microsoft has published another warning to critical infrastructure leaders, and for once it isn’t just the usual “threats are evolving” wallpaper. I think the...
Why this exists Right, so Microsoft didn’t bolt Intune and Defender together because any of us were sat there begging for more toggles. They did it because the old model was ridiculous. Defender c...
Attackers do not care about the average device in your estate. They care about the machines and identities that let them own the rest of it. Domain controllers, identity sync servers, certificate i...
Secure SSH Access to Azure VMs Using Microsoft Entra Private Access: A Cost-Effective Alternative to Azure Bastion Small and medium-sized businesses (SMBs) often face challenges managing secure an...
Why Microsoft 365 E5 Finally Feels Like the “E7” License I’ve spent years complaining that Microsoft’s licensing left security and endpoint teams half-equipped. I was one of the people saying “we ...
A Nuclear weapons story: Making SharePoint Zero-Day-Tolerant with Microsoft Entra, Microsoft Sentinel, & Security Copilot A SharePoint zero-day went from stage demo to real-world disaster afte...
Migrating Windows 10 to Windows 11 with Microsoft Intune With Windows 10 reaching end-of-life in October 2025, organizations are planning their move to Windows 11. Fortunately, modern tools like M...
Microsoft’s Sovereign Cloud Announcement: A New Era for EU Compliance and Control In this post, I’ll break down what Microsoft’s new sovereign cloud measures really mean for Microsoft 365 in the E...
Retaining and Preserving Microsoft 365 and Purview Forensic Logs and Insider Risk Evidence Managing a Microsoft 365 E5 tenant for forensic and legal requirements involves ensuring that all relevan...