Everyday Defender

02x03-azure_fridays_but_its_us.now

Thu, 02 Apr 2026 10:18:27 GMT

In this episode Koos discusses the Odido data breach in The Netherlands by hacker group Shinyhunters, one of the largest public data leaks in Dutch history. Touching on vishing, misconfigurations, and the importance of blocking Device Code Flow. Chris was inspired by a fellow MVP to take a look at common AD security mistakes and provides some detail on how to look for these in your environment.

Full show notes available on our blog: https://df3ndr.io/episodes/2026/04/02/02x03-azure_fridays_but_its_us.now.html

02x02_you_shall_not_pass.key

Sun, 01 Mar 2026 06:00:00 GMT

In this episode, Chris take a look at PowerShell modules and how managing M365 and Entra ID has changed over the years. And Koos likes to re-visit Passkeys. This is not new and we covered it earlier in our very first episode in December of 2024. But quite a few things have changed since then and he believes now is the time to start onboarding at scale.

Full show notes available on our blog: https://df3ndr.io/episodes/2026/03/01/02x02_you_shall_not_pass.key.html

02x01_scu_later_alligator.json

Sun, 01 Feb 2026 08:28:55 GMT

In this episode, Chris explores Agent 365 while Koos takes another look at Security Copilot. Since our last episode, several new announcements have dropped, making this a great time to dive in and see how these tools can help streamline the work of security teams.

Full show notes available on our blog: https://df3ndr.io/episodes/2026/02/01/02x01_scu_later_alligator.html

02x04-terminal_velocity.tui

Fri, 01 May 2026 06:00:00 GMT

In this episode Chris covers some common Intune deployment mistakes he's come across while working with various customer environments.

Koos has become a full-time Claude (Code) user over the past months and wants to share why he's blown away. A few real-world stories where an AI agent saved the day. Or actually MULTIPLE days worth of work. ;). There's been a lot of talk lately about different models and multiple AI services seem to have been offering multiple different models to pick from. And even then; the same model can feel completely different depending on which "harness" it runs inside. Koos will explain what that is and why the right harness for the work you do matters more than the model sitting underneath it.

Full show notes available on our blog: https://df3ndr.io/episodes/2026/05/01/02x04-terminal_velocity.tui.html

02x00_insert_disk_2.img

Sat, 03 Jan 2026 01:50:00 GMT

Not your regular episode but an announcement for our upcoming second season. Chris and I share what we've been working in preparations for season 2, and what you can expect from us during the upcoming year.

Follow us on your favorite podcast platform or check us out on [YouTube](https://www.youtube.com/@CloudArchitects/podcasts)

01x12_df3ndr.eof.01.tar.gz

Sat, 01 Nov 2025 06:00:19 GMT

📍 Live from Times Square, New York City 🇺🇸 This was the first edition of Experts Live in the United States, and we couldn't be more proud to be part of it!

We wrap up Season One with a special in-person recording from Microsoft’s office in NYC during Experts Live US.

No planning, no script – just good conversation, best practices, and bad Sentinel acronyms. 😉 Chris and Koos will both be talking about their sessions they gave at the event.

Chris will discuss securitu baseline best-practices. And Koos will be sharing Sentinel tips from the field.

Full show notes available on our blog: https://df3ndr.io/episodes/2025/11/01/01x12_df3ndr.eof.01.tar.gz.html

01x11_trust_me_im_a_keyboard.hid

Wed, 01 Oct 2025 22:02:14 GMT

In this episode Chris asks "To block or not to block?" as he looks at geo blocking in Conditional Access, while Koos explores the human element in cybersecurity.

Full show notes available on our blog: https://df3ndr.io/episodes/2025/10/01/01x11_trust_me_im_a_keyboard_hid.html

01x10_lake_it_till_you_make_it.log

Tue, 02 Sep 2025 01:16:37 GMT

In this episode Koos takes a look at the recent release of Sentinel data lake and Chris shares 5 tips to help your Entra Privileged Identity Management (PIM) deployment.

Full show notes available on our blog: https://df3ndr.io/episodes/2025/09/01/01x10_lake_it_till_you_make_it_log.html

01x09 | open_port_regrets.pcap

Fri, 01 Aug 2025 06:00:50 GMT

In this episode Chris revisits Microsoft Entra Suite and takes a deep dive into GSA - Global Secure Access. Koos did a project recently where Defender for External Attack Surface Management (EASM) was also implemented. And he likes to share how awesome this product is, as well as share some practical tips and pitfalls you need to wary of.

Full show notes available on our blog: https://df3ndr.io/episodes/2025/08/01/01x09_open_port_regrets_pcap.html

01x08 | copilot_reinstall.bat

Tue, 01 Jul 2025 06:52:47 GMT

In this episode Koos returns to a somewhat controversial topic - Security Copilot, but this time without the hype and of course with some practical tips. Chris introduces Microsoft Entra Suite in the first of two episodes taking a look at these capabilities.

Full show notes available on our blog: https://df3ndr.io/episodes/2025/07/01/01x08_copilot_reinstall_bat.html

01x07 | summarize harden(Tenant) | take 5

Mon, 02 Jun 2025 06:50:18 GMT

In this episode Chris shares 5 things you should configure in Microsoft 365 to make your tenant more secure and Koos introduces "Summary Rules" in Microsoft Sentinel. What are "Summary Rules"? And what new opportunities might bring it to your logging strategies?

Full show notes available on our blog: https://df3ndr.io/episodes/2025/06/02/01x07_summarize-harden-take5.html

01x06_ctrl_alt_disrupt.bat

Sun, 04 May 2025 07:57:15 GMT

In this episode we look at one of Defender XDRs most exiting features at the moment: Attack Disruption! Why it is so exiting and how you can start using it today?

Full show notes available on our blog: https://df3ndr.io/episodes/2025/04/03/01x06_ctrl_alt_disrupt.html

01x05_DEVICEHIGH=MVPSUMMIT.SYS

Thu, 03 Apr 2025 02:20:54 GMT

In this episode...

Booting high on community energy! In this special in-person episode, recorded on-site at the Microsoft Campus during the MVP Summit 2025, Koos and Chris share behind-the-scenes insights, tech trends, and reflections on the evolving security landscape—all while dodging T-shirt printers and Summit buzz.

Full show notes available on our blog: https://df3ndr.io/episodes/2025/04/03/01x05_DEVICEHIGH=MVPSUMMIT.SYS.html

01x04_RE:authmail.eml-and-siem.kql

Sat, 01 Mar 2025 08:00:22 GMT

In this episode...

* Chris revisits his e-mail authentication and security from last time to dig a little deeper.

* Koos recently did some talks about SIEM migrations to Sentinel and keeping things as cost-efficient as possible. He also believes a company shouldn't focus solely on Microsoft Sentinel, and should consider looking into alternatives alongside it like Azure Data Explorer. And why are companies so focussed on collecting all those logs in a "legacy" matter?

Full show notes available on our blog:

https://df3ndr.io/episodes/2025/03/01/01x04_REauthmail-and-siem_kql.html

01x03_authmail.eml-and-identity.gov

Sun, 02 Feb 2025 23:35:20 GMT

In this episode...

Chris takes a look at email security and digs into SPF, DMARC and all the other acronyms.

Koos recently had some experience with Entra ID Entitlement Management he wants to share. What are Access Packages? And why should you look into it?

Full show notes available on our blog: https://df3ndr.io/episodes/2025/02/02/01x03_authmail_eml-and-identity_gov.html

01x02_Get-Ignite24Recap.ps1

Sun, 05 Jan 2025 07:03:49 GMT

In this episode we do a recap of some of the security announcements from Microsoft Ignite 2024. Chris takes a look at the upcoming changes to Intune while Koos shares some thoughts on new capabilities within Defender XDR and some other Security-related updates.

Full show notes available on our blog: https://df3ndr.io/episodes/2025/01/05/01x02_Get-Ignite24Recap.html

01x01_mfa.exe

Tue, 10 Dec 2024 22:11:33 GMT

In this episode Chris has some thoughts about MFA usage and deployment, and Koos recently ran into some issues with Passkeys and wants to share a couple of do's and don't's and also discuss future roadmap features.

Full show notes available on our blog: https://df3ndr.io/episodes/2024/12/10/01x01_mfa.html

01x00_boot_sequence.bat

Sun, 01 Dec 2024 23:13:28 GMT

Introducing the podcast and getting to know Chris & Koos, our backgrounds, interests etc. We also take a look ahead at our first episode coming soon!

If you prefer video you can check us out on YouTube at https://www.youtube.com/@CloudArchitects/podcasts