Let's Talk Azure! - TopPodcast.com

Latest Episodes:

S6E25 - Securing Azure's Core: Microsoft Defender for Resource Manager, Key Vault, and APIs Oct 24, 2025

Show notes

In this episode, we dive into three key Cloud Workload Protection Platform (CWPP) offerings within Microsoft Defender for Cloud: Defender for Resource Manager, Defender for Key Vault, and Defender for APIs. Our Q&A format explores how these tools safeguard Azure environments against sophisticated threats, from management layer exploits to API vulnerabilities. Key Takeaways:

Defender for Resource Manager monitors and protects against suspicious operations in Azure's management layer.
Defender for Key Vault adds native threat protection to detect anomalous access to secrets and credentials.
Defender for APIs provides full lifecycle security for APIs in Azure API Management, including inventory, posture recommendations, and runtime threat detection.
These plans integrate seamlessly into Defender for Cloud's broader CNAPP framework for multi-cloud and hybrid protection.

What did you think of this episode? Give us some feedback via our contact form, Or leave us a voice message in the bottom right corner of our site.

Read transcript

S6E14 - Securing M365 with ScubaGear: A Deep Dive into CISA’s Assessment Tool May 30, 2025

Show notes

In this episode, we dive deep into ScubaGear, an open-source tool developed by the Cybersecurity and Infrastructure Security Agency (CISA) as part of the Secure Cloud Business Applications (SCuBA) project. Designed to assess Microsoft 365 (M365) tenant configurations, ScubaGear helps organizations align with CISA’s Secure Configuration Baselines (SCBs) to prevent costly misconfigurations. From setup to real-world applications, we unpack how ScubaGear strengthens M365 security and share practical tips for IT admins and security teams. What You’ll Learn:

Why ScubaGear Matters: Learn how ScubaGear addresses the growing threat of cloud misconfigurations, which accounted for 30% of cloud attacks in early 2024. We discuss its origins in CISA’s SCuBA project, and its value for US federal agencies, private organizations, and critical infrastructure.
How ScubaGear Works: A technical breakdown of ScubaGear’s PowerShell-based workflow, using Microsoft Graph APIs and Open Policy Agent (OPA) to compare tenant settings against SCBs. We cover setup requirements.
Common Misconfigurations: Examples like disabled MFA or weak DLP policies, and how ScubaGear’s HTML, JSON, and CSV reports provide actionable remediation steps.
Best Practices: Tips for integrating ScubaGear into security workflows, including regular scans, policy customization, and combining with tools like Microsoft Secure Score.
Real-World Insights: Sam shares experiences from consulting.

What did you think of this episode? Give us some feedback via our contact form, Or leave us a voice message in the bottom right corner of our site.

Read transcript

S6E10 - Microsoft updates March - new products and features released Apr 11, 2025

Show notes

This week, Alan and Sam talk about new features and services that have gone into Public Preview or General Available status in the last month. We dive into a couple of these updates that peaked our interest.

Some of the Microsoft product features and update we covered:

Key Microsoft Entra, Intune and Defender features and updates
Lots of Azure changes and new features

What did you think of this episode? Give us some feedback via our contact form, Or leave us a voice message in the bottom right corner of our site.

Read transcript

S5E41 - Manage your patching processes using Azure Update Manager and Hotpatch Dec 06, 2024

Show notes

Alan and Sam discuss the process organisations go through to manage patches. Alan dives into some of the tooling and covers:

Why is patch management important and what are some of the issues you can run into
what tooling can help with patch management for servers
What is Azure update manager
What is hotpatch for Windows servers

What did you think of this episode? Give us some feedback via our contact form, Or leave us a voice message in the bottom right corner of our site.

Read transcript

S5E13 - Microsoft Cloud PKI - deploy your user and device certificates from the cloud Apr 12, 2024

Show notes

Alan and Sam discuss Microsoft's new Cloud PKI service, which enables the management and deployment of device and user certificates through Intune. Below are some key points we addressed:

What are user and device certificates and how are they used
How would you normally manage PKI services
What is Microsoft’s Cloud PKI
How much does it cost?

What did you think of this episode? Give us some feedback via our contact form, Or leave us a voice message in the bottom right corner of our site.

Read transcript

S4E12 - Microsoft Defender for Cloud Apps - Your SSPM and CASB solution Sep 01, 2023

Show notes

Alan and Sam discuss how Microsoft Defender for Cloud Apps can help monitor and secure access to your SaaS applications. Here are a few things we covered:

What is Microsoft Defender for Cloud Apps
How do we discover shadow IT?
How to monitor activity and files in SaaS Apps
What is App Governance
How can we secure sessions to SaaS applications
How is it licenced.

What did you think of this episode? Give us some feedback via our contact form, Or leave us a voice message in the bottom right corner of our site.

Read transcript

S4E11 - Azure Chaos Studio - Use chaos to improve your infrastructure resilience in Azure Aug 25, 2023

Show notes

This week we discussed Azure Chaos Studio. Chaos Studio allows organisations to run test plans to introduce chaos. Learn how your applications and infrastructure are effected by infrastructure disruption without having to wait for actual disruption.

Sam takes the lead with providing insights such as:

What is Chaos Engineering, and why it may be beneficial to your organisation
What is Azure Chaos studio and
What operations are supported with Chaos Studio
In what scenarios you would use Chaos studio

What did you think of this episode? Give us some feedback via our contact form, Or leave us a voice message in the bottom right corner of our site.

Read transcript

S4E10 - Microsoft Entra - Global Secure Access First Look Aug 18, 2023

Show notes

Alan and Sam discuss Microsoft Entra ID Global Secure Access. A feature that was announced with the rebrand of Azure AD to Microsoft Entra ID. Here are a few things we covered:

What is Microsoft Entra Internet Access
What is Microsoft Entra Private Access
How do these features help secure access to the internet and to SaaS and internal applications?
Do we know how it is licenced yet?
How to add MFA and conditional access to legacy applications and protocols that are unable to support it.

What did you think of this episode? Give us some feedback via our contact form, Or leave us a voice message in the bottom right corner of our site.

Read transcript

S4E8 - Zero-touch deployments with Microsoft Intune Aug 04, 2023

Show notes

Alan and Sam discuss how Zero-Touch deployments can help organisation reduce the effort needed to build devices. Alan goes through some of the scenarios and the benefits. Here are a few things we covered:

What are zero-touch deployments
What are the business and it department benefits
What is supported in Microsoft Intune
How easy is it to get started?

What did you think of this episode? Give us some feedback via our contact form, Or leave us a voice message in the bottom right corner of our site.

Update: A listener pointed out that you can now manually add iOS devices onto ABM via a Mac and iPhone

https://support.apple.com/sv-se/guide/apple-configurator/welcome/ios

Read transcript

S3E1 - Azure MFA - Securing access to your corporate environment Jan 06, 2023

Show notes

Alan and Sam discuss how Azure MFA can be used to improve you security posture. MFA is ubiquitous in 2023, however utilizing MFA in a secure and user first experience can be challenging. In this episode we aim to give you the knowledge and experience we have gained working on many MFA related projects over the years.

What did you think of this episode? Give us some feedback via our contact form, Or leave us a voice message in the bottom right corner of our site.

Our TOPPODCAST Picks

Follow Us

Stay Connected

Let’s Talk Azure!

Related Podcasts

Links

Stay Connected