RED Red Forest: The predecessor of EAM Jussi Metso, August 7, 2026August 7, 2026 In the on-premises Active Directory world, Microsoft used to recommend the Enhanced Security Administrative Environment — a dedicated, hardened AD forest used only for administering your production forest
entraid Conditional Access (CA) Policy templates Jussi Metso, July 13, 2026July 13, 2026 Table of Contents CA policy templates in Admin portal I noticed lately when I was...
DEFENDER FOR CLOUD Enabling Cloud Security in Defender portal Jussi Metso, June 22, 2026June 22, 2026 Microsoft Defender for Cloud (MDC) is now deeply integrated into the Defender portal at security.microsoft.com and part of the broader Microsoft Security eco-system.
RED Red Tenant intro Jussi Metso, March 31, 2026August 8, 2026 a “Red Tenant” usually means an isolated admin control plane. The common components are: a dedicated Entra tenant for admin identities, separate admin accounts from normal user accounts, hardened admin devices/PAWs, strict Conditional Access, just-in-time role...
SECURITY Understanding Microsoft Zero Trust Assessment Tool Jussi Metso, March 27, 2026March 27, 2026 The Zero Trust Assessment tests your tenant security configuration items aligned with the Secure Future Initiative (SFI) and Zero Trust pillars.
SECURITYCOPILOT Book review of Microsoft Security Copilot for Security Operations Jussi Metso, February 28, 2026February 28, 2026 The book takes you from understanding the foundations of AI in cybersecurity to fully integrating Microsoft Security Copilot into modern SOC, XDR, and SIEM operations.
BOOKREVIEW Book review of The Azure Cloud Native Architecture Mapbook – 2nd Edition Jussi Metso, December 9, 2025December 9, 2025 This book is for cloud architects, engineers, and technical decision-makers who design, build, or govern solutions on Azure.
DEFENDER FOR CLOUD NextGen Defender for Cloud: Phase 1 – public preview Jussi Metso, November 26, 2025December 2, 2025 Microsoft Defender for Cloud is expanding to the Defender portal to provide a unified security experience across cloud and code environments.
SECURITY Malware automated remediation in Defender for Storage Jussi Metso, September 17, 2025September 18, 2025 Defender for Storage now supports different ways to handle malicious files. Now you can select the remediation option that fits your scenario. Built-in remediation capabilities Automated workflows to move or remove malicious files Automated workflows to move or ingest clean files to another destination
SENTINEL Microsoft Sentinel Data lake (preview) Jussi Metso, August 25, 2025October 17, 2025 "a cloud-native security data platform that centralizes logs and telemetry from across your environment into a scalable, cost-efficient data lake"