Everyday Defender
by Chris & Koos
Everyday Defender provides snackable, practical tips and tricks based on real-world experience to help you secure your Microsoft cloud environments.
Hosted by Microsoft MVPs Chris Goosen and Koos Goossens.
Episodes (18)

02x04-terminal_velocity.tui
May 1, 202652m
In this episode Chris covers some common Intune deployment mistakes he's come across while working with various customer environments. Koos has become a full-time Claude (Code) user over the past months and wants to shar

02x03-azure_fridays_but_its_us.now
Apr 2, 202647m#3
In this episode Koos discusses the Odido data breach in The Netherlands by hacker group Shinyhunters, one of the largest public data leaks in Dutch history. Touching on vishing, misconfigurations, and the importance of b

02x02_you_shall_not_pass.key
Mar 1, 202649m#2
In this episode, Chris take a look at PowerShell modules and how managing M365 and Entra ID has changed over the years. And Koos likes to re-visit Passkeys. This is not new and we covered it earlier in our very first epi

02x01_scu_later_alligator.json
Feb 1, 202636m#1
In this episode, Chris explores Agent 365 while Koos takes another look at Security Copilot. Since our last episode, several new announcements have dropped, making this a great time to dive in and see how these tools can

02x00_insert_disk_2.img
Jan 3, 20266m
Not your regular episode but an announcement for our upcoming second season. Chris and I share what we've been working in preparations for season 2, and what you can expect from us during the upcoming year. Follow us on

01x12_df3ndr.eof.01.tar.gz
Nov 1, 202527m#12
📍 Live from Times Square, New York City 🇺🇸 This was the first edition of Experts Live in the United States , and we couldn't be more proud to be part of it! We wrap up Season One with a special in-person recording fro

01x11_trust_me_im_a_keyboard.hid
Oct 1, 202552m#11
In this episode Chris asks "To block or not to block?" as he looks at geo blocking in Conditional Access, while Koos explores the human element in cybersecurity. Full show notes available on our blog: https://df3ndr.io/e

01x10_lake_it_till_you_make_it.log
Sep 2, 202553m#10
In this episode Koos takes a look at the recent release of Sentinel data lake and Chris shares 5 tips to help your Entra Privileged Identity Management (PIM) deployment. Full show notes available on our blog: https://df3

01x09 | open_port_regrets.pcap
Aug 1, 202540m#9
In this episode Chris revisits Microsoft Entra Suite and takes a deep dive into GSA - Global Secure Access . Koos did a project recently where Defender for External Attack Surface Management (EASM) was also implemented.

01x08 | copilot_reinstall.bat
Jul 1, 202545m#8
In this episode Koos returns to a somewhat controversial topic - Security Copilot , but this time without the hype and of course with some practical tips. Chris introduces Microsoft Entra Suite in the first of two episod

01x07 | summarize harden(Tenant) | take 5
Jun 2, 202547m#7
In this episode Chris shares 5 things you should configure in Microsoft 365 to make your tenant more secure and Koos introduces "Summary Rules" in Microsoft Sentinel. What are "Summary Rules"? And what new opportunities

01x06_ctrl_alt_disrupt.bat
May 4, 202544m#6
In this episode we look at one of Defender XDRs most exiting features at the moment: Attack Disruption! Why it is so exiting and how you can start using it today? Full show notes available on our blog: https://df3ndr.io/

01x05_DEVICEHIGH=MVPSUMMIT.SYS
Apr 3, 202534m#5
In this episode... Booting high on community energy! In this special in-person episode, recorded on-site at the Microsoft Campus during the MVP Summit 2025, Koos and Chris share behind-the-scenes insights, tech trends, a

01x04_RE:authmail.eml-and-siem.kql
Mar 1, 202541m#4
In this episode... * Chris revisits his e-mail authentication and security from last time to dig a little deeper. * Koos recently did some talks about SIEM migrations to Sentinel and keeping things as cost-efficient as p

01x03_authmail.eml-and-identity.gov
Feb 2, 202544m#3
In this episode... Chris takes a look at email security and digs into SPF, DMARC and all the other acronyms. Koos recently had some experience with Entra ID Entitlement Management he wants to share. What are Access Packa

01x02_Get-Ignite24Recap.ps1
Jan 5, 202539m#2
In this episode we do a recap of some of the security announcements from Microsoft Ignite 2024. Chris takes a look at the upcoming changes to Intune while Koos shares some thoughts on new capabilities within Defender XDR

01x01_mfa.exe
Dec 10, 202440m#1
In this episode Chris has some thoughts about MFA usage and deployment, and Koos recently ran into some issues with Passkeys and wants to share a couple of do's and don't's and also discuss future roadmap features. Full

01x00_boot_sequence.bat
Dec 1, 20248m
Introducing the podcast and getting to know Chris & Koos, our backgrounds, interests etc. We also take a look ahead at our first episode coming soon! Follow us on your favorite podcast platform or check us out at https:/