We will review the latest attack trends and how they are shaping customer security priorities. The session will connect these patterns to Microsoft’s exposure-driven defense approach and show how partners can help customers identify and reduce risk before attacks progress

We will introduce the Agentic SOC concept and how Security Copilot works across Defender XDR and Sentinel. The session will show how AI can accelerate triage, investigation, and response while helping analysts work more consistently and efficiently.

This hands-on lab will cover practical device and application management scenarios with Intune. Participants will work through controls that help secure endpoints, enforce compliance, and support broader E5 security outcomes.

This hands-on lab will cover practical device and application management scenarios with Intune. Participants will work through controls that help secure endpoints, enforce compliance, and support broader E5 security outcomes.

We will go deeper into Entra Suite capabilities and how they support identity security across users, workloads, and emerging non-human identities. The session will cover identity governance, access controls, and how Entra strengthens Zero Trust architecture.

We will show how Sentinel and Defender XDR work together to support investigation, automation, and response. The session will highlight attack disruption and how Microsoft Security helps reduce time from detection to containment.

We will cover how partners can manage access, permissions, and operational separation across multi-tenant customer environments. The session will focus on RBAC, delegation, and governance models that support secure partner operations.

We will cover the technical controls needed to help customers adopt AI securely across identities, apps, data, and endpoints. The session will highlight the role of Entra, Defender, Purview, A365, and Defender for AI in reducing AI-related risk.

We will focus on how Purview helps customers protect, classify, and govern sensitive data in the AI era. The session will cover DLP, sensitivity labels, and data security controls that enable responsible AI adoption.

We will walk through a practical technical readiness checklist for AI adoption. Partners will learn what to validate across identity, data, devices, apps, and SOC capabilities before customers scale AI usage. We will introduce MDASH and how it helps identify security gaps through code and configuration scanning. The session will show how partners can use these insights to prioritize remediation and strengthen customer environments.

This hands-on session will simulate attacker and defender scenarios to reinforce real-world detection and response skills. Participants will see how Microsoft Security capabilities can be used to investigate,
contain, and respond to active threats.

We will cover how Microsoft Security helps customers understand and reduce risk across multi-cloud environments. The session will connect cloud posture, exposure management, and prioritization of the most critical remediation actions.