Can you pen test yourself? Paula Januszkiewicz says yes! Richard talks to Paula about taking an active role in understanding your organization's security vulnerabilities. Paula talks about the low-hanging fruit she often finds as a professional penetration tester - typically on poorly maintained infrastructure like PKI servers. The conversation digs into tooling you can use to find vulnerabilities - just make sure you trust the source of those tools. Not everyone is a good guy in open source! And, of course, there's always a time to bring in professionals to do a deeper level of testing. Don't wait until the breach happens to take some action!

Links

• Cqure
• Penetration Testing
• GitHub Secrets Scanning
• HaveIBeenPwned

Recorded August 22, 2024

How can OpenAI help you with PowerShell? Richard talks to Doug Finke about his experiences with ChatGPT and GitHub Copilot to help him write PowerShell and how he incorporated the OpenAI API into a PowerShell library to create a conversational interface in his PowerShell scripts! Doug talks about his productivity gains using OpenAI to write better quality PowerShell faster - helping him understand the code, automate test writing, and explore aspects of PowerShell he had never dug into. But beyond writing code for him, adding the conversational interface to a PowerShell script opens a whole new interactive opportunity to make it easier for folks to use scripts and do more with them!

Links

• GitHub Copilot
• PSAI
• GPT-4o
• Doug's Blog
• Doug's YouTube Channel

Recorded August 7, 2024

Microsoft 365 Data Governance has always been critical - but it's only getting more important! Richard talks to Nikki Chapple about her experiences working with companies trying to get their "data estate in order." That phrase is what Microsoft recommends before turning on tools like Copilot for M365. Nikki talks about how hard the goal of data security is - that it is just as tricky as any other security goal. Data security is an endless process that needs refining and work on routinely as new data and classes of data arrive in the organization. In the meantime, users are taking advantage of LLMs like ChatGPT for their work whether we want them to or not - so there is a need to act quickly to provide secure capabilities!

Links

• Data. Privacy, and Security for Microsoft Copilot for M365
• Exabeam Business Rewards vs Security Risks Report
• Microsoft 2024 Work Trend Index Report
• Microsoft Purview Data Security and Compliance Protections for Generative AI Apps
• Microsoft Copilot Studio for M365
• Entra Entitlement Management
• Shareable Links in OneDrive and SharePoint in M365
• Nikki's M365 Governance Blog
• All Things M365 Governance on YouTube

Recorded August 16, 2024