Microsoft Mechanics Podcast

Take control of your data by discovering sensitive information across every file type and location with Microsoft Purview Information Protection. Classify your data, apply clear labels, and enforce protections that automatically adapt to human and AI interactions so you can reduce risk without slowing down workflows. Proactively monitor, assess, and respond to risk in real time. Use labeling and layered policies to stop accidental sharing, manage AI access, and maintain consistent protection across your organization. Matt McSpirit, Microsoft Mechanics expert, joins Jeremy Chapman to share how to turn scattered data into actionable security that moves as fast as your team and AI. ► QUICK LINKS: 00:00 - Microsoft Purview data protection 01:04 - Data Loss Prevention 03:36 - Layered approach in addition to DLP 04:13 - Unified classification 04:27 - How sensitive data is determined 06:23 - Create trainable classifiers 07:06 - Distinction between classification and labeling 08:06 - Configure policy protections 09:12 - DLP in action 10:10 - IRM in action 10:51 - See how protections show up 13:37 - Move from reactive to proactive protection 15:00 - Wrap up ► Link References For deeper guidance, go to https://aka.ms/PurviewInformationProtection ► Unfamiliar with Microsoft Mechanics? As Microsoft's official video series for IT, you can watch and share valuable content and demos of current and upcoming tech from the people who build it at Microsoft. • Subscribe to our YouTube: https://www.youtube.com/c/MicrosoftMechanicsSeries • Talk with other IT Pros, join us on the Microsoft Tech Community: https://techcommunity.microsoft.com/t5/microsoft-mechanics-blog/bg-p/MicrosoftMechanicsBlog • Watch or listen from anywhere, subscribe to our podcast: https://microsoftmechanics.libsyn.com/podcast ► Keep getting this insider knowledge, join us on social: • Follow us on Twitter: https://twitter.com/MSFTMechanics • Share knowledge on LinkedIn: https://www.linkedin.com/company/microsoft-mechanics/ • Enjoy us on Instagram: https://www.instagram.com/msftmechanics/ • Loosen up with us on TikTok: https://www.tiktok.com/@msftmechanics

Identify what data was exposed in a breach, not just where it moved, but what it contains, how sensitive it is, and the risk it creates using Microsoft Purview Data Security Investigations. Search across massive volumes of files using natural language, pinpoint the highest risk content, and connect it to user activity to see the full scope of an incident. Investigate and act in one workflow. Analyze content deeply across files, emails, and AI interactions, uncover hidden or unclassified sensitive data, and contain exposure fast. Proactively identify risks, respond to incidents with clarity, and mitigate impact before it spreads. Christophe Fiessinger, Microsoft Purview Principal Squad Leader, joins Jeremy Chapman to walk through real-world investigation workflows—from scoping and analysis to mitigation and automation—so you can move faster and make more informed security decisions. ► QUICK LINKS: 00:00 - Keep data safe with DSI 01:26 - Connect dots between data risk & impact 02:47 - Built-in AI 03:47 - Work across the full lifecycle of an incident 04:56 - Create an investigation 06:36 - Deep search and analysis 09:03 - How DSI helps data leaks 10:40 - Contain risk with built-in mitigation 11:32 - Automate using agents 13:23 - Estimator tool 14:57 - Wrap up ► Link References As a Microsoft Purview admin, just go to https://purview.microsoft.com/dsi ► Unfamiliar with Microsoft Mechanics? As Microsoft's official video series for IT, you can watch and share valuable content and demos of current and upcoming tech from the people who build it at Microsoft. • Subscribe to our YouTube: https://www.youtube.com/c/MicrosoftMechanicsSeries • Talk with other IT Pros, join us on the Microsoft Tech Community: https://techcommunity.microsoft.com/t5/microsoft-mechanics-blog/bg-p/MicrosoftMechanicsBlog • Watch or listen from anywhere, subscribe to our podcast: https://microsoftmechanics.libsyn.com/podcast ► Keep getting this insider knowledge, join us on social: • Follow us on Twitter: https://twitter.com/MSFTMechanics • Share knowledge on LinkedIn: https://www.linkedin.com/company/microsoft-mechanics/ • Enjoy us on Instagram: https://www.instagram.com/msftmechanics/ • Loosen up with us on TikTok: https://www.tiktok.com/@msftmechanics

Cut through alert noise and focus on the risks that matter with Agents in Microsoft Purview. Use Data Security Triage Agent to prioritize incidents, investigate user activity with full context, and uncover hidden patterns that signal real threats. Identify and act on high-risk behavior, like data exfiltration or persistent access, before it leads to data loss. Detect sensitive data across your environment using natural language with Data Security Posture Agent. Analyze content to find what's exposed, apply protections or restrict access, and surface hidden credentials, so you can take action and continuously reduce risk. Michelle Slotwinski, Microsoft Purview Senior Product Manager, shares how to stay ahead of data risk by turning investigation into proactive protection. ► QUICK LINKS: 00:00 - Reduce data risks 00:59 - Data Security Triage Agent 01:46 - Investigate risks 03:29 - Detect patterns 05:17 - Uncover nested insights 07:44 - Credential scanning 09:03 - Wrap up ► Link References https://aka.ms/AgentsinPurview ► Unfamiliar with Microsoft Mechanics? As Microsoft's official video series for IT, you can watch and share valuable content and demos of current and upcoming tech from the people who build it at Microsoft. • Subscribe to our YouTube: https://www.youtube.com/c/MicrosoftMechanicsSeries • Talk with other IT Pros, join us on the Microsoft Tech Community: https://techcommunity.microsoft.com/t5/microsoft-mechanics-blog/bg-p/MicrosoftMechanicsBlog • Watch or listen from anywhere, subscribe to our podcast: https://microsoftmechanics.libsyn.com/podcast ► Keep getting this insider knowledge, join us on social: • Follow us on Twitter: https://twitter.com/MSFTMechanics • Share knowledge on LinkedIn: https://www.linkedin.com/company/microsoft-mechanics/ • Enjoy us on Instagram: https://www.instagram.com/msftmechanics/ • Loosen up with us on TikTok: https://www.tiktok.com/@msftmechanics

Stay ahead of real-world threats without overwhelming your team using Microsoft Defender Experts for XDR. Offload high-severity incidents, gain full visibility into every investigation, and follow clear, guided remediation steps so you can contain attacks quickly and confidently, day or night. Extend your security operations with always-on managed detection and response and proactive threat hunting, so you can uncover hidden risks early, stop threats threats they spread, and strengthen your defenses to prevent future attacks. Maynald Savatdy, Microsoft Defender Expert, shows how to detect, contain, and hunt threats across your environment with support from human experts. ► QUICK LINKS: 00:00 - Microsoft Defender Experts 00:54 - 24/7 Security Coverage 01:35 - Visibility & guidance actions 03:34 - Incidents and alerts 04:25 - Social engineering attack 05:36 - Defender Experts for hunting 06:34 - Wrap up ► Link References Get started at https://aka.ms/DefenderExperts ► Unfamiliar with Microsoft Mechanics? As Microsoft's official video series for IT, you can watch and share valuable content and demos of current and upcoming tech from the people who build it at Microsoft. • Subscribe to our YouTube: https://www.youtube.com/c/MicrosoftMechanicsSeries • Talk with other IT Pros, join us on the Microsoft Tech Community: https://techcommunity.microsoft.com/t5/microsoft-mechanics-blog/bg-p/MicrosoftMechanicsBlog • Watch or listen from anywhere, subscribe to our podcast: https://microsoftmechanics.libsyn.com/podcast ► Keep getting this insider knowledge, join us on social: • Follow us on Twitter: https://twitter.com/MSFTMechanics • Share knowledge on LinkedIn: https://www.linkedin.com/company/microsoft-mechanics/ • Enjoy us on Instagram: https://www.instagram.com/msftmechanics/ • Loosen up with us on TikTok: https://www.tiktok.com/@msftmechanics

Automate device and security policy management by turning written compliance requirements into Intune policies. Use natural language to draft, refine, and deploy configuration profiles, review AI-generated recommendations with confidence scores, and stay in full control before publishing to your environment. Reduce risk and manual effort by automatically evaluating admin change requests and blocking harmful scripts before deployment. Prioritize vulnerabilities from Defender, translate them into actionable Intune remediation steps, and schedule ongoing fixes. Jason Githens, Microsoft Intune Principal GPM, shares how to move from reactive security work to continuous, proactive protection. Note: At the time of publishing this video, the Change Review Agent and Policy Configuration Agent are in public preview and the Vulnerability Remediation Agent is in limited public preview. ► QUICK LINKS: 00:00 - Automate work with Intune Agents 01:08 - Policy Configuration Agent 01:36 - Policy drafts 02:27 - Create a new knowledge source 03:25 - Create a new policy 04:49 - Change Review Agent 06:19 - Vulnerability Remediation Agent 07:46 - Wrap up ► Link References To get started, go to https://aka.ms/IntuneAgents ► Unfamiliar with Microsoft Mechanics? As Microsoft's official video series for IT, you can watch and share valuable content and demos of current and upcoming tech from the people who build it at Microsoft. • Subscribe to our YouTube: https://www.youtube.com/c/MicrosoftMechanicsSeries • Talk with other IT Pros, join us on the Microsoft Tech Community: https://techcommunity.microsoft.com/t5/microsoft-mechanics-blog/bg-p/MicrosoftMechanicsBlog • Watch or listen from anywhere, subscribe to our podcast: https://microsoftmechanics.libsyn.com/podcast ► Keep getting this insider knowledge, join us on social: • Follow us on Twitter: https://twitter.com/MSFTMechanics • Share knowledge on LinkedIn: https://www.linkedin.com/company/microsoft-mechanics/ • Enjoy us on Instagram: https://www.instagram.com/msftmechanics/ • Loosen up with us on TikTok: https://www.tiktok.com/@msftmechanics

Built-in Copilot features accessible from the taskbar and Search make AI part of your regular workflow. Voice and Fluid Dictation let you control apps and draft text hands-free. Agents run long tasks and monitor progress from the taskbar. Semantic file search and Copilot in File Explorer surface insights across local and cloud content. Click to Do turns on-screen items into editable data and actions.

Michael Madrigal, a security product manager who leads Microsoft’s Zero Trust approach, explains protecting identities, endpoints, data, AI resources, apps, and infrastructure. He covers continuous verification and least-privilege access. Conversations include runtime protections, AI agent identity, network segmentation, data labeling and DLP, and confidential computing.

Leandro Iwase, Microsoft Entra Senior Product Manager who demos Entra Agent ID, explains how to treat AI agents as real identities. He shows a dashboard for discovering agents, demos blueprints for least-privilege defaults, and walks through scoping access, agent-specific Conditional Access, real-time risk blocking, and handling ownerless agents.

Explore the power of new AI-driven agents in data security. Discover how the Data Security Triage Agent streamlines alert management by filtering out false positives and prioritizing high-risk incidents. Learn about automated user outreach via Teams, allowing quick remediation steps. Delve into the Data Security Posture Agent, which uncovers hidden risks through natural-language queries. With the help of Security Copilot, these tools enhance efficiency and control, helping you proactively safeguard your data.

AI agents act like coworkers with identities, email, OneDrive and Teams presence. See how agents handle procurement, approvals, research and updates while working in parallel with people. Learn about identity provisioning, contextual decision data, and visual tools to track every action. Discover controls for least-privilege access, continuous risk evaluation, and a unified admin control plane to manage agents at scale.