Talking Security: Insights from Microsoft Security Experts

Talking Security is a conversational podcast about the Microsoft security platform, hosted by Frans Oudendorp and Pouyan Khabazi. Frans introduces Pouyan on air as his great friend and co-host, and that ease carries through the show. Two formats appear. Guest interviews, some branded MVP Security Insights, sit alongside a strand called Let's Talk in which the two hosts take on the news themselves. In a Let's Talk recap of Microsoft Secure, the pair return from a short break, compare notes from the Workplace Ninja Summit, which Frans co-organized and where Pouyan spoke, and try to pin down what MCP does. One host describes it as a translation layer that turns plain language into something Sentinel can use, names BloodHound as another tool supporting it, and asks anyone who thinks that is wrong to say so in the comments. That moment captures the register well: informed, but not posturing. The Javier Soriano episode has more history behind it. The hosts introduce him as a public face of Microsoft Sentinel from day one and recall building its first automation and DevOps approaches with him, groundwork they tie to what became detection as code. Soriano frames log collection as keeping the lights on across a whole city: full visibility means bringing everything in, and that has always come at a cost. He presents the data lake tier as the release valve, built for ingestion at enterprise scale and searchable interactively with no cap on look-back. Identity returns across episodes. Eric Woodruff describes years of defender work as learning where the cracks between systems sit, jokes that he is a research garbage man, and takes questions on his research exposing paths to privileged roles. Phishing-resistant MFA, Windows Hello and adoption at banks come up in the same conversation. Michael van Horenbeeck, introduced as a Microsoft MVP for 14 consecutive years, lays out the difficulty of securing user, device and app identities across their full lifecycle, and of holding cloud and hybrid estates together. Public sector security is another thread. Ronny de Jong recalls celebrating his MVP award while still seeing others in the community as the real experts, then argues that central government shares the challenges of private enterprise, with specific actors drawn to occasions like the NATO summit. Security, in his framing, is never a one-off. Stefan Schörling is more direct: organisations digitised fast, security did not always follow, and unpatched systems, misconfigurations and neglected lifecycle management are where the biggest gaps sit. That conversation also reaches Sweden and the EU's NIS2 directive. Closing requests point to LinkedIn and X, with one aside wondering whether they are still on X at all. The hosts call it a podcast made from a community, for the community. Newcomers can start with Soriano for product depth, or with Woodruff and van Horenbeeck for identity.