Session Abstract

The adoption of Microsoft 365 Copilot, AI applications, and autonomous agents is transforming how organisations create, access, share, and expose data. Traditional data protection approaches are no longer sufficient. Security and compliance teams need new ways to classify data, prevent data loss, detect risky user behaviour, investigate incidents, govern AI usage, and hunt for emerging threats. This highly practical tutorial demonstrates how Microsoft Purview and Microsoft Defender work together to secure sensitive information across Microsoft ecosystem and AI-powered business processes. It is designed as a completely demonstration-centric experience focused on protecting, governing, monitoring, hunting, and investigating sensitive data across Microsoft 365, Microsoft Purview, Microsoft Defender, Microsoft 365 Copilot, Agent365, and AI agents. The workshop places major emphasis on: • Microsoft Purview Information Protection • Microsoft Purview Data Loss Prevention (DLP) • Microsoft Purview Insider Risk Management • Microsoft Purview Data Security Posture Management (DSPM) • Microsoft Purview eDiscovery and shows how these technologies interact with: • Microsoft Defender XDR • Microsoft Security Copilot • Agent365 • Advanced Hunting • KQL • AI Agents • Microsoft 365 Copilot Attendees will learn how compliance teams, security teams, governance teams, and incident responders can collaborate using a unified data security approach. Audience • Security Architects • Security Engineers • SOC Analysts • Compliance Officers • Data Protection Officers • Governance Teams • Security Operations Teams • Microsoft 365 Administrators • Microsoft Partners • Consultants • Technical Decision Makers What will you take away? 1. Design an information protection strategy using sensitivity labels. 2. Protect data using Microsoft Purview DLP. 3. Detect and investigate insider risks. 4. Use DSPM to identify and reduce data exposure. 5. Conduct compliance investigations using eDiscovery. 6. Understand how Microsoft Purview and Microsoft Defender exchange signals. 7. Investigate security events using Agent365. 8. Perform data-centric threat hunting using Advanced Hunting. 9. Create and adapt KQL investigations. 10. Protect Microsoft 365 Copilot and AI agents from oversharing. 11. Establish AI governance controls. 12. Correlate data security incidents across Purview and Defender. 13. Deep, practical, engineering and architectural discussion insights. 14. And much more!

Sasha Kranjac

Sasha is a Microsoft Regional Director (RD), Microsoft MVP and CEO of multiple companies, specialised in solving complex business and security challenges for executives and organisations globally. They provide critical guidance to leadership and CEOs to transform Cybersecurity and AI into strategic business advantage, executive‑level strategy and competitive business value. He holds a wide range of certifications from leading providers such as Microsoft, ISC2, AWS, CompTIA, EC-Council and others. Furthermore, Sasha is recognised as a CISSP, MCT, and MCT Community Lead. He is a frequent speaker at international conferences, user groups and events, book author on cloud security, Microsoft Azure, Microsoft 365, and Windows Server.