Episode 416 – Microsoft Sentinel, Security, and Ignite with Henrik Wojcik
Microsoft Cloud IT Pro PodcastShow Notes
Welcome to Episode 416 of the Microsoft Cloud IT Pro Podcast. In this week’s episode, Ben finally has a chance to sit down with Henrik Wojcik. Henrik has been a long-time listener as well as a fellow Microsoft MVP in Security and we finally had the chance to sit down and record an episode together, something we’ve talked about doing for years.
As they sit down and enjoy a sunny afternoon in at Microsoft Ignite in San Francisco they discuss security in the financial sector, EU regulations (N2 and DORA), integrating Data Lake with Sentinel, optimizing log analytics, and the latest on Security Copilot and E5 licensing. They also spend some time chatting about some of their conference highlights, assisting as proctors in the hands-on labs, and the unique experience of Ignite in San Francisco.
Show Notes
Microsoft Ignite (with sessions on demand)
Microsoft Ignite Book of News
Catch up on Microsoft Security sessions and announcements from Ignite 2025
Microsoft Sentinel benefit for Microsoft 365 E5, A5, F5, and G5 customers
Learn about Security Copilot inclusion in Microsoft 365 E5 subscription
Microsoft Sentinel data lake: Unify signals, cut costs, and power agentic AI
What is Microsoft Sentinel data lake?
KQL and the Microsoft Sentinel data lake
Henrik F. Wojcik
Henrik has worked in the IT industry since 2003. He’s always had a passion for learning new technologies and expanding his knowledge through various means such as online courses, webinars, and reading up on the latest developments in the industry.
Throughout his career, he’s gained experience in various areas of IT, making him a true jack of all trades. However, his latest interests lie in the security space, modern workplace and management in Azure, with a particular focus on cyber security. He has experience working with products such as Defender for Endpoint, Defender for Identity, Defender for Cloud Apps, Defender for Office 365, Conditional Access, Microsoft Sentinel, and Microsof t Entra ID.
His primary focus is on security on Azure workloads and identity (Entra ID). He prioritizes security awareness and believe that learning never stops, which is why He’s always eager to expand my knowledge and skillset.
In the past, He’s also worked with various tools and technologies such as Cisco, Citrix, Dynamics AX, Exchange, ITIL, Azure, SCCM & SCOM, Scrum & Kanban, VMware, Windows Servers, and Windows Desktops.
About the sponsors
Would you like to become the irreplaceable Microsoft 365 resource for your organization? Let us know!
More from Microsoft Cloud IT Pro Podcast
Welcome to Episode 439 of the Microsoft Cloud IT Pro Podcast. In this episode, Ben and Scott dig into two Azure agents with confusingly different names: the Azure Copilot Troubleshooting Agent and the Azure SRE Agent. Scott’s mental model is that the Troubleshooting Agent is the free, human-in-the-loop entry point built into the Azure portal. It runs as you, works one problem at a time, and opens a support request when it gets stuck. The SRE Agent is a paid operational platform with its own managed identity. It watches your logs, alerts, and repos, forms hypotheses, and can act in review or autonomous mode, much like a new member of your team.
Welcome to Episode 438 of the Microsoft Cloud IT Pro Podcast. Back in Episode 429, Ben and Scott introduced LLM wikis. In this episode, they come back a few months later to compare what those wikis turned into after real daily use: personalized work operating systems, or a WorkOS, that tie together tasks, meetings, research, communications, and recurring workflows. Scott walks through the skills that now run his day, from a 9:00 a.m. prioritization pass and meeting prep to meeting capture, end-of-day review, and clipping ingestion, all while keeping governed documents in Microsoft 365 where they belong.
Welcome to Episode 437 of the Microsoft Cloud IT Pro Podcast. In this episode, Nick Burling, Chief Product Officer at Nasuni, joins Ben and Scott to talk about getting unstructured file data ready for AI. Nick digs into why 70 to 80 percent of enterprise data sits in file shares and object storage, how that data tends to end up ungoverned and risky to point AI at, and Nasuni’s PSYCHIC framework for making it proprietary, secure, current, indexed, hybrid, and continuous. The conversation covers Nasuni’s AI Activate, the MCP based service that enforces permissions before a query ever runs, and the recent DryvIQ acquisition, which adds content classification, redaction, and policy enforcement on top of that index.
Welcome to Episode 436 of the Microsoft Cloud IT Pro Podcast. In this episode, Ben and Scott dive into Microsoft Entra Tenant Governance. Almost nobody runs one Microsoft Entra tenant. Mergers, divestitures, dev and test environments, regional partitioning, that one AI proof-of-concept somebody spun up on a credit card. Organizations accumulate tenants the way they accumulate SharePoint sites. The difference is that nobody ever built an inventory of the tenants, and central IT frequently cannot name them, let alone say whether they are configured safely.
Welcome to Episode 435 of the Microsoft Cloud IT Pro Podcast. In this episode, Ben and Scott take a lap around what’s new in Power BI, starting with the two MCP servers now in preview, one local and one remote, that can clean up your data model, write DAX for you, and turn a messy pile of tables into an actual usable semantic model. Ben shares how it helped him tame a 44 table QuickBooks Online mess, and why he had way better luck with it than with Copilot in Power BI.