Webinar Description
Key Takeaways
- Presents Microsoft telemetry data comparing Microsoft Defender with seven Integrated Cloud Email Security (ICES) add-ons
- Covers advanced threat detection for polymorphic AI attacks, prompt injections and business email compromise
- Demonstrates integration with Microsoft Defender and Microsoft Sentinel for SOC workflows
- Addresses security for Microsoft Teams and collaboration tools alongside email protection
- Designed for IT professionals, CISOs and SOC analysts responsible for Microsoft 365 environments
About the Webinar
This live webinar from KnowBe4 examines how native Microsoft Defender email security capabilities compare against enhanced protection using KnowBe4 Defend. The session presents recent Microsoft telemetry data benchmarking Defender against seven ICES solutions, with a technical breakdown of the findings. Attendees will see live demonstrations of KnowBe4 Defend’s integration with Microsoft Defender and Microsoft Sentinel.
Technical Topics and Demonstrations
The webinar covers several technical areas relevant to Microsoft 365 security operations. Presenters will discuss adversarial AI techniques, model diversity in threat detection and protection mechanisms for Microsoft Teams and other collaboration tools. A significant portion focuses on native SOC workflows, showing how threat investigation can be conducted within Microsoft Defender without switching between multiple consoles.
For security teams using Microsoft Sentinel and Defender XDR, the session includes coverage of advanced threat hunting using Kusto Query Language (KQL). This addresses how security analysts can leverage existing Microsoft infrastructure for deeper investigation capabilities.
Threat Landscape Context
The webinar addresses specific threat categories that challenge traditional email security, including polymorphic AI attacks that change their characteristics to evade detection, prompt injection techniques and business email compromise (BEC) schemes. These threats target organisations across email and collaboration platforms, creating gaps that native security tools may not fully address.
Who Should Attend
The webinar is designed for security professionals working in Microsoft 365 environments. This includes CISOs evaluating their email security posture, SOC analysts responsible for threat investigation and response, IT managers overseeing Microsoft 365 deployments and security decision-makers assessing whether native Defender capabilities meet their organisation’s requirements. The technical demonstrations and KQL content will be particularly relevant for hands-on security practitioners.