Hybrid search is usually described as combining keyword search with vector search. Microsoft SQL does that, for sure, but we do quite a bit more right out of the box. SQL dynamically evaluates queries and switches between kNN and ANN vector search based on cost and selectivity. These two types of hybrid search, work together, […]
Reclaiming host pool capacity from disconnected sessions is one of those AVD hygiene tasks that’s easy to configure once by hand in Intune, and easy to forget to replicate consistently across every host pool, tenant, or DTAP environment you manage. If you’re standing up host pools programmatically — or you just want this baked into
How to pull reliable last-logon data for Azure Virtual Desktop users straight from Log Analytics — without hand-rolling REST calls or asking an LLM to stitch your query results back together. Why last logon matters for AVD If you run AVD at any real scale, ‘when did this user last actually log on’ turns out
Getting Last Logon Time for AVD Users: A Cleaner, Scalable Approach Continue Reading
Takeaway: Azure Chaos Studio helps organizations validate application resilience by simulating outages, failovers, network disruptions, and infrastructure failures before they impact production. You don’t know with certainty that your application is resilient until that resilience is tested. Better to learn it isn’t by deliberately breaking it in a test environment and watching how it reacts,
Proving application resilience on Azure with Chaos Studio Continue Reading
In this article AI is driving a fundamental shift in how work gets done and how applications are built. As the 2026 Microsoft Work Trend Index Report highlights, a growing share of workers are moving beyond asking questions to handing off entire tasks and orchestrating multi-agent systems. This shift introduces a new constraint. The challenge
Security operations centers are overwhelmed. Analysts face a relentless queue of alerts, most of which will go unresolved. Research cited by Microsoft estimates that as much as 67% of security incidents go unresolved each year, and the average analyst spends 2.7 hours daily just resolving incidents, at an aggregate cost of $3.3 billion in the
The past three weeks have delivered a concentrated cluster of high-severity threats targeting Microsoft cloud and endpoint infrastructure. From a threat actor abusing a built-in Azure password reset feature to two actively exploited Microsoft Defender zero-days and a new Exchange Server zero-day confirmed by CISA, the attack surface for enterprise environments running Microsoft tooling has
PowerShell is a critical automation and configuration platform across enterprises—and as that automation grows, how you source, validate, and distribute PowerShell packages becomes just as important as the scripts themselves. Modern security guidance increasingly treats package feeds as part of the software supply chain. For PowerShell, that means being deliberate about which repositories you trust,
PowerShell PSResource Roadmap and Best Practices Continue Reading
In this article Threat actors are increasingly abusing HTTP cookies as a control channel for PHP-based webshells on Linux servers. Instead of exposing command execution through URL parameters or request bodies, these webshells rely on threat actor-supplied cookie values to gate execution, pass instructions, and activate malicious functionality. This approach reduces visibility by allowing malicious
High-value assets including domain controllers, web servers, and identity infrastructure are frequent targets in sophisticated attacks. Microsoft Defender applies asset-aware protection using Microsoft Security Exposure Management to detect and block threats against these critical systems. This article explores real-world attack scenarios and defense techniques. As cyberthreats continue to grow in scale, speed, and sophistication, organizations
How Microsoft Defender protects high-value assets in real-world attack scenarios Continue Reading
