https://www.m365.fm/entity/credential-guard/Credential Guard uses virtualization-based security to isolate secrets such as NTLM hashes and Kerberos tickets from the LSASS process memory.enhttps://www.m365.fm/show/episodes/active-directory-security-drift-explained/https://www.m365.fm/show/episodes/active-directory-security-drift-explained/Sun, 21 Dec 2025 00:00:00 -0000episodeSecurity drift in Active Directory and Azure AD isn’t a single bug — it’s the slow, invisible decay of identity, permissions, and governance posture that happens when environments aren’t routinely managed and remediated. Over time, this drift increases risk…