https://www.m365.fm/entity/dwell-time/In cybersecurity, dwell time is how long an attacker stays inside an environment before being detected; the episode presents it as a more meaningful SOC metric than MTTR.enhttps://www.m365.fm/community/u/mirko-p/blog/executive-kpis-that-actually-change-behavior-moving-beyond-compliance/https://www.m365.fm/community/u/mirko-p/blog/executive-kpis-that-actually-change-behavior-moving-beyond-compliance/Tue, 11 Aug 2026 16:22:42 -0000articleWelcome back, security leaders and data architects! As a podcaster who spends hours every week talking to CISOs, SOC leads, and enterprise architects, I hear the sa…https://www.m365.fm/show/episodes/defender-xdr-essential-for-hybrid-security/https://www.m365.fm/show/episodes/defender-xdr-essential-for-hybrid-security/Tue, 02 Dec 2025 00:00:00 -0000episodeStop Buying Security Tools: The Shocking ROI of One XDR Timeline Drowning in alerts across M365, endpoints, and cloud apps? This video shows why your hybrid security stack is a Rube Goldberg machine that screams and still misses real attacks. You’ll see the…https://www.m365.fm/show/episodes/conditional-access-vs-identity-who-actually-decides/https://www.m365.fm/show/episodes/conditional-access-vs-identity-who-actually-decides/Tue, 05 Aug 2025 00:00:00 -0000episodeYour best Microsoft 365 security signal isn’t the login—it’s what the identity does next. Wire Conditional Access (the gatekeeper) to listen to Defender for Identity (the watcher), and you’ll auto-raise friction when behavior turns risky—shrinking dwell time…https://www.m365.fm/show/episodes/your-phishing-reports-arent-showing-the-whole-story/https://www.m365.fm/show/episodes/your-phishing-reports-arent-showing-the-whole-story/Tue, 05 Aug 2025 00:00:00 -0000episodeYour phishing dashboard is lying to you. The “all good” charts hide near-miss clicks, silent investigations, and active campaigns threading your inboxes right now. We show how to tap Microsoft Defender’s buried signals and build living Power BI dashboards…