Microsoft 365 licenses due to come into effect from 1 July 2026, it's time to find and remove unused licenses from inactive user accounts. We discuss two approaches by using the Microsoft 365 Licensing Report or a PowerShell script that assesses inactivity based on sign-in dates and refresh token baselines.

native to Linux, macOS, and WSL. In this blog post, I will show you how they work and if you can use them with PowerShell, too 🙂

as the owner, device model, and other important information.

no separate add-on required.

specifications, reusable building blocks, and how AI can help with code that is already in use. He describes the talk as a discussion for experienced PowerShell users and says he wants to show where AI can be useful, especially as requirements and tools change.

are abandoned after announcement, promotion-focused developers delivering checkbox features and ignoring admin needs. I tried to fix those problems but knew that I would fail, so I also designed PowerShell to route around the damage.

months.

Security Researcher at Microsoft, for a wide-ranging conversation on PowerShell security, cookie-based attacks, and the evolving threat landscape. Miriam walks through her two conference talks - one on Microsoft Teams session cookie hijacking (a follow-up to her 2025 Entra ID cookie talk, complete with Cookie Monster branding and actual handcuffs), and a joint session with Stéphane van Gulick on using Microsoft Defender's Live Response feature for incident investigation. The conversation also covers the current state of PowerShell security, why sophisticated attackers are moving away from PowerShell, and why defenders who haven't enabled script block logging and AMSI are leaving easy wins on the table. On top of the technical deep dive, Miriam and Andrew get into the human side of the conference community - nerves before presenting, imposter syndrome, and why showing up is already half the battle.