Episode 416 – Microsoft Sentinel, Security, and Ignite with Henrik Wojcik
Microsoft Cloud IT Pro Podcast
Tiering strategy: 90 days in Log Analytics then Data Lake
Henrik describes their approach: 90 days retained in Log Analytics with older data moved to Data Lake.
Welcome to Episode 416 of the Microsoft Cloud IT Pro Podcast. In this week’s episode, Ben finally has a chance to sit down with Henrik Wojcik. Henrik has been a long-time listener as well as a fellow Microsoft MVP in Security and we finally had the chance to sit down and record an episode together, something we’ve talked about doing for years.
As they sit down and enjoy a sunny afternoon in at Microsoft Ignite in San Francisco they discuss security in the financial sector, EU regulations (N2 and DORA), integrating Data Lake with Sentinel, optimizing log analytics, and the latest on Security Copilot and E5 licensing. They also spend some time chatting about some of their conference highlights, assisting as proctors in the hands-on labs, and the unique experience of Ignite in San Francisco.
Your support makes this show possible! Please consider becoming a premium member for access to live shows and more. Check out our membership options.
Show Notes
- Microsoft Ignite (with sessions on demand)
- Microsoft Ignite Book of News
- Catch up on Microsoft Security sessions and announcements from Ignite 2025
- Microsoft Sentinel benefit for Microsoft 365 E5, A5, F5, and G5 customers
- Learn about Security Copilot inclusion in Microsoft 365 E5 subscription
- Microsoft Sentinel data lake: Unify signals, cut costs, and power agentic AI
- What is Microsoft Sentinel data lake?
- KQL and the Microsoft Sentinel data lake
Henrik F. Wojcik
Henrik has worked in the IT industry since 2003. He’s always had a passion for learning new technologies and expanding his knowledge through various means such as online courses, webinars, and reading up on the latest developments in the industry.
Throughout his career, he’s gained experience in various areas of IT, making him a true jack of all trades. However, his latest interests lie in the security space, modern workplace and management in Azure, with a particular focus on cyber security. He has experience working with products such as Defender for Endpoint, Defender for Identity, Defender for Cloud Apps, Defender for Office 365, Conditional Access, Microsoft Sentinel, and Microsof t Entra ID.
His primary focus is on security on Azure workloads and identity (Entra ID). He prioritizes security awareness and believe that learning never stops, which is why He’s always eager to expand my knowledge and skillset.
In the past, He’s also worked with various tools and technologies such as Cisco, Citrix, Dynamics AX, Exchange, ITIL, Azure, SCCM & SCOM, Scrum & Kanban, VMware, Windows Servers, and Windows Desktops.
About the sponsors
 |
Would you like to become the irreplaceable Microsoft 365 resource for your organization? Let us know! |
The AI-powered Podcast Player
