Win in the Seams 🧵 Stitching Together Data and Security with Microsoft Fabric, KQL, and Data Logs
📅 Saturday, July 25, 2026
⏰ 9:30 AM – 1:45 PM PT | 12:30 – 4:45 PM ET | 4:30 – 8:45 PM GMT
📺 Free YouTube Livestream with Full Replay
Join us for a free, interactive YouTube livestream exploring one of the most important trends in modern technology, the convergence of data, security, AI, and governance. 🎙️
This event is hosted by the Microsoft Fabric Location Intelligence & Security User Group, one of the only Fabric communities focused at the intersection of geospatial intelligence, security, and connected AI.
The Microsoft Fabric Location Intelligence & Security User Group exists for practitioners who sit at the intersection of geospatial analytics, security, AI, and modern data platforms, and who want to make Microsoft Fabric their home for all four.
Most organizations still separate these disciplines into different teams, different tools, and different conversations.
But attacks, outages, fraud, compliance failures, operational disruptions, and AI failures do not happen in silos.
They happen in the seams.
As Microsoft Fabric evolves into a unified platform for analytics, real-time intelligence, AI, governance, and planning, the professionals who understand how to connect these domains will be the ones creating the most value.
This event brings together data professionals, security leaders, architects, analysts, engineers, and decision makers to explore how KQL, telemetry, identity, governance, and business intelligence are increasingly becoming part of the same conversation.
⚡ TIMELY: Microsoft SC-500, the new Cloud and AI Security Engineer Associate certification, moves into general availability in July 2026, the same month as this event. This is the right moment to understand where cloud and AI security are heading and what that means for your career path.
📍 WHAT MAKES THIS EVENT DIFFERENT
Most Fabric events focus on analytics. Most security events focus on threats. Most AI events focus on models.
This event focuses on the intersections.
Data professionals increasingly need security thinking. Security professionals increasingly need data skills. Both communities are being asked to work with telemetry, identity, AI, governance, and real-time decision-making.
KQL is emerging as one of the shared languages that connects these worlds.
If you want to understand where Microsoft Fabric, security, and AI are heading next, this event is designed for you.
📋 AGENDA
🟣OPENING SESSION Why Intelligence Lives in the Seams
⏰ 9:30 – 10:00 AM PT | 12:30 – 1:00 PM ET | 4:30 – 5:00 PM GMT
Organizations no longer compete on data alone. They compete on how effectively they connect data, security, governance, AI, and business intent.
This opening session explores why modern intelligence platforms are converging around a common foundation, and why the future belongs to professionals who can operate across traditional boundaries.
Topics include:
Why data and security teams are converging in 2026
The rise of real-time intelligence as a shared discipline
AI, governance, and business planning as connected domains
Why organizational context matters as much as technical capability
How Microsoft Fabric is becoming a platform for enterprise intelligence
🟢SESSION 1 - KQL, A Shared Language for Data and Security Professionals
⏰ 10:00 – 10:45 AM PT | 1:00 – 1:45 PM ET | 5:00 – 5:45 PM GMT
KQL is rapidly becoming one of the most valuable skills across Microsoft Fabric, Sentinel, Defender, and Real-Time Intelligence. This session explores why both data and security professionals are adopting KQL and how it enables organizations to move from raw telemetry to actionable insights.
Topics include:
KQL versus SQL, when and why each matters
Eventhouse and Real-Time Intelligence in Microsoft Fabric
Security telemetry and operational analytics using KQL
Common KQL patterns used by both data and security teams
Why KQL is becoming a cross-functional skill in the Microsoft ecosystem
Practical KQL for practitioners coming from a data or security background
🟠SESSION 2 - When People Become the Breach
⏰ 10:45 – 11:30 AM PT | 1:45 – 2:30 PM ET | 5:45 – 6:30 PM GMT
Technology rarely fails first. People do. This session explores insider threats, identity risk, governance failures, and human-centered security challenges through the lens of modern data platforms.
Topics include:
Insider threat trends and detection patterns in 2026
Identity and access management in Microsoft Fabric and Entra ID
Governance and accountability frameworks for data and AI systems
Human behavior as a security risk variable
AI-enabled risk scenarios and behavioral detection
Building resilient organizations through data-aware security practices
🔵SESSION 3 - Telemetry Is the New Business Intelligence
⏰ 11:30 AM – 12:15 PM PT | 2:30 – 3:15 PM ET | 6:30 – 7:15 PM GMT
Every organization is generating an unprecedented volume of signals. The challenge is turning those signals into decisions. This session explores how telemetry, event streams, operational data, and security signals are becoming strategic business assets, and how KQL connects the dots across both data and security workflows.
Topics include:
Operational intelligence from security and business telemetry
Event streams, observability, and Real-Time Intelligence in Microsoft Fabric
Geospatial and location signals as operational intelligence inputs
How KQL queries power both security detection and business analytics
Turning events into decisions before the window closes
Eventhouse as the connective layer between security logs and business data
🟡SESSION 4 - From Intent to Action
⏰ 12:15 – 1:00 PM PT | 3:15 – 4:00 PM ET | 7:15 – 8:00 PM GMT
Organizations are moving beyond reporting toward intelligent systems that understand goals, plans, risks, and business outcomes. This session explores how governance, planning, AI, and connected data are shaping the next generation of enterprise decision-making.
Topics include:
Fabric Planning and enterprise strategy alignment
Business intent and organizational goals as data inputs
Fabric IQ and connected intelligence for decision support
Governance, auditability, and responsible AI in practice
AI agents and the move from prediction to action
What autonomous decision-making requires from your data and security foundation
⚪SESSION 5 - Building the Hybrid Professional, Panel Discussion 🎯
⏰ 1:00 – 1:45 PM PT | 4:00 – 4:45 PM ET | 8:00 – 8:45 PM GMT
The most valuable technology professionals of the next decade will not be defined by a single discipline. They will understand data, security, governance, AI, and business context.
Technology changes quickly, but careers are built through a combination of skills, certifications, community participation, and practical experience. This panel brings together practitioners, leaders, architects, and community members to discuss the skills and experiences shaping the future of the Microsoft ecosystem.
Panel questions include:
How the convergence of data and security is reshaping roles and career paths
Which Fabric, AI, and governance skills are commanding premiums right now
How Real-Time Intelligence changes what both data and security professionals need to know
SC-500 launches this month. What does the new Cloud and AI Security Engineer certification mean for your roadmap
Which certifications matter most for hybrid professionals
DP-600, DP-700, DP-800 as the Fabric data stack
SC-200, SC-300, SC-400, SC-500 as the security spine
SC-100 for architects operating across both domains
How to build influence and visibility across two communities
What you would learn next if you were starting today