[{"data":1,"prerenderedAt":1884},["ShallowReactive",2],{"sc:header-data-de":3,"sc:footer-data-de":492,"post-de--posts-2026-10-20-who-built-these-agents-9150b1838eacf":512,"authors_data":1239,"content-de-list-7b291c2dd91a4":1598,"authors_data:Andreas Hötzinger":1881},{"lang":4,"home":5,"navigation":17,"meta":482,"contact":488},"de",{"name":6,"folderSwitch":7,"imgLight":10,"img":11,"languages":12},"home",[8,9],"authors","blog","/logos/gk-Logo-sw.svg","/logos/gk-Logo-rgb.svg",{"de":13},{"title":14,"url":15,"alt":16,"alias":15},"Home","/de","glueckkanja Logo",[18,124,228,313,392,399],{"name":19,"languages":20,"children":24},"workplace",{"de":21},{"title":22,"description":23},"Workplace","Microsoft 365-Power für smarte, sichere und flexible Arbeitswelten, die modernste Technologien und Identity Lösungen verbinden.",[25,55,88],{"name":26,"languages":27,"children":30},"portfolio",{"de":28},{"title":29},"Portfolio",[31,37,43,49],{"name":32,"languages":33},"managed-intune",{"de":34},{"title":35,"url":36},"Managed Intune","/de/entra-intune/managed-intune",{"name":38,"languages":39},"managed-entra",{"de":40},{"title":41,"url":42},"Managed Entra","/de/entra-intune/managed-entra",{"name":44,"languages":45},"managed-workplace",{"de":46},{"title":47,"url":48},"Managed Workplace","/de/workplace/managed-workplace",{"name":50,"languages":51},"consulting-services",{"de":52},{"title":53,"url":54},"Consulting Services","/de/workplace/consulting-services",{"name":56,"languages":57,"children":60},"microsoft-365-endpoint",{"de":58},{"title":59},"Microsoft 365 Endpoint",[61,67,73,79,82],{"name":62,"languages":63},"microsoft-entra-suite",{"de":64},{"title":65,"url":66},"Microsoft Entra Suite","/de/workplace/microsoft-entra-suite",{"name":68,"languages":69},"microsoft-intune",{"de":70},{"title":71,"url":72},"Microsoft Intune","/de/workplace/microsoft-intune",{"name":74,"languages":75},"microsoft-windows",{"de":76},{"title":77,"url":78},"Microsoft Windows","/de/workplace/microsoft-windows",{"name":80,"languages":81},"windows-365-cloud-pc",{},{"name":83,"languages":84},"cloud-workplace-foundation",{"de":85},{"title":86,"url":87},"Cloud Workplace Foundation","/de/workplace/cloud-workplace-foundation",{"name":89,"languages":90,"children":93},"microsoft-365-collaboration",{"de":91},{"title":92},"Microsoft 365 Collaboration",[94,100,106,112,118],{"name":95,"languages":96},"microsoft-copilot",{"de":97},{"title":98,"url":99},"Microsoft 365 Copilot","/de/workplace/microsoft-365-copilot",{"name":101,"languages":102},"microsoft-teams",{"de":103},{"title":104,"url":105},"Teams","/de/workplace/microsoft-teams",{"name":107,"languages":108},"sharepoint-powerplatform",{"de":109},{"title":110,"url":111},"SharePoint & Power Platform","/de/workplace/sharepoint-power-platform",{"name":113,"languages":114},"exchange-online",{"de":115},{"title":116,"url":117},"Exchange Online","/de/workplace/exchange-online",{"name":119,"languages":120},"information-protection-compliance",{"de":121},{"title":122,"url":123},"Information Protection & Compliance","/de/workplace/information-protection-compliance",{"name":125,"languages":126,"children":130},"azure",{"de":127},{"title":128,"description":129},"Azure","Mit Azure Wachstum beflügeln: Cloud-Kosten senken, Effizienz steigern und Innovationen durch IaaS und PaaS vorantreiben.",[131,148,178],{"name":132,"languages":133,"children":135},"azure-portfolio",{"de":134},{"title":29},[136,142],{"name":137,"languages":138},"azure-managed-services",{"de":139},{"title":140,"url":141},"Azure Managed Services","/de/azure/azure-managed-services",{"name":143,"languages":144},"azure-consulting",{"de":145},{"title":146,"url":147},"Azure Consulting","/de/azure/azure-consulting",{"name":149,"languages":150,"children":153},"azure-scenarios",{"de":151},{"title":152},"Szenarios",[154,160,166,172],{"name":155,"languages":156},"plan-your-cloud",{"de":157},{"title":158,"url":159},"Planen Sie Ihre Cloud","/de/azure/plan-your-cloud",{"name":161,"languages":162},"migrate-to-the-cloud",{"de":163},{"title":164,"url":165},"Migriere deine Cloud","/de/azure/migrate-to-the-cloud",{"name":167,"languages":168},"innovate-your-business",{"de":169},{"title":170,"url":171},"Erneuere dein Business","/de/azure/innovate-your-business",{"name":173,"languages":174},"vmware-exit",{"de":175},{"title":176,"url":177},"Überdenke deine VMware-Strategie","/de/azure/vmware-exit",{"name":179,"languages":180,"children":183},"azure-practices",{"de":181},{"title":182},"Practices",[184,190,196,199,205,210,216,222],{"name":185,"languages":186},"azure-foundation",{"de":187},{"title":188,"url":189},"Azure Foundation","/de/azure/azure-foundation",{"name":191,"languages":192},"azure-ai-foundation",{"de":193},{"title":194,"url":195},"Azure AI Foundation","/de/azure/azure-ai-foundation",{"name":83,"languages":197},{"de":198},{"title":86,"url":87},{"name":200,"languages":201},"azure-data-foundation",{"de":202},{"title":203,"url":204},"Azure Data Foundation","/de/azure/azure-data-foundation",{"name":185,"languages":206},{"de":207},{"title":208,"url":209},"Azure Container Foundation","/de/azure/azure-container-foundation",{"name":211,"languages":212},"dark-tenant",{"de":213},{"title":214,"url":215},"Managed Dark Tenant","/de/azure/managed-dark-tenant",{"name":217,"languages":218},"azure-cloud-adoption-framework",{"de":219},{"title":220,"url":221},"Cloud Adoption Framework","/de/azure/cloud-adoption-framework",{"name":223,"languages":224},"azure-cloud-competence-center",{"de":225},{"title":226,"url":227},"Cloud Competence Center","/de/azure/cloud-competence-center",{"name":229,"languages":230,"children":239},"security",{"de":231},{"title":232,"description":233,"emergency":234},"Security","Wachsamkeit in der Cloud mit einem preisgekrönten 24/7 Managed Service, Incident Response und modernstem Schutz für Ihre Infrastruktur.",{"text":235,"href":236,"skin":237,"icon":238},"Under Attack?","/de/security/are-you-under-attack","primary","emergency",[240,265,286],{"name":241,"children":242},"security-security-consulting",[243,249,253,259],{"name":244,"languages":245},"managed-red-tenant",{"de":246},{"title":247,"url":248},"Managed Red Tenant","/de/security/managed-red-tenant",{"name":211,"languages":250},{"de":251},{"title":252,"url":215},"Dark Tenant",{"name":254,"languages":255},"sentinel-data-lake",{"de":256},{"title":257,"url":258},"Sentinel Data Lake","/de/security/sentinel-data-lake",{"name":260,"languages":261},"security-consulting",{"de":262},{"title":263,"url":264},"Security Consulting","/de/security/security-consulting",{"name":266,"children":267},"security-cloud-security-operations-center",[268,274,280],{"name":269,"languages":270},"cloud-security-operations-center",{"de":271},{"title":272,"url":273},"Cloud Security Operations Center","/de/security/cloud-security-operations-center",{"name":275,"languages":276},"global-secure-access",{"de":277},{"title":278,"url":279},"Global Secure Access","/de/security/global-secure-access",{"name":281,"languages":282},"my-work-id",{"de":283},{"title":284,"url":285},"MyWorkID","/de/security/my-work-id",{"name":287,"children":288},"security-preventive-services",[289,295,301,307],{"name":290,"languages":291},"preventive-services",{"de":292},{"title":293,"url":294},"Preventive Services","/de/security/preventive-services",{"name":296,"languages":297},"data-security-services",{"de":298},{"title":299,"url":300},"Data Security Service","/de/security/data-security-service",{"name":302,"languages":303},"security-copilot-agents",{"de":304},{"title":305,"url":306},"Security Copilot Agents","/de/security/security-copilot-agents",{"name":308,"languages":309},"nis2",{"de":310},{"title":311,"url":312},"NIS2 technisch umsetzen","/de/security/red-dark-tenant-nis2",{"name":314,"languages":315,"children":319},"products",{"de":316},{"title":317,"description":318},"Produkte","Innovative Companion-Produkte für eine vollständig sichere, 100% cloud-native Microsoft-Umgebung, die Zusammenarbeit, Netzwerkauthentifizierung und Softwareverwaltung verbessern.",[320,357],{"name":321,"products":322,"children":323},"lorem ipsum 1",true,[324,333,341,349],{"name":325,"img":326,"target":327,"languages":328},"realmjoin","products/realmjoin/realmjoin-nav-logo.svg","_blank",{"de":329},{"title":330,"url":331,"subtitle":332},"RealmJoin","https://www.realmjoin.com","Cloudbasierte Softwareverteilung",{"name":334,"img":335,"target":327,"languages":336},"scepman","products/scepman/scepman-nav-logo.svg",{"de":337},{"title":338,"url":339,"subtitle":340},"SCEPman","https://www.scepman.com","Zertifikatsverteilung aus der Cloud",{"name":342,"img":343,"target":327,"languages":344},"konnekt","products/konnekt/konnekt-nav-logo.svg",{"de":345},{"title":346,"url":347,"subtitle":348},"KONNEKT","https://www.konnekt.io","Arbeiten Sie lokal mit Ihren Office 365-Daten",{"name":350,"img":351,"target":327,"languages":352},"realmigrator","products/realmigrator/realmigrator-nav-logo.svg",{"de":353},{"title":354,"url":355,"subtitle":356},"RealMigrator","https://www.realmigrator.com","Migrieren Sie alle Ihre Datenressourcen",{"name":358,"products":322,"children":359},"lorem ipsum 2",[360,368,376,384],{"name":361,"img":362,"target":327,"languages":363},"terraprovider","products/terraprovider/terraprovider-nav-logo.svg",{"de":364},{"title":365,"url":366,"subtitle":367},"TerraProvider","https://www.terraprovider.com","Terraform Provider für Microsoft 365",{"name":369,"img":370,"target":327,"languages":371},"radiusaas","products/radius/radius-nav-logo.svg",{"de":372},{"title":373,"url":374,"subtitle":375},"RADIUSaaS","https://www.radius-as-a-service.com","Authentifizierung für Ihr Netzwerk",{"name":377,"img":378,"target":327,"languages":379},"autopilotmonitor","products/autopilot-monitor/AutopilotMonitor-nav-logo.svg",{"de":380},{"title":381,"url":382,"subtitle":383},"Autopilot Monitor","https://www.autopilotmonitor.com","Windows Autopilot Monitoring in Echtzeit",{"name":385,"img":386,"target":327,"languages":387},"sendman","products/sendman/Sendman-nav-logo.svg",{"de":388},{"title":389,"url":390,"subtitle":391},"Sendman","https://www.sendman.com","Das SMTP-Relay für Microsoft 365",{"name":393,"languages":394},"casestudies",{"de":395},{"title":396,"url":397,"description":398},"Case Studies","/de/casestudies","Pionier in der Cloud: Ihr Top-Microsoft-Partner für umfassende Cloud-Lösungen mit einem Blueprint-basierten Ansatz und Infrastructure-as-Code-Expertise.",{"name":400,"languages":401,"children":404},"company",{"de":402},{"title":403,"description":398},"Unternehmen",[405,441,465],{"name":406,"languages":407,"children":410},"company-about-us",{"de":408},{"title":409},"Über Uns",[411,417,423,429,435],{"name":412,"languages":413},"company-facts-figures",{"de":414},{"title":415,"url":416},"Facts & Figures","/de/company/facts-and-figures",{"name":418,"languages":419},"company-contact",{"de":420},{"title":421,"url":422},"Kontakt & Standorte","/de/company/contact-and-locations",{"name":424,"languages":425},"switzerland",{"de":426},{"title":427,"url":428},"glueckkanja Schweiz","/de/company/switzerland",{"name":430,"languages":431},"austria",{"de":432},{"title":433,"url":434},"glueckkanja Österreich","/de/company/austria",{"name":436,"languages":437},"spain",{"de":438},{"title":439,"url":440},"glueckkanja Spanien","/de/company/spain",{"name":442,"languages":443,"children":446},"company-career",{"de":444},{"title":445},"Karriere",[447,453,459],{"name":448,"languages":449},"company-career-overview",{"de":450},{"title":451,"url":452},"Karriere Übersicht","/de/career",{"name":454,"languages":455},"company-young-professionals",{"de":456},{"title":457,"url":458},"Young Professionals","/de/young-professionals",{"name":460,"languages":461},"company-jobs",{"de":462},{"title":463,"url":464},"Stellenanzeigen","/de/job-offers",{"name":466,"languages":467,"children":470},"company-latest",{"de":468},{"title":469},"Aktuelles",[471,477],{"name":472,"languages":473},"company-blog",{"de":474},{"title":475,"url":476},"Blog","/de/blog",{"name":472,"languages":478},{"de":479},{"title":480,"url":481},"Events","/de/events",[483],{"name":484,"languages":485},"career-meta",{"de":486},{"title":445,"url":452,"active":487},false,{"languages":489},{"de":490},{"title":491,"url":422,"active":487},"Kontakt",{"data":493},{"bgColor":494,"number":495,"mail":496,"brandLogos":497,"logos":498,"links":502},"var(--color-gk-mid-blue)","+49 69 4005520","info@glueckkanja.com",null,[499],{"img":10,"alt":16,"url":500,"class":501},"index.html","max-w-19rem",[503,506,509],{"title":504,"url":505},"Datenschutz","/de/privacy",{"title":507,"url":508},"Impressum","/de/imprint",{"title":510,"url":511},"No Cookies","/de/cookies",{"id":513,"title":514,"author":515,"body":517,"cta":497,"description":582,"eventid":497,"extension":1137,"hideInRecent":487,"layout":1138,"meta":1139,"moment":1142,"navigation":322,"path":1230,"seo":1231,"stem":1232,"tags":1233,"webcast":487,"__hash__":1238},"content_de/posts/2026-10-20-who-built-these-agents.md","Wer hat diese Agents gebaut?",[516],"Andreas Hötzinger",{"type":518,"value":519,"toc":1127},"minimal",[520,524,541,546,549,557,560,564,566,569,572,844,847,850,984,987,990,993,997,999,1002,1005,1008,1011,1015,1017,1020,1026,1029,1032,1035,1038,1041,1052,1056,1058,1070,1073,1077,1079,1082,1097,1100,1104,1106,1109,1113,1115,1118,1121,1124],[521,522,523],"style",{},"\n/* Die Kusto-Grammatik markiert parse_json als veraltet (rot, kursiv). Die Funktion ist aktuell, also neutral darstellen. */\nhtml .richtext pre.shiki code .s7hpK{--shiki-default:#24292e;--shiki-default-font-style:normal;--shiki-dark:#e1e4e8;--shiki-dark-font-style:normal}\n",[525,526,527,528,532,533,536,537,540],"p",{},"In einem Kundentenant mit ",[529,530,531],"span",{},"3.000"," Usern haben wir im ersten Inventar ",[529,534,535],{},"280"," Agents gefunden. ",[529,538,539],{},"170"," davon hatten keinen Verantwortlichen mehr, der noch im Unternehmen war. Gebaut hat sie niemand Böses, sondern Fachabteilungen, die schnell etwas lösen wollten. Genau so sind vor zehn Jahren die Service Principals entstanden, die heute noch keiner aufgeräumt hat. Agents wiederholen dieses Muster, nur schneller und in größerer Zahl.",[542,543,545],"h2",{"id":544},"was-eine-lizenz-nicht-kann","Was eine Lizenz nicht kann",[525,547,548],{},"{: .h3-font-size}",[525,550,551,552,556],{},"E7 bündelt E5, Copilot, die ",[553,554,555],"a",{"href":66},"Entra Suite"," und Agent 365. Was im Paket steckt, ist inzwischen hinreichend beschrieben. Eine Lizenz räumt aber keinen Tenant auf. Sie gibt uns Werkzeuge, um Agents zu sehen, zu identifizieren und zu kontrollieren. Ob ein Agent da sein sollte, wer für ihn geradesteht und worauf er zugreifen darf, entscheidet sie nicht.",[525,558,559],{},"Dazu kommt das Tempo. Agents entstehen heute dort, wo früher Excel-Makros entstanden sind: in den Fachbereichen, schnell und ohne Ticket. Das ist gewollt, und wir finden das auch gut so. Es heißt aber, dass die Zahl der nicht-menschlichen Konten im Verzeichnis schneller wächst als jede andere Gruppe.",[542,561,563],{"id":562},"was-die-registry-zeigt-und-was-nicht","Was die Registry zeigt und was nicht",[525,565,548],{},[525,567,568],{},"Agent 365 sammelt Agents aus Microsoft 365, Copilot Studio, Power Platform und Foundry an einer Stelle. Defender for Endpoint findet zusätzlich lokal installierte KI-Agents auf den Clients, inklusive der konfigurierten MCP-Server. Beides landet im Advanced Hunting und lässt sich per KQL zusammen auswerten. Shadow AI im wörtlichen Sinn.",[525,570,571],{},"Mit dieser Abfrage schauen wir uns an, welche Agents tatsächlich aufgerufen werden und welche Werkzeuge sie dabei nutzen:",[573,574,576],"div",{"style":575},"background: var(--color-bg-grey); border-radius: 6px; padding: 1rem; margin: 0.25rem 0",[577,578,583],"pre",{"className":579,"code":580,"language":581,"meta":582,"style":582},"language-kusto shiki shiki-themes github-light github-dark","CloudAppEvents\n| where ActionType in (\"InvokeAgent\", \"InferenceCall\", \"ExecuteToolBySDK\", \"ExecuteToolByGateway\")\n| extend RawEventData_parsed = parse_json(RawEventData)\n| extend\n    Workload          = coalesce(tostring(RawEventData_parsed[\"Workload\"]), \"Unknown\"),\n    TargetAgentName   = coalesce(tostring(RawEventData_parsed[\"TargetAgentName\"]), \"Unknown\"),\n    AgentName         = coalesce(tostring(RawEventData_parsed[\"AgentName\"]), \"Unknown\"),\n    AgentBlueprintId  = coalesce(tostring(RawEventData_parsed[\"AgentBlueprintId\"]), \"Unknown\"),\n    PlatformAgentType = coalesce(\n        tostring(RawEventData_parsed[\"PlatformAgentType\"]),\n        tostring(RawEventData_parsed[\"CopilotEventData\"][\"PlatformAgentType\"]),\n        \"Unknown\"\n    )\n| project-away RawEventData_parsed\n| summarize count() by ActionType, Workload, TargetAgentName, PlatformAgentType, AgentName, AgentBlueprintId\n","kusto","",[584,585,586,594,636,654,662,693,716,739,762,773,787,804,810,816,827],"code",{"__ignoreMap":582},[529,587,590],{"class":588,"line":589},"line",1,[529,591,593],{"class":592},"sVt8B","CloudAppEvents\n",[529,595,597,600,604,607,610,613,617,620,623,625,628,630,633],{"class":588,"line":596},2,[529,598,599],{"class":592},"| ",[529,601,603],{"class":602},"szBVR","where",[529,605,606],{"class":592}," ActionType ",[529,608,609],{"class":602},"in",[529,611,612],{"class":592}," (",[529,614,616],{"class":615},"sZZnC","\"InvokeAgent\"",[529,618,619],{"class":592},", ",[529,621,622],{"class":615},"\"InferenceCall\"",[529,624,619],{"class":592},[529,626,627],{"class":615},"\"ExecuteToolBySDK\"",[529,629,619],{"class":592},[529,631,632],{"class":615},"\"ExecuteToolByGateway\"",[529,634,635],{"class":592},")\n",[529,637,639,641,644,647,651],{"class":588,"line":638},3,[529,640,599],{"class":592},[529,642,643],{"class":602},"extend",[529,645,646],{"class":592}," RawEventData_parsed = ",[529,648,650],{"class":649},"s7hpK","parse_json",[529,652,653],{"class":592},"(RawEventData)\n",[529,655,657,659],{"class":588,"line":656},4,[529,658,599],{"class":592},[529,660,661],{"class":602},"extend\n",[529,663,665,668,672,675,678,681,684,687,690],{"class":588,"line":664},5,[529,666,667],{"class":592},"    Workload          = ",[529,669,671],{"class":670},"sj4cs","coalesce",[529,673,674],{"class":592},"(",[529,676,677],{"class":670},"tostring",[529,679,680],{"class":592},"(RawEventData_parsed[",[529,682,683],{"class":615},"\"Workload\"",[529,685,686],{"class":592},"]), ",[529,688,689],{"class":615},"\"Unknown\"",[529,691,692],{"class":592},"),\n",[529,694,696,699,701,703,705,707,710,712,714],{"class":588,"line":695},6,[529,697,698],{"class":592},"    TargetAgentName   = ",[529,700,671],{"class":670},[529,702,674],{"class":592},[529,704,677],{"class":670},[529,706,680],{"class":592},[529,708,709],{"class":615},"\"TargetAgentName\"",[529,711,686],{"class":592},[529,713,689],{"class":615},[529,715,692],{"class":592},[529,717,719,722,724,726,728,730,733,735,737],{"class":588,"line":718},7,[529,720,721],{"class":592},"    AgentName         = ",[529,723,671],{"class":670},[529,725,674],{"class":592},[529,727,677],{"class":670},[529,729,680],{"class":592},[529,731,732],{"class":615},"\"AgentName\"",[529,734,686],{"class":592},[529,736,689],{"class":615},[529,738,692],{"class":592},[529,740,742,745,747,749,751,753,756,758,760],{"class":588,"line":741},8,[529,743,744],{"class":592},"    AgentBlueprintId  = ",[529,746,671],{"class":670},[529,748,674],{"class":592},[529,750,677],{"class":670},[529,752,680],{"class":592},[529,754,755],{"class":615},"\"AgentBlueprintId\"",[529,757,686],{"class":592},[529,759,689],{"class":615},[529,761,692],{"class":592},[529,763,765,768,770],{"class":588,"line":764},9,[529,766,767],{"class":592},"    PlatformAgentType = ",[529,769,671],{"class":670},[529,771,772],{"class":592},"(\n",[529,774,776,779,781,784],{"class":588,"line":775},10,[529,777,778],{"class":670},"        tostring",[529,780,680],{"class":592},[529,782,783],{"class":615},"\"PlatformAgentType\"",[529,785,786],{"class":592},"]),\n",[529,788,790,792,794,797,800,802],{"class":588,"line":789},11,[529,791,778],{"class":670},[529,793,680],{"class":592},[529,795,796],{"class":615},"\"CopilotEventData\"",[529,798,799],{"class":592},"][",[529,801,783],{"class":615},[529,803,786],{"class":592},[529,805,807],{"class":588,"line":806},12,[529,808,809],{"class":615},"        \"Unknown\"\n",[529,811,813],{"class":588,"line":812},13,[529,814,815],{"class":592},"    )\n",[529,817,819,821,824],{"class":588,"line":818},14,[529,820,599],{"class":592},[529,822,823],{"class":602},"project-away",[529,825,826],{"class":592}," RawEventData_parsed\n",[529,828,830,832,835,838,841],{"class":588,"line":829},15,[529,831,599],{"class":592},[529,833,834],{"class":602},"summarize",[529,836,837],{"class":670}," count()",[529,839,840],{"class":602}," by",[529,842,843],{"class":592}," ActionType, Workload, TargetAgentName, PlatformAgentType, AgentName, AgentBlueprintId\n",[525,845,846],{},"Dazu gehört eine Einschränkung: Die Abfrage zeigt nur einen Teil des Bilds, nämlich vor allem Microsoft-eigene Agents und solche, die auf Microsoft-Plattformen gebaut wurden. Was daneben läuft, sieht man hier nicht.",[525,848,849],{},"Für die lokalen Agents auf den Clients reicht Defender for Endpoint Plan 2:",[573,851,852],{"style":575},[577,853,855],{"className":579,"code":854,"language":581,"meta":582,"style":582},"AgentsInfo\n| where Platform == \"LocalAgents\"\n| summarize arg_max(Timestamp, Name, Version, LifecycleStatus, RawAgentInfo) by AgentId\n| where LifecycleStatus !in~ (\"Deleted\", \"Uninstalled\")\n| extend AgentMetadata = RawAgentInfo.localAgentMetadata\n| extend Vendor = tostring(AgentMetadata.vendor),\n         Device = tostring(AgentMetadata.deviceName)\n| summarize DeviceCount = dcount(Device) by Agent = Name, Vendor\n| sort by DeviceCount desc\n",[584,856,857,862,874,892,916,925,939,949,969],{"__ignoreMap":582},[529,858,859],{"class":588,"line":589},[529,860,861],{"class":592},"AgentsInfo\n",[529,863,864,866,868,871],{"class":588,"line":596},[529,865,599],{"class":592},[529,867,603],{"class":602},[529,869,870],{"class":592}," Platform == ",[529,872,873],{"class":615},"\"LocalAgents\"\n",[529,875,876,878,880,883,886,889],{"class":588,"line":638},[529,877,599],{"class":592},[529,879,834],{"class":602},[529,881,882],{"class":670}," arg_max",[529,884,885],{"class":592},"(Timestamp, Name, Version, LifecycleStatus, RawAgentInfo) ",[529,887,888],{"class":602},"by",[529,890,891],{"class":592}," AgentId\n",[529,893,894,896,898,901,904,906,909,911,914],{"class":588,"line":656},[529,895,599],{"class":592},[529,897,603],{"class":602},[529,899,900],{"class":592}," LifecycleStatus ",[529,902,903],{"class":602},"!in~",[529,905,612],{"class":592},[529,907,908],{"class":615},"\"Deleted\"",[529,910,619],{"class":592},[529,912,913],{"class":615},"\"Uninstalled\"",[529,915,635],{"class":592},[529,917,918,920,922],{"class":588,"line":664},[529,919,599],{"class":592},[529,921,643],{"class":602},[529,923,924],{"class":592}," AgentMetadata = RawAgentInfo.localAgentMetadata\n",[529,926,927,929,931,934,936],{"class":588,"line":695},[529,928,599],{"class":592},[529,930,643],{"class":602},[529,932,933],{"class":592}," Vendor = ",[529,935,677],{"class":670},[529,937,938],{"class":592},"(AgentMetadata.vendor),\n",[529,940,941,944,946],{"class":588,"line":718},[529,942,943],{"class":592},"         Device = ",[529,945,677],{"class":670},[529,947,948],{"class":592},"(AgentMetadata.deviceName)\n",[529,950,951,953,955,958,961,964,966],{"class":588,"line":741},[529,952,599],{"class":592},[529,954,834],{"class":602},[529,956,957],{"class":592}," DeviceCount = ",[529,959,960],{"class":670},"dcount",[529,962,963],{"class":592},"(Device) ",[529,965,888],{"class":602},[529,967,968],{"class":592}," Agent = Name, Vendor\n",[529,970,971,973,976,978,981],{"class":588,"line":764},[529,972,599],{"class":592},[529,974,975],{"class":602},"sort",[529,977,840],{"class":602},[529,979,980],{"class":592}," DeviceCount ",[529,982,983],{"class":602},"desc\n",[525,985,986],{},"Ein Agent, der im Auftrag eines Users handelt, erbt dessen Rechte. Hat dieser User Zugriff auf eine viel zu weit freigegebene SharePoint-Bibliothek, hat der Agent das auch. Er ist dabei nur schneller und gründlicher als jeder Mensch.",[525,988,989],{},"Ein autonomer Agent mit eigener Identität arbeitet mit eigenen Berechtigungen. Der braucht jemanden, der verantwortlich ist, ein sauberes Berechtigungsprofil und ein Ablaufdatum, wie jedes andere Konto, das an Unternehmensdaten kommt.",[525,991,992],{},"Die Registry zeigt, was da ist. Ob es da sein sollte, muss jemand bewerten, und diese Bewertung wird nie fertig.",[542,994,996],{"id":995},"agents-brauchen-identitäten-keine-ausnahmen","Agents brauchen Identitäten, keine Ausnahmen",[525,998,548],{},[525,1000,1001],{},"Agents, die mit Entra Agent ID gebaut werden, bekommen eine eigene, verwaltete Identität. Über Agent Blueprints lässt sich festlegen, wie ein Agent gebaut ist und welche Rechte er bekommt, bevor es ihn überhaupt gibt. Und mit Entra ID Governance laufen Zugriffsprüfungen und Lebenszyklus auch für Agents: anlegen, freigeben, Verantwortliche zuweisen, regelmäßig prüfen, ablaufen lassen.",[525,1003,1004],{},"Conditional Access lässt sich auf Agent-Identitäten und Blueprints anwenden, aber nicht eins zu eins wie bei Menschen. Policies für „alle Benutzer“ erfassen Agent-Konten nicht, und wer per API-Key zugreift, läuft an Entra komplett vorbei. Diese Lücken muss man kennen, bevor man sich auf die Policy verlässt.",[525,1006,1007],{},"Klingt selbstverständlich. Ist es in der Praxis leider nicht. Wir sehen in vielen Tenants schon heute, wie schwer das bei klassischen App-Registrierungen und Service Principals fällt. Verwaiste Secrets, Berechtigungen aus irgendeiner Testphase, Verantwortliche, die längst woanders arbeiten. Agents machen das nicht besser, weil sie in größerer Zahl und von viel mehr Leuten gebaut werden.",[525,1009,1010],{},"Wer seine Service Principals heute nicht im Griff hat, wird seine Agents morgen auch nicht im Griff haben.",[542,1012,1014],{"id":1013},"governance-ist-eine-daueraufgabe","Governance ist eine Daueraufgabe",[525,1016,548],{},[525,1018,1019],{},"Jede Woche kommen neue Agents dazu. Verantwortliche wechseln die Rolle oder das Unternehmen. Berechtigungen wachsen, Conditional-Access-Regeln bekommen Ausnahmen, Sensitivity Labels pflegt keiner. Nichts davon ist ein Projekt mit Go-live, es ist Betrieb.",[525,1021,1022,1023,1025],{},"Und genau so gehen wir es an. Mit ",[553,1024,41],{"href":42}," betreiben wir Entra ID für unsere Kunden komplett als Code. Das klingt nach Technikdetail, ist aber der eigentliche Grund, warum der Betrieb verlässlich läuft.",[525,1027,1028],{},"Viele Unternehmen haben einen sauberen Change-Prozess nach ITIL. Im Ticket steht, was geändert werden soll, dann wird im Portal geklickt. Aber wer prüft, ob genau das angepasst wurde und nichts anderes?",[525,1030,1031],{},"Bei uns wird nicht die Beschreibung geprüft, sondern die Änderung selbst. Die Regeln liegen als Code vor. Vorher steht schwarz auf weiß fest, was sich ändert. Eine zweite Person gibt genau das frei, und nur das wird ausgerollt, mit Name und Datum. Geht trotzdem etwas schief, ist der letzte funktionierende Stand in Minuten wiederhergestellt und nicht in einer Nachtschicht.",[525,1033,1034],{},"Auch Ausnahmen laufen über diesen Weg. Braucht ein Kunde eine Abweichung vom Standard, steht sie im Repository und nicht in einer Excel-Liste oder im Kopf eines Admins. Sie ist sichtbar, versioniert und wird geprüft wie jede andere Änderung. Damit verwässert die Baseline nicht schleichend über die Monate, und beim nächsten Audit liegt der Nachweis, wie der Tenant konfiguriert ist und wer wann was geändert hat, schon fertig vor.",[525,1036,1037],{},"Und wir halten uns selbst an das, was wir für Agents fordern. Unsere eigene Automatisierung ist ja auch eine nicht-menschliche Identität. Sie meldet sich über föderierte Identitäten am Kundentenant an, ganz ohne gespeichertes Secret. Die Rechte sind getrennt: Eine Identität darf nur lesen und planen, eine andere darf schreiben. Kein Passwort, das abfließen kann, kein Zertifikat, das irgendwann still abläuft.",[525,1039,1040],{},"Bei den Agents selbst sind wir mittendrin. Conditional Access, Access Reviews und Entitlement Management laufen bei uns heute schon als Code. Woran wir gerade bauen, sind Agent-Vorlagen im Repository, mit Identität, Berechtigungen, Conditional Access, Verantwortlichen und Ablaufdatum, sowie automatische Prüfungen auf verwaiste Agent-Identitäten, etwa mit Maester-Checks aus der Community. Bei hunderten Agents ist das der Unterschied zwischen Überblick und Hoffnung.",[525,1042,1043,1044,1047,1048,1051],{},"Wie ",[553,1045,1046],{"href":300},"Purview"," die Daten schützt, die Agents lesen und weitergeben, und wie unser ",[553,1049,1050],{"href":273},"CSOC"," ihre Aktivität überwacht, beschreiben wir in einem eigenen Artikel zur KI-Governance.",[542,1053,1055],{"id":1054},"und-die-agents-in-azure","Und die Agents in Azure?",[525,1057,548],{},[525,1059,1060,1061,1064,1065,1069],{},"Agent 365 sieht auch Agents, die in Microsoft Foundry laufen. Aber jemand muss die Plattform darunter bauen und betreiben: Modelle, Netzwerk, Datenanbindung, Evaluierung. Dafür haben wir die ",[553,1062,1063],{"href":195},"AI Foundation"," gebaut, komplett als Code, sodass jedes neue KI-Projekt mit denselben Leitplanken startet wie das letzte. Mehr dazu steht in unserem Artikel über die drei Foundations: ",[553,1066,1068],{"href":1067},"/de/posts/2026-07-06-the-holy-trinity","The Holy Trinity",".",[525,1071,1072],{},"Der wichtigste Punkt ist die Verbindung nach unten. Jeder Agent aus der AI Foundation bekommt eine eigene Identität im selben Entra wie der Rest der Landschaft, mit genau den Rechten, die er braucht. Handelt er im Auftrag eines Users, sieht er nur, was dieser User sehen darf. Und er hinterlässt eine Spur, die sich prüfen lässt. Kein Sonderweg mit eigenen Konten und eigenen Ausnahmen, nur weil der Agent in Azure läuft statt in Microsoft 365.",[542,1074,1076],{"id":1075},"drei-fragen-für-morgen-früh","Drei Fragen für morgen früh",[525,1078,548],{},[525,1080,1081],{},"Wer wissen will, wo er steht, kann mit drei Fragen anfangen:",[1083,1084,1086,1087,1086,1091,1086,1094],"ol",{"style":1085},"margin: 0.25rem 0","\n  ",[1088,1089,1090],"li",{},"Welche Agents haben keinen aktiven Owner oder Sponsor mehr?",[1088,1092,1093],{},"Welche Service Principals haben Secrets, die älter als zwölf Monate sind?",[1088,1095,1096],{},"Welche Agents greifen per API-Key statt über Entra zu?",[525,1098,1099],{},"Wer auf alle drei schnell eine Antwort hat, ist weiter als die meisten.",[542,1101,1103],{"id":1102},"wo-wir-anfangen","Wo wir anfangen",[525,1105,548],{},[525,1107,1108],{},"Beim Ist-Zustand, denn die Agents sind ohnehin schon da. In unserem zweitägigen Agent 365 Workshop machen wir sichtbar, welche Agents in eurem Tenant laufen und woher sie kommen. Danach habt ihr ein Inventar, ein Risikobild und einen Governance-Plan mit klaren Verantwortlichkeiten.",[542,1110,1112],{"id":1111},"fazit","Fazit",[525,1114,548],{},[525,1116,1117],{},"E7 packt ein echtes Problem an. Zu sehen, was läuft, heißt aber noch nicht, es im Griff zu haben. Dafür muss jemand jeden Tag hinschauen, Identitäten pflegen, Berechtigungen zurückschneiden und merken, wenn sich ein Agent plötzlich anders verhält als gestern.",[525,1119,1120],{},"Die Lizenz ist der Anfang. Der Betrieb entscheidet.",[525,1122,1123],{},"Ihr habt E7 schon im Einsatz oder merkt, dass sich bei euch die Agents vermehren? Und fragt euch, wer das eigentlich im Blick hat? Sprecht uns an. Wir schauen gemeinsam, was bei euch läuft und was davon bleiben darf. Den Einstieg unterstützt Microsoft über Förderprogramme. Ob das für euch passt, klären wir gemeinsam.",[521,1125,1126],{},"html pre.shiki code .sVt8B, html code.shiki .sVt8B{--shiki-default:#24292E;--shiki-dark:#E1E4E8}html pre.shiki code .szBVR, html code.shiki .szBVR{--shiki-default:#D73A49;--shiki-dark:#F97583}html pre.shiki code .sZZnC, html code.shiki .sZZnC{--shiki-default:#032F62;--shiki-dark:#9ECBFF}html pre.shiki code .s7hpK, html code.shiki .s7hpK{--shiki-default:#B31D28;--shiki-default-font-style:italic;--shiki-dark:#FDAEB7;--shiki-dark-font-style:italic}html pre.shiki code .sj4cs, html code.shiki .sj4cs{--shiki-default:#005CC5;--shiki-dark:#79B8FF}html .default .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html.dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}",{"title":582,"searchDepth":596,"depth":596,"links":1128},[1129,1130,1131,1132,1133,1134,1135,1136],{"id":544,"depth":596,"text":545},{"id":562,"depth":596,"text":563},{"id":995,"depth":596,"text":996},{"id":1013,"depth":596,"text":1014},{"id":1054,"depth":596,"text":1055},{"id":1075,"depth":596,"text":1076},{"id":1102,"depth":596,"text":1103},{"id":1111,"depth":596,"text":1112},"md","post",{"lang":4,"seoTitle":1140,"titleClass":1141,"date":1142,"categories":1143,"blogtitlepic":1144,"socialimg":1145,"customExcerpt":1146,"keywords":1147,"contactInContent":1148,"asideNav":1211,"maxContent":487,"published":322,"scripts":1229},"Wer hat diese Agents gebaut? E7, Agent 365 und die Frage nach der Verantwortung","h2-font-size","2026-10-20",[232],"head-building-ai-agents.jpg","https://res.cloudinary.com/c4a8/image/upload/blog/heads/head-building-ai-agents.jpg","E7 bündelt E5, Copilot, die Entra Suite und Agent 365. Eine Lizenz räumt aber keinen Tenant auf. Wer für einen Agent geradesteht und worauf er zugreifen darf, entscheidet der Betrieb.","Microsoft 365 E7, Agent 365, Entra Agent ID, Agent Governance, Agent Blueprints, Entra ID Governance, Conditional Access Agents, Shadow AI, Service Principals aufräumen, Defender for Endpoint Local Agents, Advanced Hunting KQL Agents, Managed Entra, Entra ID as Code, Microsoft Foundry Agents, Agent 365 Workshop",{"quote":322,"infos":1149},{"bgColor":1150,"color":1151,"boxBgColor":494,"boxColor":1151,"headline":1152,"subline":1153,"level":542,"textStyling":1154,"flush":1155,"person":1156,"form":1171},"var(--color-gk-dark-blue)","var(--color-gk-white)","Jetzt Kontakt aufnehmen","Ihr habt E7 im Einsatz oder merkt, dass sich die Agents in eurem Tenant vermehren, und fragt euch, wer das im Blick hat? Sprecht uns an, wir schauen gemeinsam, was bei euch läuft und was davon bleiben darf.","text-light","justify-content-end",{"image":1157,"cloudinary":322,"alt":1158,"name":1158,"quotee":1158,"quoteeTitle":1159,"quote":1160,"detailsHeader":1161,"details":1162},"/people/people-alexander-schlindwein.png","Alexander Schlindwein","Workplace Lead","In fast jedem Tenant, den wir übernehmen, finden wir Service Principals, für die niemand mehr zuständig ist. Bei Agents sehen wir dasselbe gerade entstehen, nur baut sie inzwischen jede Fachabteilung. Deshalb behandeln wir sie von Anfang an wie jede andere Identität: mit Verantwortlichem, klaren Rechten und einem Ablaufdatum, als Code und nachvollziehbar.","Wir freuen uns darauf,\u003Cbr />von euch zu hören!",[1163,1167],{"text":495,"href":1164,"details":1165,"icon":1166},"tel:+49 69 4005520","Jetzt anrufen","site/phone",{"text":1168,"href":1169,"icon":1170},"sales@glueckkanja.com","mailto:sales@glueckkanja.com","site/mail",{"ctaText":1172,"cta":1173,"method":1138,"action":1175,"fields":1176},"Absenden",{"skin":1174},"primary on-surface","/send",[1177,1181,1186,1189,1193,1198,1203,1206,1209],{"type":1178,"id":1179,"value":1180},"hidden","_next","successful",{"label":1182,"type":1183,"id":1184,"required":322,"requiredMsg":1185},"Name*","text","name","Bitte Namen eingeben.",{"label":1187,"type":1183,"id":400,"required":322,"requiredMsg":1188},"Unternehmen*","Bitte Unternehmen eingeben.",{"label":1190,"type":1191,"id":1191,"required":322,"requiredMsg":1192},"Email-Adresse*","email","Bitte E-Mail-Adresse eingeben.",{"label":1194,"type":1195,"id":1196,"required":487,"requiredMsg":1197},"Deine Nachricht an uns","textarea","message","Bitte gib eine Nachricht ein.",{"label":1199,"type":1200,"id":1201,"required":322,"requiredMsg":1202},"Eure Daten werden zur Bearbeitung und Beantwortung eurer Anfrage bei uns gespeichert. Weitere Informationen zum Datenschutz findet ihr in unserer \u003Ca href=\"/de/datenschutz\">Datenschutzerklärung\u003C/a>.","checkbox","dataprotection","Bitte bestätigen",{"type":1178,"id":1204,"value":1205},"_subject","Form: Agent 365 Governance | DE",{"type":1178,"id":1207,"value":1208},"inbox_key","default",{"type":1178,"id":1210},"_gotcha",{"menuItems":1212},[1213,1215,1217,1219,1221,1223,1225,1227],{"href":1214,"text":545},"#was-eine-lizenz-nicht-kann",{"href":1216,"text":563},"#was-die-registry-zeigt-und-was-nicht",{"href":1218,"text":996},"#agents-brauchen-identitäten-keine-ausnahmen",{"href":1220,"text":1014},"#governance-ist-eine-daueraufgabe",{"href":1222,"text":1055},"#und-die-agents-in-azure",{"href":1224,"text":1076},"#drei-fragen-für-morgen-früh",{"href":1226,"text":1103},"#wo-wir-anfangen",{"href":1228,"text":1112},"#fazit",{"form":322},"/posts/2026-10-20-who-built-these-agents",{"title":514,"description":582},"posts/2026-10-20-who-built-these-agents",[232,1234,1235,1236,1237],"Microsoft Entra ID","Agent 365","AI","Identity Governance","hJRygD_im_PoAdWfHsgSnof-7vMlCEQ2mrf8dLYZEIk",{"id":1240,"extension":1241,"meta":1242,"stem":8,"__hash__":1597},"authors_data/authors.json","json",{"path":1243,"Fritz Zurhorst":1244,"Alexander Schlindwein":1250,"Sophie Luna":1255,"Nadine Klein":1263,"Karsten Kleinschmidt":1269,"Julian Wendt":1277,"Holger Bunkradt":1282,"Ralf Mania":1288,"Oliver Kieselbach":1294,"Steffen Schwerdtfeger":1300,"Gunnar Winter":1308,"Jan Petersen":1313,"Thorsten Kunzi":1318,"Moritz Pohl":1322,"Thorben Pöschus":1327,"Christoph Hannebauer":1333,"Marco Scheel":1337,"Christopher Brumm":1342,"Florian Klante":1349,"Niklas Bachmann":1354,"Nils Krautkrämer":1359,"Patrick Treptau":1365,"Peter Beckendorf":1370,"Patrick Sobau":1375,"Jörg Wunderlich":1380,"Michael Breither":1384,"Christian Kanja":1389,"Zeba Hoffmann":1395,"Jochen Fröhlich":1400,"Jan Geisbauer":1404,"Gerrit Reinke":1415,"Christian Kordel":1421,"Stephan Wälde":1425,"Carolin Kanja":1430,"Adrian Ritter":1436,"Marvin Bangert":1441,"Thorsten Pickhan":1447,"Christian Lorenz":1453,"Denis Böhm":1458,"Fabian Bader":1463,"Juan Jose Fernandez Perez":1469,"Mahschid Sayyar":1474,"Benjamin Dassow":1479,"Markus Walschburger":1484,"Jonathan Haist":1489,"Daniel Rohregger":1494,"Thomas Naunheim":1499,"Florian Stöckl":1504,"Pascal Asch":1509,"Markus Kättner":1514,"Anna Ulbricht":1521,"Annette Brauns":1528,"Andreas Hötzinger":1534,"body":1539,"title":1596},"/authors",{"display_name":1245,"avatar":1246,"permalink":1247,"linkedin":1248,"imageOffsetTop":1249},"Fritz Zurhorst","people/people-fritz-zurhorst.png","/authors/fritz-zurhorst","friedemann-z","72%",{"display_name":1158,"avatar":1251,"permalink":1252,"twitter":1253,"linkedin":1254},"people/people-alexander-rudolph.png","/authors/alexander-schlindwein","AlexanderOnIT","schlindwein-alexander",{"display_name":1256,"avatar":1257,"permalink":1258,"twitter":1259,"linkedin":1260,"imageOffsetLeft":1261,"imageOffsetTop":1262},"Sophie Luna","people/people-sophie-luna.jpg","/authors/sophie-luna","glueckkanjagab","../company/glueckkanja-gab","58%","67%",{"display_name":1264,"avatar":1265,"permalink":1266,"twitter":1267,"linkedin":1268,"imageOffsetTop":1249},"Nadine Klein","people/people-nadine-kern.png","/authors/nadine-kern","nadineausRT","nadine-kern",{"display_name":1270,"avatar":1271,"permalink":1272,"twitter":1273,"linkedin":1274,"imageOffsetTop":1275,"imageOffsetLeft":1276},"Karsten Kleinschmidt","/c_pad,w_800,h_700/people/karsten-kleinschmidt.jpg","/authors/karsten-kleinschmidt","KarstenonIT","karstenkleinschmidt","60%","57%",{"display_name":1278,"avatar":1279,"permalink":1280,"linkedin":1281},"Julian Wendt","people/people-julian-wendt.png","/authors/julian-wendt","julian-wendt",{"display_name":1283,"avatar":1284,"permalink":1285,"linkedin":1286,"twitter":1287},"Holger Bunkradt","people/people-holger-bunkradt.png","/authors/holger-bunkradt","holger-bunkradt-12b5053b","hbunkradt",{"display_name":1289,"avatar":1290,"permalink":1291,"linkedin":1292,"twitter":1293},"Ralf Mania","people/people-ralf-mania.png","/authors/ralf-mania","ralf-mania-146a2757","RaMa1976",{"display_name":1295,"avatar":1296,"permalink":1297,"linkedin":1298,"twitter":1299},"Oliver Kieselbach","people/people-oliver-kieselbach.png","/authors/oliver-kieselbach","oliver-kieselbach-a4a3409","okieselbT",{"display_name":1301,"avatar":1302,"permalink":1303,"linkedin":1304,"twitter":1305,"imageOffsetTop":1306,"imageOffsetLeft":1307},"Steffen Schwerdtfeger","people/people-steffen-schwerdtfeger.png","/authors/steffen-schwerdtfeger","steffen-schwerdtfeger","SteffenAtCloud","79%","51%",{"display_name":1309,"avatar":1310,"permalink":1311,"twitter":1259,"linkedin":1312},"Gunnar Winter","people/people-gunnar-winter.jpg","/authors/gunnar-winter","company/glueckkanja-gab",{"display_name":1314,"avatar":1315,"permalink":1316,"twitter":1259,"linkedin":1317},"Jan Petersen","people/jan-petersen.png","/authors/jan-petersen","jan-petersen-26a901",{"display_name":1319,"avatar":1320,"permalink":1321,"twitter":1259,"linkedin":1312,"imageOffsetTop":1249},"Thorsten Kunzi","people/author-thorsten-kunzi.png","/authors/thorsten-kunzi",{"display_name":1323,"avatar":1324,"permalink":1325,"twitter":1259,"linkedin":1326},"Dr. Moritz Pohl","people/people-moritz-pohl.png","/authors/moritz-pohl","dr-moritz-pohl",{"display_name":1328,"avatar":1329,"permalink":1330,"twitter":1331,"linkedin":1332},"Thorben Pöschus","people/thorben.poeschus.png","/authors/thorben-poeschus","TPO901","thorben-pöschus-624693b7",{"display_name":1334,"avatar":1335,"permalink":1336,"twitter":1259,"linkedin":1312,"imageOffsetTop":1249},"Dr. Christoph Hannebauer","people/people-christoph-hannebauer.png","/authors/christoph-hannebauer",{"display_name":1338,"avatar":1339,"permalink":1340,"twitter":1341,"linkedin":1341},"Marco Scheel","people/people-marco-scheel.png","/authors/marco-scheel","marcoscheel",{"display_name":1343,"avatar":1344,"permalink":1345,"twitter":1346,"linkedin":1347,"imageOffsetTop":1348},"Christopher Brumm","people/people-christopher-brumm.jpg","/authors/christopher-brumm","cbrhh","christopherbrumm","66%",{"display_name":1350,"avatar":1351,"permalink":1352,"linkedin":1353,"twitter":1259},"Florian Klante","people/florian-klante.jpg","/authors/florian-klante","florian-klante-6031b31b",{"display_name":1355,"avatar":1356,"permalink":1357,"linkedin":1358,"twitter":1259},"Niklas Bachmann","people/niklas.bachmann.png","/authors/niklas-bachmann","niklas-bachmann-66a863158",{"display_name":1360,"avatar":1361,"permalink":1362,"twitter":1363,"linkedin":1364},"Nils Krautkrämer","people/nils-krautkraemer.png","/authors/nils-krautkraemer","KrauNils","nils-krautkrämer-8b04bb250",{"display_name":1366,"avatar":1367,"permalink":1368,"linkedin":1369,"twitter":1259},"Patrick Treptau","people/people-patrick-treptau.png","/authors/patrick-traptau","ptreptau",{"display_name":1371,"avatar":1372,"permalink":1373,"linkedin":1374,"twitter":1259,"imageOffsetTop":1249},"Peter Beckendorf","people/peter-beckendorf.png","/authors/peter-beckendorf","peter-beckendorf-29a239b1",{"display_name":1376,"avatar":1377,"permalink":1378,"linkedin":1379,"twitter":1259},"Patrick Sobau","people/patrick-sobau.png","/authors/patrick-sobau","patrick-sobau",{"display_name":1381,"avatar":1382,"permalink":1383,"twitter":1259},"Jörg Wunderlich","people/joerg-wunderlich.png","/authors/joerg-wunderlich",{"display_name":1385,"avatar":1386,"permalink":1387,"twitter":1259,"linkedin":1388},"Michael Breither","people/people-michael-breither.jpg","/authors/michael-breither","michaelbreither",{"display_name":1390,"avatar":1391,"permalink":1392,"twitter":1393,"linkedin":1394},"Christian Kanja","people/people-christian-kanja.png","/authors/christian-kanja","cekageka","christian-kanja",{"display_name":1396,"avatar":1397,"permalink":1398,"linkedin":1399,"twitter":1259},"Zeba Hoffmann","people/zeba-hoffmann.png","/authors/zeba-hoffmann","zebahoffmann",{"display_name":1401,"avatar":1402,"permalink":1403,"twitter":1259,"linkedin":1312},"Jochen Fröhlich","people/people-jochen-froehlich.png","/authors/jochen-froehlich",{"display_name":1405,"avatar":1406,"permalink":1407,"twitter":1408,"linkedin":1408,"imageOffsetTop":1249,"socials":1409},"Jan Geisbauer","people/people-jan-geisbauer-csoc.png","/authors/jan-geisbauer","JanGeisbauer",[1410,1412],{"text":475,"href":1411},"https://emptydc.com",{"text":1413,"href":1414},"Podcast","https://hairlessinthecloud.com",{"display_name":1416,"avatar":1417,"permalink":1418,"twitter":1419,"linkedin":1420},"Gerrit Reinke","people/gerrit-reinke.png","/authors/gerrit-reinke","GLWRe","glwr",{"display_name":1422,"avatar":1423,"permalink":1424,"twitter":1259,"linkedin":1312},"Christian Kordel","people/christian-kordel.png","/authors/christian-kordel",{"display_name":1426,"avatar":1427,"permalink":1428,"twitter":1429,"linkedin":1312},"Stephan Wälde","people/people-stephan-waelde.png","/authors/stephan-waelde","stephanwaelde",{"display_name":1431,"avatar":1432,"permalink":1433,"twitter":1434,"linkedin":1435},"Carolin Kanja","people/people-carolin-kanja.jpg","/authors/carolin-kanja","fraukanja","carolin-kanja",{"display_name":1437,"avatar":1438,"permalink":1439,"twitter":1440,"linkedin":1440},"Adrian Ritter","people/people-adrian-ritter.png","/authors/adrian-ritter","adrianritter",{"display_name":1442,"avatar":1443,"permalink":1444,"twitter":1445,"linkedin":1446},"Marvin Bangert","people/people-marvin-bangert.png","/authors/marvin-bangert","marvinbangert","marvin-bangert",{"display_name":1448,"avatar":1449,"permalink":1450,"twitter":1451,"linkedin":1452},"Thorsten Pickhan","people/people-thorsten-pickhan.png","/authors/thorsten-pickhan","tpickhan","thorsten-pickhan",{"display_name":1454,"avatar":1455,"permalink":1456,"linkedin":1457,"twitter":1259},"Christian Lorenz","people/people-christian-lorenz.png","/authors/christian-lorenz","christianlorenz95",{"display_name":1459,"avatar":1460,"permalink":1461,"linkedin":1462,"twitter":1259},"Denis Böhm","people/people-denis-boehm.png","/authors/denis-boehm","denis-böhm-3bb834135",{"display_name":1464,"avatar":1465,"permalink":1466,"linkedin":1467,"twitter":1468},"Fabian Bader","people/people-fabian-bader.jpg","/authors/fabian-bader","fabianbader","fabian_bader",{"display_name":1470,"avatar":1471,"permalink":1472,"linkedin":1473},"Juan Jose Fernandez Perez","people/people-juan-jose-fernandez.jpg","/authors/juan-jose-fernandez-perez","juan-jose-fernandez-perez-8016055",{"display_name":1475,"avatar":1476,"permalink":1477,"linkedin":1478},"Mahschid Sayyar","people/people-mahschid-sayyar.jpg","/authors/mahschid-sayyar","mahschid-sayyar-97544463",{"display_name":1480,"avatar":1481,"permalink":1482,"linkedin":1483},"Benjamin Dassow","people/people-benjamin-dassow.jpg","/authors/benjamin-dassow","benjamin-dassow",{"display_name":1485,"avatar":1486,"permalink":1487,"linkedin":1488},"Markus Walschburger","people/people-markus-walschburger.jpg","/authors/markus-walschburger","markus-walschburger",{"display_name":1490,"avatar":1491,"permalink":1492,"linkedin":1493,"imageOffsetTop":1249},"Jonathan Haist","people/people-jonathan-haist.jpg","/authors/jonathan-haist","jonathanhaist",{"display_name":1495,"avatar":1496,"permalink":1497,"linkedin":1498,"imageOffsetTop":1249},"Daniel Rohregger","people/people-daniel-rohregger.jpg","/authors/daniel-rohregger","drohregger",{"display_name":1500,"avatar":1501,"permalink":1502,"linkedin":1503,"imageOffsetTop":1348},"Thomas Naunheim","people/people-thomas-naunheim.jpg","/authors/thomas-naunheim","thomasnaunheim",{"display_name":1505,"avatar":1506,"permalink":1507,"linkedin":1508,"imageOffsetTop":1348},"Florian Stöckl","people/people-florian-stoeckl.jpg","/authors/florian-stoeckl","florianstoeckl",{"display_name":1510,"avatar":1511,"permalink":1512,"linkedin":1513,"imageOffsetTop":1348},"Pascal Asch","people/Pascal.Asch.648.jpg","/authors/pascal-asch","pascal-asch",{"display_name":1515,"avatar":1516,"permalink":1517,"linkedin":1518,"imageOffsetTop":1519,"imageOffsetLeft":1520},"Markus Kättner","people/markus-kaettner.jpg","/authors/markus-kaettner","markus-kättner-b600119","62%","63%",{"display_name":1522,"avatar":1523,"permalink":1524,"linkedin":1525,"imageOffsetTop":1526,"imageOffsetLeft":1527},"Anna Ulbricht","people/anna-katharina.ulbricht-09.png","/authors/anna-ulbricht","anna-katharina-u-a67702199","70%","50%",{"display_name":1529,"avatar":1530,"permalink":1531,"linkedin":1532,"imageOffsetTop":1533,"imageOffsetLeft":1275},"Annette Brauns","people/Annette-Brauns-8.jpg","/authors/annette-brauns","annette-brauns","95%",{"display_name":516,"avatar":1535,"permalink":1536,"linkedin":1537,"imageOffsetTop":1538},"people/at-andreas-hoetzinger.png","/authors/andreas-hoetzinger","andreashoetzinger","75%",{"Fritz Zurhorst":1540,"Alexander Schlindwein":1541,"Sophie Luna":1542,"Nadine Klein":1543,"Karsten Kleinschmidt":1544,"Julian Wendt":1545,"Holger Bunkradt":1546,"Ralf Mania":1547,"Oliver Kieselbach":1548,"Steffen Schwerdtfeger":1549,"Gunnar Winter":1550,"Jan Petersen":1551,"Thorsten Kunzi":1552,"Moritz Pohl":1553,"Thorben Pöschus":1554,"Christoph Hannebauer":1555,"Marco Scheel":1556,"Christopher Brumm":1557,"Florian Klante":1558,"Niklas Bachmann":1559,"Nils Krautkrämer":1560,"Patrick Treptau":1561,"Peter Beckendorf":1562,"Patrick Sobau":1563,"Jörg Wunderlich":1564,"Michael Breither":1565,"Christian Kanja":1566,"Zeba Hoffmann":1567,"Jochen Fröhlich":1568,"Jan Geisbauer":1569,"Gerrit Reinke":1573,"Christian Kordel":1574,"Stephan Wälde":1575,"Carolin Kanja":1576,"Adrian Ritter":1577,"Marvin Bangert":1578,"Thorsten Pickhan":1579,"Christian Lorenz":1580,"Denis Böhm":1581,"Fabian Bader":1582,"Juan Jose Fernandez Perez":1583,"Mahschid Sayyar":1584,"Benjamin Dassow":1585,"Markus Walschburger":1586,"Jonathan Haist":1587,"Daniel Rohregger":1588,"Thomas Naunheim":1589,"Florian Stöckl":1590,"Pascal Asch":1591,"Markus Kättner":1592,"Anna Ulbricht":1593,"Annette Brauns":1594,"Andreas Hötzinger":1595},{"display_name":1245,"avatar":1246,"permalink":1247,"linkedin":1248,"imageOffsetTop":1249},{"display_name":1158,"avatar":1251,"permalink":1252,"twitter":1253,"linkedin":1254},{"display_name":1256,"avatar":1257,"permalink":1258,"twitter":1259,"linkedin":1260,"imageOffsetLeft":1261,"imageOffsetTop":1262},{"display_name":1264,"avatar":1265,"permalink":1266,"twitter":1267,"linkedin":1268,"imageOffsetTop":1249},{"display_name":1270,"avatar":1271,"permalink":1272,"twitter":1273,"linkedin":1274,"imageOffsetTop":1275,"imageOffsetLeft":1276},{"display_name":1278,"avatar":1279,"permalink":1280,"linkedin":1281},{"display_name":1283,"avatar":1284,"permalink":1285,"linkedin":1286,"twitter":1287},{"display_name":1289,"avatar":1290,"permalink":1291,"linkedin":1292,"twitter":1293},{"display_name":1295,"avatar":1296,"permalink":1297,"linkedin":1298,"twitter":1299},{"display_name":1301,"avatar":1302,"permalink":1303,"linkedin":1304,"twitter":1305,"imageOffsetTop":1306,"imageOffsetLeft":1307},{"display_name":1309,"avatar":1310,"permalink":1311,"twitter":1259,"linkedin":1312},{"display_name":1314,"avatar":1315,"permalink":1316,"twitter":1259,"linkedin":1317},{"display_name":1319,"avatar":1320,"permalink":1321,"twitter":1259,"linkedin":1312,"imageOffsetTop":1249},{"display_name":1323,"avatar":1324,"permalink":1325,"twitter":1259,"linkedin":1326},{"display_name":1328,"avatar":1329,"permalink":1330,"twitter":1331,"linkedin":1332},{"display_name":1334,"avatar":1335,"permalink":1336,"twitter":1259,"linkedin":1312,"imageOffsetTop":1249},{"display_name":1338,"avatar":1339,"permalink":1340,"twitter":1341,"linkedin":1341},{"display_name":1343,"avatar":1344,"permalink":1345,"twitter":1346,"linkedin":1347,"imageOffsetTop":1348},{"display_name":1350,"avatar":1351,"permalink":1352,"linkedin":1353,"twitter":1259},{"display_name":1355,"avatar":1356,"permalink":1357,"linkedin":1358,"twitter":1259},{"display_name":1360,"avatar":1361,"permalink":1362,"twitter":1363,"linkedin":1364},{"display_name":1366,"avatar":1367,"permalink":1368,"linkedin":1369,"twitter":1259},{"display_name":1371,"avatar":1372,"permalink":1373,"linkedin":1374,"twitter":1259,"imageOffsetTop":1249},{"display_name":1376,"avatar":1377,"permalink":1378,"linkedin":1379,"twitter":1259},{"display_name":1381,"avatar":1382,"permalink":1383,"twitter":1259},{"display_name":1385,"avatar":1386,"permalink":1387,"twitter":1259,"linkedin":1388},{"display_name":1390,"avatar":1391,"permalink":1392,"twitter":1393,"linkedin":1394},{"display_name":1396,"avatar":1397,"permalink":1398,"linkedin":1399,"twitter":1259},{"display_name":1401,"avatar":1402,"permalink":1403,"twitter":1259,"linkedin":1312},{"display_name":1405,"avatar":1406,"permalink":1407,"twitter":1408,"linkedin":1408,"imageOffsetTop":1249,"socials":1570},[1571,1572],{"text":475,"href":1411},{"text":1413,"href":1414},{"display_name":1416,"avatar":1417,"permalink":1418,"twitter":1419,"linkedin":1420},{"display_name":1422,"avatar":1423,"permalink":1424,"twitter":1259,"linkedin":1312},{"display_name":1426,"avatar":1427,"permalink":1428,"twitter":1429,"linkedin":1312},{"display_name":1431,"avatar":1432,"permalink":1433,"twitter":1434,"linkedin":1435},{"display_name":1437,"avatar":1438,"permalink":1439,"twitter":1440,"linkedin":1440},{"display_name":1442,"avatar":1443,"permalink":1444,"twitter":1445,"linkedin":1446},{"display_name":1448,"avatar":1449,"permalink":1450,"twitter":1451,"linkedin":1452},{"display_name":1454,"avatar":1455,"permalink":1456,"linkedin":1457,"twitter":1259},{"display_name":1459,"avatar":1460,"permalink":1461,"linkedin":1462,"twitter":1259},{"display_name":1464,"avatar":1465,"permalink":1466,"linkedin":1467,"twitter":1468},{"display_name":1470,"avatar":1471,"permalink":1472,"linkedin":1473},{"display_name":1475,"avatar":1476,"permalink":1477,"linkedin":1478},{"display_name":1480,"avatar":1481,"permalink":1482,"linkedin":1483},{"display_name":1485,"avatar":1486,"permalink":1487,"linkedin":1488},{"display_name":1490,"avatar":1491,"permalink":1492,"linkedin":1493,"imageOffsetTop":1249},{"display_name":1495,"avatar":1496,"permalink":1497,"linkedin":1498,"imageOffsetTop":1249},{"display_name":1500,"avatar":1501,"permalink":1502,"linkedin":1503,"imageOffsetTop":1348},{"display_name":1505,"avatar":1506,"permalink":1507,"linkedin":1508,"imageOffsetTop":1348},{"display_name":1510,"avatar":1511,"permalink":1512,"linkedin":1513,"imageOffsetTop":1348},{"display_name":1515,"avatar":1516,"permalink":1517,"linkedin":1518,"imageOffsetTop":1519,"imageOffsetLeft":1520},{"display_name":1522,"avatar":1523,"permalink":1524,"linkedin":1525,"imageOffsetTop":1526,"imageOffsetLeft":1527},{"display_name":1529,"avatar":1530,"permalink":1531,"linkedin":1532,"imageOffsetTop":1533,"imageOffsetLeft":1275},{"display_name":516,"avatar":1535,"permalink":1536,"linkedin":1537,"imageOffsetTop":1538},"Authors","ByqFp0GQyhHZsbtcA_HFJk8O1buC5lC502rPVTWDQDs",{"list":1599,"authors":1867},[1600,1605,1630,1651,1672,1695,1715,1734,1754,1772,1795,1809,1824,1842,1853],{"id":513,"title":514,"author":1601,"cta":497,"description":582,"hideInRecent":487,"layout":1138,"meta":1602,"moment":1142,"path":1230,"stem":1232,"tags":1604,"webcast":487},[516],{"lang":4,"date":1142,"categories":1603,"blogtitlepic":1144,"customExcerpt":1146},[232],[232,1234,1235,1236,1237],{"id":1606,"title":1607,"author":1608,"cta":497,"description":582,"hideInRecent":487,"layout":1138,"meta":1609,"moment":1623,"path":1624,"stem":1625,"tags":1626,"webcast":487},"content_de/posts/2026-09-22-end-of-mfa-sms.md","Das Ende der MFA-SMS",[1270],{"lang":4,"date":1610,"categories":1611,"blogtitlepic":1612,"customExcerpt":1613,"hreflang":1614},"2026-09-21",[232],"head-conditional-access.jpg","Warum Unternehmen jetzt auf phishing-resistente und möglichst passwortlose Anmeldeverfahren umstellen sollten.",[1615,1617,1620],{"lang":4,"href":1616},"/de/posts/2026-09-22-end-of-mfa-sms",{"lang":1618,"href":1619},"en","/en/posts/2026-09-22-end-of-mfa-sms",{"lang":1621,"href":1622},"es","/es/posts/2026-09-22-end-of-mfa-sms","2026-09-22","/posts/2026-09-22-end-of-mfa-sms","posts/2026-09-22-end-of-mfa-sms",[232,1627,1234,1628,1629],"Authentication","MFA","Passkeys",{"id":1631,"title":1632,"author":1633,"cta":497,"description":582,"hideInRecent":487,"layout":1138,"meta":1634,"moment":1610,"path":1645,"stem":1646,"tags":1647,"webcast":487},"content_de/posts/2026-09-21-clickfix-prevent-detect.md","ClickFix. Wenn der Nutzer der Exploit ist, und wie ihr das stoppt",[1245,1264],{"lang":4,"date":1610,"categories":1635,"blogtitlepic":1636,"customExcerpt":1637,"hreflang":1638},[232],"head-clickfix.jpg","ClickFix macht Nutzer zu ihrem eigenen Angreifer: ein gefälschtes CAPTCHA, ein Copy-Paste, und Schadcode läuft im Speicher, ohne dass etwas auf der Platte landet. Wie Microsoft Defender den Angriff erkennt, wo die Erkennung an Grenzen kommt und wie ihr die Lücke mit einem RunMRU-Hunt und vier Schutz-Layern schließt.",[1639,1641,1643],{"lang":4,"href":1640},"/de/posts/2026-09-21-clickfix-prevent-detect",{"lang":1618,"href":1642},"/en/posts/2026-09-21-clickfix-prevent-detect",{"lang":1621,"href":1644},"/es/posts/2026-09-21-clickfix-prevent-detect","/posts/2026-09-21-clickfix-prevent-detect","posts/2026-09-21-clickfix-prevent-detect",[1648,1649,1650],"Defender","SOC","Endpoint Security",{"id":1652,"title":1653,"author":1654,"cta":497,"description":582,"hideInRecent":487,"layout":1138,"meta":1655,"moment":1610,"path":1666,"stem":1667,"tags":1668,"webcast":487},"content_de/posts/2026-09-21-red-tenant-dark-tenant-cio.md","Admin und Alltag auf einem Rechner? Game Over.",[1405],{"lang":4,"date":1610,"categories":1656,"blogtitlepic":1657,"customExcerpt":1658,"hreflang":1659},[232],"head-game-over-de.png","Warum ein Tenant für CIOs nicht reicht, und der zweite selten mitgedacht wird. Der Managed Red Tenant trennt administrative Arbeit architektonisch von der Office-Umgebung, der Managed Dark Tenant hält das Unternehmen handlungsfähig, wenn die Verteidigung trotzdem fällt. Was das für Betriebsmodell, SOC-Signal und die Nachweispflichten nach NISG 2026 bedeutet.",[1660,1662,1664],{"lang":4,"href":1661},"/de/posts/2026-09-21-red-tenant-dark-tenant-cio",{"lang":1618,"href":1663},"/en/posts/2026-09-21-red-tenant-dark-tenant-cio",{"lang":1621,"href":1665},"/es/posts/2026-09-21-red-tenant-dark-tenant-cio","/posts/2026-09-21-red-tenant-dark-tenant-cio","posts/2026-09-21-red-tenant-dark-tenant-cio",[232,1669,1670,1671],"Privileged Access","Zero Trust","NIS2",{"id":1673,"title":1674,"author":1675,"cta":497,"description":1676,"hideInRecent":487,"layout":1138,"meta":1677,"moment":1678,"path":1690,"stem":1691,"tags":1692,"webcast":487},"content_de/posts/2026-08-08-isg-germany-2026.md","Vier Mal Leader. glueckkanja in der ISG-Studie Deutschland 2026",[1431],"ISG hat seine Studie in diesem Jahr umbenannt. Aus dem Microsoft Cloud Ecosystem wurde das Microsoft AI and Cloud Ecosystem, und mit dem Namen hat sich der Maßstab verschoben: Bewertet wird nicht mehr, wer Microsoft-Plattformen einführt, sondern wer Copilot, Agenten und KI-Workloads kontrollierbar betreibt. An unserer Position hat der neue Maßstab nichts geändert. Die ISG Provider Lens® Studie Deutschland 2026 positioniert uns als Leader in vier Quadranten: Microsoft Productivity and Business Process Services und Azure Managed Services, jeweils im Large Market und im Mid Market. Nach 2021, 2023, 2024 und 2025 ist es die fünfte Leader-Einstufung in Deutschland, in der Schweiz kam der Sprung in den Leader-Quadranten zwei Wochen zuvor.",{"lang":4,"date":1678,"categories":1679,"blogtitlepic":1681,"customExcerpt":1682,"hreflang":1683},"2026-08-08",[1680],"Corporate","head-isg-de-2026.png","Die ISG Provider Lens® Studie 2026 positioniert glueckkanja in Deutschland als Leader in vier Quadranten: Microsoft Productivity and Business Process Services und Azure Managed Services, jeweils im Large und im Mid Market. Die Studie heißt jetzt Microsoft AI and Cloud Ecosystem, und der Maßstab hat sich verschoben: Bewertet wird, wer KI- und Agent-Workloads kontrollierbar betreibt.",[1684,1686,1688],{"lang":4,"href":1685},"/de/posts/2026-08-08-isg-germany-2026",{"lang":1618,"href":1687},"/en/posts/2026-08-08-isg-germany-2026",{"lang":1621,"href":1689},"/es/posts/2026-08-08-isg-germany-2026","/posts/2026-08-08-isg-germany-2026","posts/2026-08-08-isg-germany-2026",[1693,1694],"Award","ISG",{"id":1696,"title":1697,"author":1698,"cta":497,"description":1699,"hideInRecent":487,"layout":1138,"meta":1700,"moment":1701,"path":1712,"stem":1713,"tags":1714,"webcast":487},"content_de/posts/2026-07-31-isg-switzerland-2026.md","Vom Rising Star zum Leader. glueckkanja in der ISG-Studie Schweiz 2026",[1431],"2024 haben wir die glueckkanja Switzerland AG gegründet und im zentroom am Bahnhofplatz 10b in Bern ein Büro bezogen. 2025 hat ISG uns im Schweizer Markt als Rising Star eingeordnet, als den Anbieter, dem die Analysten den Sprung in den Leader-Quadranten zutrauen. Jetzt ist der Sprung dokumentiert: Die ISG Provider Lens® Studie 2026 positioniert uns in der Schweiz als Leader im Quadranten Microsoft AI and Cloud Ecosystem, in den Bereichen Azure Managed Services und Microsoft Productivity and Business Process Services.",{"lang":4,"date":1701,"categories":1702,"blogtitlepic":1703,"customExcerpt":1704,"hreflang":1705},"2026-07-31",[1680],"head-isg-ch-2026.png","Die ISG Provider Lens® Studie 2026 positioniert glueckkanja in der Schweiz als Leader im Quadranten Microsoft AI and Cloud Ecosystem, in den Bereichen Azure Managed Services und Microsoft Productivity and Business Process Services. Zwei Jahre nach dem Markteintritt in Bern, ein Jahr nach der Rising-Star-Auszeichnung.",[1706,1708,1710],{"lang":4,"href":1707},"/de/posts/2026-07-31-isg-switzerland-2026",{"lang":1618,"href":1709},"/en/posts/2026-07-31-isg-switzerland-2026",{"lang":1621,"href":1711},"/es/posts/2026-07-31-isg-switzerland-2026","/posts/2026-07-31-isg-switzerland-2026","posts/2026-07-31-isg-switzerland-2026",[1693,1694],{"id":1716,"title":1717,"author":1718,"cta":497,"description":582,"hideInRecent":487,"layout":1138,"meta":1719,"moment":1720,"path":1731,"stem":1732,"tags":1733,"webcast":487},"content_de/posts/2026-07-24-outbreak-openai-hugging-face.md","Outbreak. Was der OpenAI/Hugging-Face-Vorfall verrät und was nicht",[1405],{"lang":4,"date":1720,"categories":1721,"blogtitlepic":1722,"customExcerpt":1723,"hreflang":1724},"2026-07-24",[232],"head-outbreak.jpg","Ein AI-Agent bricht aus seiner Testumgebung aus, findet einen Zero-Day und hackt ein anderes Unternehmen. Klingt nach Drehbuch, ist aber im Juli 2026 tatsächlich passiert. Zeit für eine nüchterne Einordnung: mit etwas Psychologie, zwei Security-Veteranen und der Frage, was das für eure Verteidigung bedeutet.",[1725,1727,1729],{"lang":4,"href":1726},"/de/posts/2026-07-24-outbreak-openai-hugging-face",{"lang":1618,"href":1728},"/en/posts/2026-07-24-outbreak-openai-hugging-face",{"lang":1621,"href":1730},"/es/posts/2026-07-24-outbreak-openai-hugging-face","/posts/2026-07-24-outbreak-openai-hugging-face","posts/2026-07-24-outbreak-openai-hugging-face",[1236,1649,1670],{"id":1735,"title":1736,"author":1737,"cta":497,"description":1738,"hideInRecent":487,"layout":1138,"meta":1739,"moment":1740,"path":1751,"stem":1752,"tags":1753,"webcast":487},"content_de/posts/2026-07-22-isg-cybersecurity-2026.md","Leader und Rising Star. glueckkanja in der ISG Cybersecurity-Studie 2026",[1431],"Neu im Quadranten und direkt Leader: Die ISG Provider Lens®-Studie \"Cybersecurity – Services and Solutions 2026\" positioniert glueckkanja als Leader im Bereich Next-Gen SOC/MDR Services für den deutschen Mittelstand. Im Gesamtmarkt für Next-Gen SOC/MDR Services zeichnet uns ISG als Rising Star aus, also als den Anbieter, dem die Analysten den Sprung in den Leader-Quadranten innerhalb der nächsten 12 bis 24 Monate zutrauen.",{"lang":4,"date":1740,"categories":1741,"blogtitlepic":1742,"customExcerpt":1743,"hreflang":1744},"2026-07-22",[1680],"head-isg-cybersecurity-2026.png","Die ISG Provider Lens®-Studie Cybersecurity 2026 zeichnet glueckkanja als Leader im Quadranten Next-Gen SOC/MDR Services (Midmarket) aus. Im Gesamtmarkt für Next-Gen SOC/MDR Services sind wir Rising Star. ISG bescheinigt uns überdurchschnittliches Wachstum, tiefe Microsoft-Security-Expertise und ein 24/7 SOC aus Deutschland.",[1745,1747,1749],{"lang":4,"href":1746},"/de/posts/2026-07-22-isg-cybersecurity-2026",{"lang":1618,"href":1748},"/en/posts/2026-07-22-isg-cybersecurity-2026",{"lang":1621,"href":1750},"/es/posts/2026-07-22-isg-cybersecurity-2026","/posts/2026-07-22-isg-cybersecurity-2026","posts/2026-07-22-isg-cybersecurity-2026",[1693,1694,232],{"id":1755,"title":1756,"author":1757,"cta":497,"description":1758,"hideInRecent":487,"layout":1138,"meta":1759,"moment":1760,"path":1769,"stem":1770,"tags":1771,"webcast":487},"content_de/posts/2026-07-06-the-holy-trinity.md","The Holy Trinity: Was KI wirklich braucht, um zu arbeiten",[1431],"Ein Fertigungsunternehmen möchte wissen, welche seiner 14.000 SKUs tatsächlich profitabel sind. Die Antwort liegt in drei Systemen, die noch nie einen einzigen Datenpunkt miteinander ausgetauscht haben. Bis vor Kurzem hat es drei Abteilungen, zwei Wochen und einiges an gutem Willen gekostet, sie zu bekommen. Seit Anfang 2026 kann eine KI diese Frage in Minuten beantworten: die Daten durchsuchen, Zusammenhänge herstellen, eine Empfehlung produzieren. Vorausgesetzt, sie hat Zugriff.",{"lang":4,"date":1760,"categories":1761,"blogtitlepic":1762,"hreflang":1763},"2026-07-06",[128],"head-the-holy-trinity",[1764,1765,1767],{"lang":4,"href":1067},{"lang":1618,"href":1766},"/en/posts/2026-07-06-the-holy-trinity",{"lang":1621,"href":1768},"/es/posts/2026-07-06-the-holy-trinity","/posts/2026-07-06-the-holy-trinity","posts/2026-07-06-the-holy-trinity",[1236,128],{"id":1773,"title":1774,"author":1775,"cta":497,"description":1776,"hideInRecent":487,"layout":1138,"meta":1777,"moment":1778,"path":1789,"stem":1790,"tags":1791,"webcast":487},"content_de/posts/2026-07-01-onboarding-process.md","Vertrag unterschrieben: So läuft dein Onboarding bei uns ab",[1522],"Wie läuft euer Onboarding eigentlich ab? Eine Frage, die uns in Gesprächen mit Bewerbenden immer wieder begegnet, denn viele haben schon einmal erlebt, dass ein Onboarding holprig verläuft. Umso wichtiger ist es uns, dir von Anfang an ein gutes Gefühl zu geben.",{"lang":4,"date":1778,"categories":1779,"blogtitlepic":1780,"customExcerpt":1781,"hreflang":1782},"2026-07-01",[1680],"Onboarding_Blogheader","Der Vertrag ist unterschrieben, der erste große Schritt ist geschafft. Aber wie geht es jetzt weiter? Wir nehmen dich mit hinter die Kulissen unseres Onboardings, vom PreBoarding bis zur ersten Woche im Team.",[1783,1785,1787],{"lang":4,"href":1784},"/de/posts/2026-07-01-onboarding-process",{"lang":1618,"href":1786},"/en/posts/2026-07-01-onboarding-process",{"lang":1621,"href":1788},"/es/posts/2026-07-01-onboarding-process","/posts/2026-07-01-onboarding-process","posts/2026-07-01-onboarding-process",[1792,1793,1794],"Employer Branding","Onboarding","Unternehmenskultur",{"id":1796,"title":1797,"author":1798,"cta":497,"description":1799,"hideInRecent":487,"layout":1138,"meta":1800,"moment":1801,"path":1805,"stem":1806,"tags":1807,"webcast":487},"content_de/posts/2026-06-26-frontier-partner.md","Microsoft Frontier Partner: wir gehören dazu",[1431],"Im Microsoft-Partner-Ökosystem gibt es eine ganze Reihe von Anerkennungen, und doch hebt sich das Frontier Partner Badge in seiner Anlage von den anderen Auszeichnungen ab. Es lässt sich nicht beantragen, sondern wird auf Initiative von Microsoft an einen exklusiven Kreis von Partnern vergeben, die in mehreren Disziplinen parallel überzeugen müssen, statt in einer einzelnen zu glänzen. Microsoft prüft dabei nachgewiesene Kompetenz in Cloud & AI Platforms, in AI Business Solutions und in Security gleichermaßen und adressiert damit Unternehmen, die KI nicht als Aufsatz auf bestehende IT verstehen, sondern als Ergebnis einer durchgängigen Architektur, die von der Identität über den Endpoint bis in den produktiven KI-Betrieb trägt.",{"lang":4,"date":1801,"categories":1802,"blogtitlepic":1803,"customExcerpt":1804},"2026-06-26",[1680],"head-frontier-partner-badge.jpg","Seit kurzem gibt es im Microsoft AI Cloud Partner Program eine neue Spitzenauszeichnung, das Frontier Partner Badge. Microsoft verleiht es ausschließlich an einen exklusiven Kreis von Partnern weltweit, die KI-Projekte auf dem gesamten Microsoft-Stack tragfähig liefern, vom Arbeitsplatz über die Cloud-Plattform und Security bis in die KI-Anwendung selbst, und diesen Anspruch in der Praxis nachgewiesen haben. Im DACH-Raum zählt diese Gruppe nur eine Handvoll Unternehmen, und wir sind eines davon.","/posts/2026-06-26-frontier-partner","posts/2026-06-26-frontier-partner",[1693,1808,1236],"Microsoft Partner",{"id":1810,"title":1811,"author":1812,"cta":497,"description":1813,"hideInRecent":487,"layout":1138,"meta":1814,"moment":1815,"path":1819,"stem":1820,"tags":1821,"webcast":487},"content_de/posts/2026-06-09-vair-run.md","160 Kilometer für den guten Zweck",[1529],"Sonntagmorgen, 8:30 Uhr, Holbeinsteg am Main. Elf Kolleginnen und Kollegen in einheitlichen NinjaCat-Shirts, bereit für die Frankfurter Runden. Regen, Blitz und Donner inklusive. Für einen guten Zweck zu laufen war Motivation genug, um trotz des schlechten Wetters die Laufschuhe zu schnüren.",{"lang":4,"date":1815,"categories":1816,"blogtitlepic":1817,"customExcerpt":1818},"2026-06-08",[1680],"frankfurter-runden.png","Elf Kollegen und Kolleginnen, 16 Runden, 160 Kilometer, ein Gewittersturm und eine Podiumsplatzierung: glueckkanja war bei den Frankfurter Runden 2026 dabei und hat für jede gelaufene Runde an den VAIR e.V. gespendet, der in Offenbach einen inklusiven Sport- und Kulturpark baut.","/posts/2026-06-09-vair-run","posts/2026-06-09-vair-run",[1822,1792,1823],"Top Arbeitgeber","Soziales Engagement",{"id":1825,"title":1826,"author":1827,"cta":497,"description":1828,"hideInRecent":487,"layout":1138,"meta":1829,"moment":1830,"path":1834,"stem":1835,"tags":1836,"webcast":487},"content_de/posts/2026-04-10-incident-to-intelligence.md","Anatomie eines unbekannten AMOS Stealers: Vom Alert zur Immunität in Stunden",[1510],"Wenn in unserem SOC ein Alert ausgelöst wird, beginnt die Uhr zu laufen: nicht nur für den betroffenen Kunden, sondern für alle Organisationen unter unserem Schutz. Der gefährlichste Moment im modernen Bedrohungsumfeld ist die Intelligence Gap, das Zeitfenster zwischen dem ersten Einsatz einer neuen Malware-Variante und dem Tag, an dem die Branche davon erfährt.",{"lang":4,"date":1830,"categories":1831,"blogtitlepic":1832,"customExcerpt":1833},"2026-04-10",[232],"head-amos-stealer.png","Eine bisher undokumentierte AMOS-Stealer-Variante kompromittierte einen macOS-Endpoint. Keine bekannten Hashes, keine C2-Daten in öffentlichen Datenbanken. Unser SOC demontierte sechs Obfuskierungsschichten, extrahierte alle Indikatoren und verteilte den Schutz an alle SOC-Kunden innerhalb von Stunden, noch bevor die Branche das Sample überhaupt gesehen hatte.","/posts/2026-04-10-incident-to-intelligence","posts/2026-04-10-incident-to-intelligence",[1837,1838,1839,1840,1841],"Threat Intelligence","Incident Response","macOS Security","Malware Analysis","Cyber Security Operations Center",{"id":1843,"title":1844,"author":1845,"cta":497,"description":1846,"hideInRecent":487,"layout":1138,"meta":1847,"moment":1848,"path":1851,"stem":1852,"tags":497,"webcast":487},"content_de/posts/2026-03-21-microsoft-edge-corporate-browser.md","Warum Edge euer einziger Corporate Browser sein sollte",[1301],"Die Wahl des Browsers ist in Unternehmensumgebungen eine strategische Entscheidung: Sie beeinflusst direkt, wie viel Sicherheit und Verwaltungsaufwand ihr tatsächlich habt. Google Chrome war lange die naheliegende Option, aber Microsoft Edge hat sich zu einem Browser entwickelt, der direkt in den bestehenden Stack greift, vor allem wenn Microsoft 365 im Einsatz ist und die Verwaltung über Intune läuft.",{"lang":4,"date":1848,"blogtitlepic":1849,"customExcerpt":1850},"2026-03-21","head-microsoft-edge-default-browser.jpg","Kein Unternehmen hat Chrome wirklich gewählt; er war einfach da, mit eigener Sync-Logik, eigener Kontoverwaltung, eigener Richtlinienoberfläche. Microsoft Edge dagegen greift direkt in die Infrastruktur, die ohnehin schon läuft: Entra ID, Intune, Defender. Dieser Beitrag zeigt, wie der Wechsel aussieht, wie Chrome per Intune-Richtlinie auf eine Landingpage umgeleitet wird und was wegfällt, wenn man aufhört, zwei Browser parallel zu betreiben.","/posts/2026-03-21-microsoft-edge-corporate-browser","posts/2026-03-21-microsoft-edge-corporate-browser",{"id":1854,"title":1855,"author":1856,"cta":497,"description":1857,"hideInRecent":487,"layout":1138,"meta":1858,"moment":1859,"path":1863,"stem":1864,"tags":1865,"webcast":487},"content_de/posts/2026-03-20-stryker-attack-intune-privilege.md","Ein Admin-Konto war alles, was es brauchte.",[1405],"Mittwoch, 11. März 2026. Mitarbeiter in Stryker-Büros in 79 Ländern schalteten ihre Computer ein und fanden sie leer. Login-Bildschirme ersetzt durch ein Logo. Firmen-Laptops, Diensthandys, private Geräte, die im BYOD-Programm des Unternehmens registriert waren – alle gleichzeitig gelöscht, über Nacht. Keine Ransomware, keine Malware-Signaturen, nichts, das ein Endpoint-Detection-Tool hätte erkennen können.",{"lang":4,"date":1859,"categories":1860,"blogtitlepic":1861,"customExcerpt":1862},"2026-03-20",[232],"head-stryker.jpg","Am 11. März 2026 löschte Handala Geräte in 79 Ländern, und alles, was dafür nötig war, war ein kompromittiertes Intune-Admin-Konto. Keine Malware, kein Exploit, nur legitime Management-Tools, gegen ihre Besitzer gerichtet. Was passiert ist, warum es funktioniert hat und welche zwei architektonischen Lücken geschlossen werden müssen.","/posts/2026-03-20-stryker-attack-intune-privilege","posts/2026-03-20-stryker-attack-intune-privilege",[1866,71,1669,1670],"Red Tenant",{"Andreas Hötzinger":1868,"Karsten Kleinschmidt":1869,"Fritz Zurhorst":1870,"Nadine Klein":1871,"Jan Geisbauer":1872,"Carolin Kanja":1876,"Anna Ulbricht":1877,"Annette Brauns":1878,"Pascal Asch":1879,"Steffen Schwerdtfeger":1880},{"display_name":516,"avatar":1535,"permalink":1536,"linkedin":1537,"imageOffsetTop":1538},{"display_name":1270,"avatar":1271,"permalink":1272,"twitter":1273,"linkedin":1274,"imageOffsetTop":1275,"imageOffsetLeft":1276},{"display_name":1245,"avatar":1246,"permalink":1247,"linkedin":1248,"imageOffsetTop":1249},{"display_name":1264,"avatar":1265,"permalink":1266,"twitter":1267,"linkedin":1268,"imageOffsetTop":1249},{"display_name":1405,"avatar":1406,"permalink":1407,"twitter":1408,"linkedin":1408,"imageOffsetTop":1249,"socials":1873},[1874,1875],{"text":475,"href":1411},{"text":1413,"href":1414},{"display_name":1431,"avatar":1432,"permalink":1433,"twitter":1434,"linkedin":1435},{"display_name":1522,"avatar":1523,"permalink":1524,"linkedin":1525,"imageOffsetTop":1526,"imageOffsetLeft":1527},{"display_name":1529,"avatar":1530,"permalink":1531,"linkedin":1532,"imageOffsetTop":1533,"imageOffsetLeft":1275},{"display_name":1510,"avatar":1511,"permalink":1512,"linkedin":1513,"imageOffsetTop":1348},{"display_name":1301,"avatar":1302,"permalink":1303,"linkedin":1304,"twitter":1305,"imageOffsetTop":1306,"imageOffsetLeft":1307},{"id":1240,"extension":1241,"meta":1882,"stem":8,"__hash__":1597},{"Andreas Hötzinger":1883},{"display_name":516,"avatar":1535,"permalink":1536,"linkedin":1537,"imageOffsetTop":1538},1792437776882]