PASS Summit East (Chicago)
All Sessions
-
Pre-Conference
SQL Server Security vs. Security Theater: Build a Defensible Data Estate
Andreas Wolter
Stop the "Security Theater" and build a truly defensible data platform. This full-day workshop on security for SQL databases (on-prem/Azure/Fabric) is driven by real-world assessments and breach scenarios in the field. Common security recommendations often focus on features like TDE and flagging sysadmin membership, which creates a false sense of security or unnecessary alarmism while leaving actual attack paths ignored. This PreCon focuses on what moves the needle. You will learn how to make the work of an attacker harder, limit the blast radius, and detect attacks earlier – using practical approaches grounded in Zero Trust and operability. Drawing on 25+ years in the field – including leading security feature development for SQL Server and Azure SQL at Microsoft, contributing to the SQL Server 2022 permission model, and advancing vulnerability assessment and Microsoft Purview-based governance capabilities – you’ll get an inside-out view of the built-in security features, how to use them effectively and where there are gaps to consider. Topics include: NTLM deprecation and Kerberos readiness / SQL Server 2025 updates / Applying Least Privilege / Encryption techniques, tamper evidence with Database Ledger / Building a minimal viable security audit, Extended Events vs Auditing / Network- and system security configuration / Fabric OneLake security implications / Microsoft Purview (intro) ..and of course, demos of security bypasses and how to prevent them.
Pre-Conference
SQL Server Security vs. Security Theater: Build a Defensible Data Estate
Andreas Wolter
Sarpedon Quality Lab LLC
Session Goals: How to apply Zero Trust and least privilege to SQL databases Know which security features to employ and what to look out for
Session Prerequisites: T-SQL basics, fundamental understanding of SQL Server components (SQL Server, Databases SQL Server Agent, on-prem vs Azure SQL)
Track: Database Management
Level: Level 200
-
Thursday -
9:00 AM-5:00 PM -
Room: Jackson Park C
Stop the "Security Theater" and build a truly defensible data platform. This full-day workshop on security for SQL databases (on-prem/Azure/Fabric) is driven by real-world assessments and breach scenarios in the field. Common security recommendations often focus on features like TDE and flagging sysadmin membership, which creates a false sense of security or unnecessary alarmism while leaving actual attack paths ignored. This PreCon focuses on what moves the needle. You will learn how to make the work of an attacker harder, limit the blast radius, and detect attacks earlier – using practical approaches grounded in Zero Trust and operability. Drawing on 25+ years in the field – including leading security feature development for SQL Server and Azure SQL at Microsoft, contributing to the SQL Server 2022 permission model, and advancing vulnerability assessment and Microsoft Purview-based governance capabilities – you’ll get an inside-out view of the built-in security features, how to use them effectively and where there are gaps to consider. Topics include: NTLM deprecation and Kerberos readiness / SQL Server 2025 updates / Applying Least Privilege / Encryption techniques, tamper evidence with Database Ledger / Building a minimal viable security audit, Extended Events vs Auditing / Network- and system security configuration / Fabric OneLake security implications / Microsoft Purview (intro) ..and of course, demos of security bypasses and how to prevent them. -
-
Pre-Conference
Adding PostgreSQL to your SQL Server Skill Set
Grant Fritchey
Pat Wright
More organizations are adding PostgreSQL to their technology stack than ever before. The challenge is that they are not immediately replacing their existing technology, which means more and more people need to understand both SQL Server and PostgreSQL. This session is explicitly designed to support people who already know SQL Server in their journey to add PostgreSQL to their skill set. The session covers the areas of overlap between the two platforms, as well as all the differences that can make learning PostgreSQL a challenge. Not only does this all-day session teach PostgreSQL, but it also explores tooling, documentation, the cloud, and other resources to help on the journey of adding PostgreSQL to an existing SQL Server skill set.
Pre-Conference
Adding PostgreSQL to your SQL Server Skill Set
Grant Fritchey
Redgate Software
Pat Wright
Redgate Software
Session Goals: Learn about the differences in language between SQL Server and PostgreSQL. Understand what's different and unique in how PostgreSQL operates.
Session Prerequisites: General understanding of SQL Server in order to understand the mapping.
Track: Database Management
Level: Level 200
-
Thursday
-
9:00 AM-5:00 PM
-
Room: Hyde Park B
More organizations are adding PostgreSQL to their technology stack than ever before. The challenge is that they are not immediately replacing their existing technology, which means more and more people need to understand both SQL Server and PostgreSQL. This session is explicitly designed to support people who already know SQL Server in their journey to add PostgreSQL to their skill set. The session covers the areas of overlap between the two platforms, as well as all the differences that can make learning PostgreSQL a challenge. Not only does this all-day session teach PostgreSQL, but it also explores tooling, documentation, the cloud, and other resources to help on the journey of adding PostgreSQL to an existing SQL Server skill set. -
-
Pre-Conference
Modern Data Warehousing with Microsoft Fabric
Kristyna Ferris
Chris Hyde
Learn how to design and manage data warehouses in Microsoft Fabric by exploring proven patterns, practical techniques, and common pitfalls to avoid. Topics include dimensional modeling, data warehousing fundamentals, ingestion strategies, medallion architecture, change detection, lifecycle management with CI/CD, monitoring, administration, and migrations.
Pre-Conference
Modern Data Warehousing with Microsoft Fabric
Kristyna Ferris
P3 Adaptive
Chris Hyde
Hydrate Consulting LLC
Session Goals: Attendees will leave the session with a clear understanding of how to design and manage effective warehouses in Fabric, avoid common mistakes, and apply proven techniques that accelerate success in their own environments.
Session Prerequisites: Intended Audience: "Accidental" data warehousing professionals, or those looking for a refresher on the theory and techniques of data warehousing in Fabric. The focus is on data warehouse development and data engineering.
Track: Architecture
Level: Level 100
-
Thursday
-
9:00 AM-5:00 PM
-
Room: Jackson Park D
Learn how to design and manage data warehouses in Microsoft Fabric by exploring proven patterns, practical techniques, and common pitfalls to avoid. Topics include dimensional modeling, data warehousing fundamentals, ingestion strategies, medallion architecture, change detection, lifecycle management with CI/CD, monitoring, administration, and migrations. -
-
Pre-Conference
T-SQL That Doesn't Suck: Solving Performance and Concurrency Problems
Erik Darling
You know how to write T-SQL that works. It compiles, it returns rows, nobody's filed an incident yet. But "works" is doing a lot of heavy lifting in that sentence, and production has a way of finding out what you got away with in dev. In this full-day, demo-packed session, Erik Darling walks you through the T-SQL that silently bleeds your servers dry and shows you how to fix it without rewriting the whole app. You'll tackle the performance killers that don't show up until scale does: implicit conversions, non-sargable predicates, parameter sniffing traps, and joins that look fine in an execution plan until they absolutely aren't. You'll learn when temp tables beat table variables, when CTEs help versus when they just make you feel organized, and how to write window functions that don't spill to tempdb. But performance is only half the fight. We'll dig into concurrency problems that turn a Tuesday into a war room: blocking chains, isolation level surprises, and data modifications that hold locks like they're paying rent. You'll learn DML patterns that play well with others. Along the way, we'll put AI-generated T-SQL on the table. Not to dunk on it, but because it's showing up in pull requests and you need to know where it falls apart and where it saves you time. If you've ever inherited a stored procedure that made you question your career choices, this is your day. Come write T-SQL you'd be proud to put your name on.
Pre-Conference
T-SQL That Doesn't Suck: Solving Performance and Concurrency Problems
Erik Darling
Darling Data
Session Goals: Recognize and fix performance anti-patterns across joins, predicates, temp objects, CTEs, and window functions. Understand and resolve concurrency issues including blocking, isolation levels, and lock-friendly DML. Evaluate AI-generated T-SQL and learn to use AI tools without losing your edge.
Session Prerequisites: You should be comfortable writing T-SQL: SELECT, JOIN, WHERE, GROUP BY, and basic stored procedures. If you can read an execution plan without panicking, you're ready. This session picks up where the fundamentals leave off.
Track: Development
Level: Level 300
-
Thursday
-
9:00 AM-5:00 PM
-
Room: Jackson Park B
You know how to write T-SQL that works. It compiles, it returns rows, nobody's filed an incident yet. But "works" is doing a lot of heavy lifting in that sentence, and production has a way of finding out what you got away with in dev. In this full-day, demo-packed session, Erik Darling walks you through the T-SQL that silently bleeds your servers dry and shows you how to fix it without rewriting the whole app. You'll tackle the performance killers that don't show up until scale does: implicit conversions, non-sargable predicates, parameter sniffing traps, and joins that look fine in an execution plan until they absolutely aren't. You'll learn when temp tables beat table variables, when CTEs help versus when they just make you feel organized, and how to write window functions that don't spill to tempdb. But performance is only half the fight. We'll dig into concurrency problems that turn a Tuesday into a war room: blocking chains, isolation level surprises, and data modifications that hold locks like they're paying rent. You'll learn DML patterns that play well with others. Along the way, we'll put AI-generated T-SQL on the table. Not to dunk on it, but because it's showing up in pull requests and you need to know where it falls apart and where it saves you time. If you've ever inherited a stored procedure that made you question your career choices, this is your day. Come write T-SQL you'd be proud to put your name on. -