Tag Azure Security

22/05/2020

Simple SQL Injection Example – Review Security and Remediate

By Steve in Azure Security, Cloud & Datacenter Management, Cloud Security, Cyber Security, Enterprise Security, Enterprise Security, Ethical Hacking, Microsoft, SQL Injection Tag #Monitoring, Access Denied, ATP, Azure Security, Firewall, Forbidden Access, Select *, Special Characters, SQL Injection, WordPress

Something I regularly do, is review security against attacks and remediate if required. This example is a simple SQL injection attack. There is a few things in addition to code…

22/05/2020

AZURE – Control Storage Access by Networks

By Steve in Azure Security, Cloud & Datacenter Management, Cyber Security, Enterprise Security, Enterprise Security, Microsoft, Microsoft Azure, Network Security, Networks, Storage Tag Access, Allow, Azure, Azure Security, Firewall, Network, Security, Storage, Storage Account

We have a storage account, "StorageV2 (general purpose v2)" and its can be accessed initially from all networks. We now want to restrict the storage access to an approved network…

21/05/2020

Azure – Update Management

By Steve in Azure Security, Cloud & Datacenter Management, Cyber Security, Enterprise Security, Enterprise Security, Logs, Microsoft, Microsoft Azure, Microsoft Server 2016, Microsoft Windows Server 2008, Microsoft Windows Server 2012, Update Management, WSUS Tag Azure, Azure Security, Linux, Patch Management, Update Management, Virtual Machines, Windows, Windows Updates

How to maintain the patch status of your Windows and Linux machines "You can use Update Management in Azure Automation to manage operating system updates for your Windows and Linux…

21/05/2020

Azure – Monitoring Alert On Virtual Machine CPU Usage

By Steve in Alerts, Azure Monitor, Azure Security, Cloud & Datacenter Management, Cyber Security, Enterprise Security, Enterprise Security, Microsoft, Microsoft Azure, Microsoft Windows 10, Rules Tag Action Group, Alert Admin, Alert Logic, Alerts, Azure Security, CPU, Notifications, Spikes, Virtual Machine

Create a monitoring alert on virtual machine CPU spike/usage. Prep work you will need a virtual machine to monitor. An action group set to send emails to admins For this…

21/05/2020

Azure – Register An Application in AD and Generate App Password

By Steve in Active Directory, Azure AD, Azure Security, Cloud & Datacenter Management, Cyber Security, Developer Technologies, DevOps, Enterprise Security, Enterprise Security, Microsoft, Microsoft Azure Tag AD, App Password, App Registration, Authentication, Azure AD, Azure Security, Client Secret, Client Secrets

How to guide, in Azure register an application in AD and generate app password In the Azure portal, browse to Azure Active Directory > App Registrations New Registration Enter Application…

20/05/2020

Azure – Activity Log

By Steve in Azure Security, Cloud & Datacenter Management, Cyber Security, Enterprise Security, Enterprise Security, Logs, Microsoft, Microsoft Azure Tag Activity, Activity Log, Azure, Azure Security, CSV, Diagnostics, Export, Filter, Log, Logs, Name, Operation, Status, Subscription, Time

Example of what you can see in an Azure Activity Log Event Initiated by Subscription Operation Status Time

20/05/2020

Azure – Route Tables – How To Force Traffic Down A Specific Route

By Steve in Azure Security, Cloud & Datacenter Management, Cyber Security, Enterprise Security, Enterprise Security, Microsoft, Microsoft Azure, Networks Tag Azure, Azure Security, Default, Internet, Overider, Route, Routes, Routing, Traffic, Web Traffic

"Create a route table when you need to override Azure's default routing." Why? To force internet traffic via the on-prem network Route via a NGFW (Next Generation Fire Wall) Scenario…

20/05/2020

Azure – Content Trust in ACR and Roles

By Steve in Azure Container Registry, Azure Security, Cloud & Datacenter Management, Content Trust, Cyber Security, Developer Technologies, DevOps, Enterprise Security, Enterprise Security, Microsoft, Microsoft Azure Tag ACR, ACRDelete, ACRPull, ACRPush, Azure CLI, Azure Security, Container, Content Trust, Docker, Pull, Push, RBAC, Registry, Roles

Security and Authentication method – Content Trust You need a container registry to start with Content trust in Azure Container Registry "Azure Container Registry implements Docker's content trust model, enabling…

20/05/2020

Azure – Creating Key Vaults

By Steve in Azure Security, Cloud & Datacenter Management, Cyber Security, Enterprise Security, Enterprise Security, Key Vault, Microsoft, Microsoft Azure Tag Azure CLI, Azure Security, Certificates, Dynamic ID, Encryption, Key Vault, Keys, Pass Parameter, Passwords, Secrets, Static ID, Value, Vault

Azure Key Vault – Best Practices Key Vault – A cloud service to store passwords, certificates, keys etc. Make sure its very secure. Tips – Use Multiple Vaults to separate…

19/05/2020

Azure – Create Kubernetes Cluster with ACR Integration

By Steve in Azure Security, Batch Scripts and PowerShell, Cloud & Datacenter Management, Cyber Security, Enterprise Security, Enterprise Security, Kubernetes, Microsoft, Microsoft Azure Tag ACR, Authentication, Azure Security, Cloud Shell, Container, Kubernetes, PowerShell, Service Principal

How to create a Kubernetes Cluster with ACR Integration and Service Principal Authentication. Create Kubernetes Cluster, Select the Kubernetes Services Blade> Cloud Shell You will be prompted for storage if…