Tag Azure

21/01/2021

How to Enable “Security Defaults” in Azure and Office 365

By Steve in Active Directory, Azure AD, Azure Security, Cloud & Datacenter Management, Conditional Access, Enterprise Security, Microsoft Azure, Office 365, Office Apps & Services, Office365, Security & Compliance, Security & Compliance Tag 365, Azure, Azure AD Multi-Factor Authentication, Basic Auth, Blocking legacy authentication protocols, Defaults, Legacy, MFA, Modern Authentication, MS Azure, MS365, multi-factor authentication, Office 365, Org Settings, Protecting privileged activities, Security, Security Defaults

Security Defaults in Azure Portal. IMPORTANT, SECURITY DEFAULTS IS NOT ALWAYS ENABLED BY DEFAULT. YOU MUST CHECK YOUR SETTINGS What does Security Defaults give you? Security Defaults when enabled provide…

22/06/2020

Microsoft Azure Security – Study Notes

By Steve in Advisor, Alerts, Alerts, App Service, Azure AD, Azure Container Registry, Azure Monitor, Azure Security, Blueprint, Cloud & Datacenter Management, Cloud Security, Conditional Access, Content Trust, Cyber Security, Enterprise Security, Enterprise Security, Externsions, Hot Wired IT Solutions, IAM, Identity Protection, Key Vault, Kubernetes, Logs, Management Locks, Microsoft, Microsoft Azure, Networks, Powershell, Roles, Users and Groups, Security & Compliance, Security Center, Storage Tag AZ-500, AZ500, Azure, Azure Security, Exam, Microsoft, Microsoft Azure Security Technologies, Prep, Study Notes

A collection of all my study notes and lab work while working towards passing the badge Microsoft Certified Security Engineer Associate by passing the AZ-500 exam These notes are in…

16/06/2020

MS365 – Azure AD – Dynamic Groups and Expiration Settings

By Steve in Active Directory, Azure AD, Azure Security, Cloud & Datacenter Management, Enterprise Security, Microsoft, Microsoft Azure, Office 365, Office Apps & Services, Roles, Users and Groups, Security & Compliance Tag -eq, Azure, Azure AD, Azure Security, Dynamic, Dynamic Groups, Expiration, Expresions, Expression, Group Liftime, Groups, Life Time, MS365, Office365, Rule, Syntax, user.department

Maintain groups in Azure AD with dynamic groups and set expiration settings. Example scenario : Controlling remote access to sub contractors working on a short term project. The project owner…

27/05/2020

AZ-500: Microsoft Azure Security Technologies – EXAM PASSED!!!

By Steve in Azure Security, Cloud & Datacenter Management, Cloud Security, Cyber Security, Enterprise Security, Enterprise Security, Hot Wired IT Solutions, Microsoft, Microsoft Azure, Security & Compliance Tag AZ-500, Azure, Certified, Exam, MCP, Microsoft, Microsoft Azure Security Technologies, Passed, Security, Stephen Hackers

AZ-500: Microsoft Azure Security Technologies EXAM PASSED!!! #Azure #Security #AzureSecurity #CertifiedProfessional #CloudSecurity #CloudFamily #CyberSecurity #MicrosoftAzure #MicrosoftCloud #Microsoft #alwaysbelearning #AZ500 #EXAM #PASSED

25/05/2020

Azure – Setup Azure Blueprints

By Steve in Azure Security, Blueprint, Cloud & Datacenter Management, Cloud Security, Cyber Security, Enterprise Security, Enterprise Security, Microsoft, Microsoft Azure, Security & Compliance Tag ARM, Azure, Blueprint, Example, How to, Policy, Publish, RBAC, Resource Groups, Roles

Challenge: Separate subscriptions for multiple disciplines under the same Azure Active Directory Tenancy. Required : Each subscription to have the same role assignments Solution : Azure Blueprints to define a…

25/05/2020

Azure – Advisor

By Steve in Advisor, Azure Security, Cloud & Datacenter Management, Cloud Security, Cyber Security, Enterprise Security, Enterprise Security, Microsoft, Microsoft Azure, Security & Compliance Tag Advisor, Azure, Cost, High Availability, Operational Excellence, Performance, Recommendations

Sample screen shots of Azure Advisor Recommendations : Cost , Security, High Availability, Performance, Operational Excellence Example Recommendations report export, output as a PDF or CSV

25/05/2020

Azure – AD Identity Protection

By Steve in Alerts, Alerts, Azure Security, Cloud & Datacenter Management, Cloud Security, Cyber Security, Enterprise Security, Enterprise Security, Identity Protection, Microsoft, Microsoft Azure, Network Security, Security & Compliance Tag AD, Azure, How To Guides, Identify Protection, MFA Registration Policy, Policy, Reference Guides, RISK, Sign-In Risk, User Risk

This feature looks to identify activity and assign a risk level. "Risk detection and remediation" All features look to be available in Azure AD Premium P2 and restricted number of…

22/05/2020

Azure – Log Analytics Workspace and AzureVirtual Machine Agent Install

By Steve in Azure Security, Cloud & Datacenter Management, Cloud Security, Cyber Security, Enterprise Security, Enterprise Security, Logs, Microsoft, Microsoft Azure Tag Analytics, Azure, Azure Security, Collect, Event Logs, Log, Logs, Security Logs, Virtual Machines, Windows, Workspace

How to prepare to collect security log data from your Azure Windows virtual machines. You require two things: Log Analystics Workspace to be created The agent to be installed on…

22/05/2020

Azure – Configure Management Locks – Prevent Accidental Deletion Of Core Resources

By Steve in Azure Security, Cloud & Datacenter Management, Cyber Security, Enterprise Security, Enterprise Security, Management Locks, Microsoft, Microsoft Azure Tag Accidental Deletion, Azure, Azure Security, Locks, Management Locks, Prevent Deletion, Read Only

Locking prevents the accidental deletion or modifying of critical resources. Example Azure Subscription, Resource Group, Network, Files, VMs. How to configure Management locks to prevent the accidental deletion of core…

22/05/2020

AZURE – Control Storage Access by Networks

By Steve in Azure Security, Cloud & Datacenter Management, Cyber Security, Enterprise Security, Enterprise Security, Microsoft, Microsoft Azure, Network Security, Networks, Storage Tag Access, Allow, Azure, Azure Security, Firewall, Network, Security, Storage, Storage Account

We have a storage account, "StorageV2 (general purpose v2)" and its can be accessed initially from all networks. We now want to restrict the storage access to an approved network…