Archive 22/05/2020

22/05/2020

Azure – Log Analytics Workspace and AzureVirtual Machine Agent Install

By Steve in Azure Security, Cloud & Datacenter Management, Cloud Security, Cyber Security, Enterprise Security, Enterprise Security, Logs, Microsoft, Microsoft Azure Tag Analytics, Azure, Azure Security, Collect, Event Logs, Log, Logs, Security Logs, Virtual Machines, Windows, Workspace

How to prepare to collect security log data from your Azure Windows virtual machines. You require two things: Log Analystics Workspace to be created The agent to be installed on…

22/05/2020

Azure – Access Control and Role Assignment

By Steve in Azure AD, Azure Security, Cloud & Datacenter Management, Cloud Security, Cyber Security, Enterprise Security, Enterprise Security, Hot Wired IT Solutions, IAM, Microsoft, Microsoft Azure, Roles, Users and Groups Tag Access Management, Admin Tasks, Administrator, Assignment, Azure Security, IAM, Resource Group, Roles, Virtual Machine

This example shows how to assign a user/group a role to admin virtual machines in a resource group. How to steps.. Select "Resource Group" > IAM > Add > Select…

22/05/2020

Azure – Configure Management Locks – Prevent Accidental Deletion Of Core Resources

By Steve in Azure Security, Cloud & Datacenter Management, Cyber Security, Enterprise Security, Enterprise Security, Management Locks, Microsoft, Microsoft Azure Tag Accidental Deletion, Azure, Azure Security, Locks, Management Locks, Prevent Deletion, Read Only

Locking prevents the accidental deletion or modifying of critical resources. Example Azure Subscription, Resource Group, Network, Files, VMs. How to configure Management locks to prevent the accidental deletion of core…

22/05/2020

Simple SQL Injection Example – Review Security and Remediate

By Steve in Azure Security, Cloud & Datacenter Management, Cloud Security, Cyber Security, Enterprise Security, Enterprise Security, Ethical Hacking, Microsoft, SQL Injection Tag #Monitoring, Access Denied, ATP, Azure Security, Firewall, Forbidden Access, Select *, Special Characters, SQL Injection, WordPress

Something I regularly do, is review security against attacks and remediate if required. This example is a simple SQL injection attack. There is a few things in addition to code…

22/05/2020

AZURE – Control Storage Access by Networks

By Steve in Azure Security, Cloud & Datacenter Management, Cyber Security, Enterprise Security, Enterprise Security, Microsoft, Microsoft Azure, Network Security, Networks, Storage Tag Access, Allow, Azure, Azure Security, Firewall, Network, Security, Storage, Storage Account

We have a storage account, "StorageV2 (general purpose v2)" and its can be accessed initially from all networks. We now want to restrict the storage access to an approved network…

21/05/2020

Azure – Update Management

By Steve in Azure Security, Cloud & Datacenter Management, Cyber Security, Enterprise Security, Enterprise Security, Logs, Microsoft, Microsoft Azure, Microsoft Server 2016, Microsoft Windows Server 2008, Microsoft Windows Server 2012, Update Management, WSUS Tag Azure, Azure Security, Linux, Patch Management, Update Management, Virtual Machines, Windows, Windows Updates

How to maintain the patch status of your Windows and Linux machines "You can use Update Management in Azure Automation to manage operating system updates for your Windows and Linux…

21/05/2020

Azure – Monitoring Alert On Virtual Machine CPU Usage

By Steve in Alerts, Azure Monitor, Azure Security, Cloud & Datacenter Management, Cyber Security, Enterprise Security, Enterprise Security, Microsoft, Microsoft Azure, Microsoft Windows 10, Rules Tag Action Group, Alert Admin, Alert Logic, Alerts, Azure Security, CPU, Notifications, Spikes, Virtual Machine

Create a monitoring alert on virtual machine CPU spike/usage. Prep work you will need a virtual machine to monitor. An action group set to send emails to admins For this…

21/05/2020

Azure – Register An Application in AD and Generate App Password

By Steve in Active Directory, Azure AD, Azure Security, Cloud & Datacenter Management, Cyber Security, Developer Technologies, DevOps, Enterprise Security, Enterprise Security, Microsoft, Microsoft Azure Tag AD, App Password, App Registration, Authentication, Azure AD, Azure Security, Client Secret, Client Secrets

How to guide, in Azure register an application in AD and generate app password In the Azure portal, browse to Azure Active Directory > App Registrations New Registration Enter Application…

20/05/2020

Azure – Activity Log

By Steve in Azure Security, Cloud & Datacenter Management, Cyber Security, Enterprise Security, Enterprise Security, Logs, Microsoft, Microsoft Azure Tag Activity, Activity Log, Azure, Azure Security, CSV, Diagnostics, Export, Filter, Log, Logs, Name, Operation, Status, Subscription, Time

Example of what you can see in an Azure Activity Log Event Initiated by Subscription Operation Status Time

20/05/2020

Azure – Route Tables – How To Force Traffic Down A Specific Route

By Steve in Azure Security, Cloud & Datacenter Management, Cyber Security, Enterprise Security, Enterprise Security, Microsoft, Microsoft Azure, Networks Tag Azure, Azure Security, Default, Internet, Overider, Route, Routes, Routing, Traffic, Web Traffic

"Create a route table when you need to override Azure's default routing." Why? To force internet traffic via the on-prem network Route via a NGFW (Next Generation Fire Wall) Scenario…