msandbu, Author at msandbu.org

Microsoft Azure coming to Sweden and Denmark

(Yes Denmark datacenters are missing from the picture currently 🙂 Last week, Microsoft published a press release stating that they in 2021 will go live with two datacenters in Sweden (https://news.microsoft.com/europe/2020/11/24/microsoft-announces-investments-to-accelerate-swedens-digital-transformation-and-plans-to-open-its-sustainable-datacenter-region-in-2021/) and then today announced that they will be opening datacenters in Denmark as well. This means that Microsoft will be providing cloud-based services such as Microsoft Azure, Microsoft 365 and Dynamics 365 from datacenters on Swedish […]

Microsoft Azure coming to Sweden and Denmark Read More »

What is AIOps and why should I care?

A lot of buzz these days from Gartner and many of the cloud providers and even now the APM vendors as well is pushing into the market. To be honest it took me some time to understand what AIOps actually was and what kind of capabilities it part of the definition, so therefore I wanted

What is AIOps and why should I care? Read More »

Protection and Countermeasures Against Ransomware Attacks

UPDATE Post: 05/05/2020 The featured picture here is taken from an environment I worked on, where attackers had compromised a set of publicly available servers in Azure through a known vulnerability in Jenkins. Where the attackers got access to a public-facing VM and then using root access got access to the other servers in the same

Protection and Countermeasures Against Ransomware Attacks Read More »

Azure Log Analytics Data Export

One of the new features which has been introduced in preview now is Azure Monitor Log Analytics data export. This allows (As it’s being collected), data from selected tables in your Log Analytics workspace can be continuously exported to an Azure storage account hourly or to Azure Event Hubs in near-real-time. So instead of defining that

Azure Log Analytics Data Export Read More »

Windows Virtual Desktop Traffic Flow and GPU Workloads

One of the things I always consider when looking to solve a specific problem is what kind of tools is best suited for the job. Not always trying to push the same solution to every problem, issue or challenges that the customers are facing. A particular topic of this which comes up everynow and then

Windows Virtual Desktop Traffic Flow and GPU Workloads Read More »

Zero-trust with Cloudflare Access and Azure Active Directory

One of the cool things with Azure Active Directory is the risk indicators that can be collected into from different systems such as Identity Protection, Intune, Azure ATP and Defender ATP. With this information collected it means that systems that integrate into Conditional Access with Azure Active Directory can do real-time checks before users are

Zero-trust with Cloudflare Access and Azure Active Directory Read More »

Running Terraform as part of VMware Cloud Automation

As part of the latest version of VMware Cloud Automation it does now support Terraform as a resource and allows you do map directly to TF files and runtime within VMware Cloud Automation. VMware Cloud Automation consists of three products. Cloud Assembly, Service Broker and Code Stream. For the purpose of setting up Terraform Integration

Running Terraform as part of VMware Cloud Automation Read More »

Continuous access evaluation with Azure Active Directory

For sometime Microsoft has had a feature called Continuous access evaluation in Preview as part of Azure Active Directory. Which allows Conditional Access Policies and User Changes be evaluated in realtime compared to the traditional lifetime of a token. Just to illustrate. When a client application like Outlook connects to a service like Exchange Online, the

Continuous access evaluation with Azure Active Directory Read More »

Azure Administrative Units and MyStaff for delegated management

When migrating from Active Directory to Azure Active Directory you move an essentially from a tree based structure where you might have multiple domains, forest and a large OU structure to more a flat tenant structure within Azure Active Directory. This means that a lot of the management capabilities needs to change on how you

Azure Administrative Units and MyStaff for delegated management Read More »

Integration Azure Defender with Google Cloud and AWS and Cloud Security Posture Management systems

During Ignite Microsoft released a new set of Cloud integrations from Azure Defender to AWS and Google Cloud. This provides the following advantages when connecting Azure Defender to the different cloud providers. Automatic agent provisioning (Defender uses Azure Arc to deploy the Log Analytics agent to your AWS instances) (NOT Supported for Google Cloud yet) Policy management

Integration Azure Defender with Google Cloud and AWS and Cloud Security Posture Management systems Read More »