msandbu

This is a study guide for the latest Azure exam, Exam AZ-500: Microsoft Azure Security Technologies. You can read more about the xam here –> https://www.microsoft.com/en-us/learning/exam-az-500.aspx by pasing this exam you get the certification (Microsoft Certified: Azure Security Engineer Associate) Manage identity and access (20-25%) Configure Microsoft Azure Active Directory for workloads create App registration (https://docs.microsoft.com/en-us/azure/active-directory/develop/howto-create-service-principal-portal) configure App …

Microsoft Azure Security Technologies AZ-500 Study Guide Read More »

Earlier this week  I wrote about the Norwegian Company Hydro which was affected by ransom and needed to shutdown most of their operations. The ransomware was most likely distributed using Active Directory with Group Policy so it could spread across the organization –> https://msandbu.org/norwegian-hydro-affected-by-ransomware-attack-lockergoga/ also Kevin Beaumont wrote an extensive article on the subject as well –> https://doublepulsar.com/how-lockergoga-took-down-hydro-ransomware-used-in-targeted-attacks-aimed-at-big-business-c666551f5880 So …

Ransomware and moving to Azure AD based Clients Read More »

There has been a lot of great information now the last couple of days regarding Windows Virtual Desktop like the blog post from Bas here –> https://www.basvankaam.com/2019/03/19/the-windows-virtual-desktop-what-we-know-so-far-its-more-than-you-think-65-facts-listed/ still there is some questions that also remained unanswered yet as part of what they are building as part of it. However there is still some information that I wish …

Windows Virtual Desktop in Prevew – What you need to think about! Read More »

With more and more organizations moving towards multi-cloud approach, it often requires some changes in our toolbox to ensure security, governance and compliance across different cloud providers. Within this market there is also a growing set of vendors which want to provide this cross-cloud security ecosystem, such as some I’ve written about previously such as …

Palo Alto Redlock and Public Cloud Threat Defense Read More »

Today Microsoft released Azure Sentinel, a SIEM service running in the Cloud. Now looking at Sentinel is it not a completely new service it is built upon a lot of existing services in Azure such as Security Center, Log Analytics workspace which is being used to query and structure the data underneath. Still it brings …

Cloud SIEM with Azure Sentinel Read More »

As I’m writing this it should be noted that the feature itself is still in preview. Azure files has been an awesome feature that provides SMB 3 based file share to both internet based clients but also Virtual Machines running in Microsoft Azure. Azure Files has up until now has some limitations when it comes …

Getting started with Azure AD Auth with Azure Files Read More »