UPDATE Post: 27/10/2020 The featured picture here is taken from a enviroment I worked on, where attackers had compromised a set of publicly available servers in Azure trough a known vulnerability in Jenkins. Where the attackers got access to a public facing VM and then using root access got access to Read more…
One of the new features which has been introduced in preview now is Azure Monitor Log Analytics data export. This allows (As it’s being collected), data from selected tables in your Log Analytics workspace can be continuously exported to an Azure storage account hourly or to Azure Event Hubs in near-real-time. Read more…
One of the things I always consider when looking to solve a specific problem is what kind of tools is best suited for the job. Not always trying to push the same solution to every problem, issue or challenges that the customers are facing. A particular topic of this which Read more…
One of the cool things with Azure Active Directory is the risk indicators that can be collected into from different systems such as Identity Protection, Intune, Azure ATP and Defender ATP. With this information collected it means that systems that integrate into Conditional Access with Azure Active Directory can do Read more…
As part of the latest version of VMware Cloud Automation it does now support Terraform as a resource and allows you do map directly to TF files and runtime within VMware Cloud Automation. VMware Cloud Automation consists of three products. Cloud Assembly, Service Broker and Code Stream. For the purpose Read more…
For sometime Microsoft has had a feature called Continuous access evaluation in Preview as part of Azure Active Directory. Which allows Conditional Access Policies and User Changes be evaluated in realtime compared to the traditional lifetime of a token. Just to illustrate. When a client application like Outlook connects to a Read more…
When migrating from Active Directory to Azure Active Directory you move an essentially from a tree based structure where you might have multiple domains, forest and a large OU structure to more a flat tenant structure within Azure Active Directory. This means that a lot of the management capabilities needs Read more…
During Ignite Microsoft released a new set of Cloud integrations from Azure Defender to AWS and Google Cloud. This provides the following advantages when connecting Azure Defender to the different cloud providers. Automatic agent provisioning (Defender uses Azure Arc to deploy the Log Analytics agent to your AWS instances) (NOT Supported for Read more…
Microsoft tunnel is a new feature which was released during Microsoft Ignite 2020. Tunnel is a VPN gateway solution for Microsoft Intune. The tunnel allows access to on-premises resources from iOS/iPadOS and Android Enterprise devices using modern authentication and Conditional Access. As shown in the picture above, the service itself Read more…
With all the ransomware and crypto attacks that are happening these days, I do appriciate more and more the value of having backup of the data. Not just the backup of course, but also ensuring that we can easily restore data when something occurs, such as an company that gets Read more…