Integration Azure Defender with Google Cloud and AWS and Cloud Security Posture Management systems

During Ignite Microsoft released a new set of Cloud integrations from Azure Defender to AWS and Google Cloud. This provides the following advantages when connecting Azure Defender to the different cloud providers. Automatic agent provisioning (Defender uses Azure Arc to deploy the Log Analytics agent to your AWS instances) (NOT Supported for Google Cloud yet) Policy management […]

Integration Azure Defender with Google Cloud and AWS and Cloud Security Posture Management systems Read More »

Audit Log Analytics history

As part of Microsoft Ignite, Microsoft announced a new feature to provide insight into what kind of queries are being run within a Log Analytics workspace. Log Analytics is a centralized log service which can collect audit/log data from many sources, including like Office 365, Azure AD , OS based logs in addition PaaS Services

Audit Log Analytics history Read More »

Nutanix Clusters vs VMware on Azure?

I’ve previosly written about VMware on Azure using the Cloudsimple deployment https://msandbu.org/building-vmware-on-public-cloud-or-using-cloud-native/ where the cloudsimple solution is using a set of (dedicated hosts maximum 16) bare-metal servers in Azure to provide a VMware validated design setup within Microsoft Azure datasenter. The VMware solution is essentially running as its own ecossystem within Microsoft’s datacenters. Management of the VMware

Nutanix Clusters vs VMware on Azure? Read More »

Protection against Ransomware Attacks, Credential Stuffing and Password Spray Attacks

Lately there have been more and more ransomware attacks, where companies are faced with their systems and data becoming encrypted, and forcing them to pay a ransom to get access back to their data. A couple of weeks ago I started to subscribe to https://shadowintelligence.io/ feed just to see how many companies that are getting affected

Protection against Ransomware Attacks, Credential Stuffing and Password Spray Attacks Read More »

Using Cloudflare Access to protect WordPress Admin sites

If you are hosting a blog like me, you can use Cloudflare to protect and accelerate your website which I have described here –> https://msandbu.org/moved-my-blog-to-cloudflare/ that means that front-end traffic is handled by Cloudflare and then to my origin site. Cloudflare recently introduced a new feature called Cloudflare access which allows you to securely publish web sites/applications

Using Cloudflare Access to protect WordPress Admin sites Read More »

Automation Azure Sentinel and Terraform

In a previous blog post (https://msandbu.org/automating-azure-sentinel-deployment-using-terraform-and-powershell/)  I wrote how about you can use Terraform to automate the setup of Azure Sentinel and Log Analytics. The issue back then, was that you couldn’t automate Sentinel Analytics rules which you still needed to maintain using a third-party PowerShell module. NOTE: I’m working on publishing a Terraform module

Automation Azure Sentinel and Terraform Read More »

Scroll to Top