As part of the new annoucements from Microsoft Ignite, Microsoft now launched the ability to create Conditional Access Policies using the Graph API which is now available under the beta API. The simplest way to get started with the Graph API is using the Graph Explorer https://developer.microsoft.com/en-us/graph/graph-explorer# in sign-in with a user account which has global admin […]

As part of the announcements from Ignite, Microsoft now released a public preview of the native Azure AD authentication on VPN Gateway. Up until now it has been either that you use a certificate based authentication or using RADIUS. Which has been a difficult sell since many VPN 3.party providers do pretty well the authentication

A couple of months back I wrote an article about building VDI Solutions in Microsoft Azure https://msandbu.org/building-vdi-solutions-in-azure-what-options-do-we-have/ and last week I was speaking about Windows Virtual Desktop at an event at Microsoft Norway, where my sessions is about our experience with Windows Virtual Desktop. Now my previous blogpost didn’t emphaize to much on WVD to I wanted to

Last week I had a webinar about “Catching the bad guys using Azure Sentinel”, where one of my slides I mentioned about how you should design a Azure Sentinel solution which I wanted to cover more in depth here in this blogpost.  Now the basic thing you need to understand is that Sentinel is a

There has been a lot of fuzz around DNS over HTTPs shortnamed (DOH) lately. For those that haven’t read about what is going on or what DoH is, you can read more on Mozilla’s blogpost here about the subject –> https://hacks.mozilla.org/2018/05/a-cartoon-intro-to-dns-over-https/ and also Google’s approach here –>  https://security.googleblog.com/2019/06/google-public-dns-over-https-doh.html DOH as a protocol has already been rolled out

Zero-trust is something I’ve talked about and heard many vendors talk about for many years already. These days vendors are using this as leverage to sell their products to “Implement Zero-Trust based networks” therefore I wanted to use this blog post as a way for myself to dig deeper into Zero-Trust and its core design principles,

One of the best pratices that have been defined for Log Analytics in Azure is to have a few workspaces as possible. Now with the introduction of Azure Sentinel as well, there more sentralized set of logs you have the easier it is to build hunting queries and such in the data that is ingested.