Last week I had a webinar about “Catching the bad guys using Azure Sentinel”, where one of my slides I mentioned about how you should design a Azure Sentinel solution which I wanted to cover more in depth here in this blogpost. Now the basic thing you need to understand is that Sentinel is a […]
Designing an Azure Sentinel Solution Read More »
There has been a lot of fuzz around DNS over HTTPs shortnamed (DOH) lately. For those that haven’t read about what is going on or what DoH is, you can read more on Mozilla’s blogpost here about the subject –> https://hacks.mozilla.org/2018/05/a-cartoon-intro-to-dns-over-https/ and also Google’s approach here –> https://security.googleblog.com/2019/06/google-public-dns-over-https-doh.html DOH as a protocol has already been rolled out
DNS over HTTPS is coming, that’s a good thing right? Read More »
Zero-trust is something I’ve talked about and heard many vendors talk about for many years already. These days vendors are using this as leverage to sell their products to “Implement Zero-Trust based networks” therefore I wanted to use this blog post as a way for myself to dig deeper into Zero-Trust and its core design principles,
Demystify Zero-trust design – Never trust, always verify Read More »
One of the best pratices that have been defined for Log Analytics in Azure is to have a few workspaces as possible. Now with the introduction of Azure Sentinel as well, there more sentralized set of logs you have the easier it is to build hunting queries and such in the data that is ingested.
Changing log retention on a specific table in Log Analytics Read More »
I always love this comic strip from XKCD when it comes to generate a strong password. We are prone to choose simple solutions and taking shortcuts to make it easier for ourselves. Especially this time and day where we have many many many online services that we use on a daily basis. Of course having
October Security Awareness Month – Post 4 – How Secure is my password? Read More »
This is a topic which I’ve spent many hours on before working on with different customer sites, how can we enhance the security on our public facing web services or web sites? For me personally it was not so much on what could be done on the application or service from code perspective which was
October Security Awareness Month – Post 3 – How Secure is actually a website? Read More »
Windows Virtual Desktop is now generally available! from the evolution of RDMi and now to Windows Virtual Desktop has been an interesting journey in how Microsoft has now converted the RDS components into PaaS services which they are now provinding in combination with Windows 10 Multi-user and a pretty good licensing model makes this an
Windows Virtual Desktop – breakdown of architecture and current status Read More »
As a follow-up of yesterday’s post where I discussed different methods that you can use to verify the authenticity of a website, a second questions comes up is there a way to protect yourself without checking the website itself? Since most of these websites are based upon scamming people, some sites are also setup in
October Security Awareness Month – Post 2- How to protect against phising domains Read More »
October is Security Awareness Month! Since I started my career in the IT industry about 15 years ago, much have changed in the IT industry. Much of the knowledge and competency that I’ve gained is much thanks to the IT community, where many are sharing knowledge and information. As part of this I wanted to
October Security Awareness Month – Post 1- How to see if a website is secure Read More »
On friday I had one of the sessions at Virtualexpo, where I talked about Microsoft Azure Sentinel and Microsoft Defender ATP and how these are important tools as part of a security foundation, especially if your enterprise has Windows 10 and cloud based services from Microsoft. You can view the slidedeck that I used during
Azure Sentinel and Defender ATP Webinar Read More »
