Every control in this series is only real if something fires when it drifts. This post gives you twelve Azure Monitor alert rules as deployable Bicep, each mapped to a step in the attack chain, with the queries written out so you can test them before you trust …
Azure Local 2610 brings practical improvements to cluster servicing, security management and SAN deployments. Operators get combined OS and OEM updates, a clearer solution health summary and more …
Part I of a three-part series on securing Azure Virtual Desktop. The trust boundary, the attack chain, and the takeaways worth acting on before you touch a single setting.
Part II of the AVD security series – closing the identity and operating system gaps, from RBAC and Conditional Access through Trusted Launch, local admin, Defender and the image pipeline.
Part III of the AVD security series – the network path, the session boundary, profile data protection, and building detection that somebody actually reads.
The 2024 post made sure the data was there. This one makes it useful. A free Azure Monitor workbook for AVD session hosts with seven tabs, a supplemental Data Collection Rule in Bicep, the KQL behind …
Microsoft has shipped Azure Local 2609 (solution version 12.2609.1003.7, OS build 26100.33438). It is a maintenance release: reliability fixes, refreshed .NET and PowerShell, and new private path …
Azure Local Day 2 operations: a free Azure Monitor workbook for CPU, memory, storage, host balance and VM density, plus the DCR and KQL to validate it.
Azure Local automatically deploys the Azure Resource Bridge (ARB) with 8 GB of memory, but is that really enough for production? In this article, I explore the often-overlooked control plane VM at the …
The August 2026 release of Azure Local (version 12.2608.1003.8) updates the platform base to OS build 26100.33296 and delivers practical administrative updates for day-two operations. Key capabilities …
Alex ter Neuzen