https://www.gettothe.cloud/category/security/Latest Security posts on GetToTheCloudHugoenTue, 27 Oct 2026 09:57:00 +0100https://www.gettothe.cloud/azure-virtual-desktop-security-alert-rules/Tue, 27 Oct 2026 09:57:00 +0100https://www.gettothe.cloud/azure-virtual-desktop-security-alert-rules/AzureAzure Virtual DesktopSecurityEvery control in this series is only real if something fires when it drifts. This post gives you twelve Azure Monitor alert rules as deployable Bicep, each mapped to a step in the attack chain, with the queries written out so you can test them before you trust them. Two ship deliberately disabled, and I explain…https://www.gettothe.cloud/azure-virtual-desktop-security-give-aways/Thu, 22 Oct 2026 10:00:00 +0200https://www.gettothe.cloud/azure-virtual-desktop-security-give-aways/AzureAzure Virtual DesktopSecurityPart I of a three-part series on securing Azure Virtual Desktop. The trust boundary, the attack chain, and the takeaways worth acting on before you touch a single setting.https://www.gettothe.cloud/azure-virtual-desktop-security-give-aways-part-ii/Thu, 22 Oct 2026 09:59:00 +0200https://www.gettothe.cloud/azure-virtual-desktop-security-give-aways-part-ii/AzureAzure Virtual DesktopSecurityPart II of the AVD security series – closing the identity and operating system gaps, from RBAC and Conditional Access through Trusted Launch, local admin, Defender and the image pipeline.https://www.gettothe.cloud/azure-virtual-desktop-security-give-aways-part-iii/Thu, 22 Oct 2026 09:58:00 +0200https://www.gettothe.cloud/azure-virtual-desktop-security-give-aways-part-iii/AzureAzure Virtual DesktopSecurityPart III of the AVD security series – the network path, the session boundary, profile data protection, and building detection that somebody actually reads.https://www.gettothe.cloud/azure-virtual-desktop-sessionhosts-monitoring/Wed, 26 Jun 2024 09:36:02 +0200https://www.gettothe.cloud/azure-virtual-desktop-sessionhosts-monitoring/AzureAzure Virtual DesktopSecurityAugust 31th 2024 the Log Analytics Agent will be deprecated. Replace it with the Azure Monitor Agent. Use this blog to get to know how and setup an Azure Policy to automate it for you.https://www.gettothe.cloud/azure-secure-azure-virtual-desktop-with-mfa-update/Thu, 13 Jun 2024 14:50:57 +0200https://www.gettothe.cloud/azure-secure-azure-virtual-desktop-with-mfa-update/AzureAzure Active DirectoryAzure Virtual DesktopCloudSecuritySince my last post in 2023 there is something changed. You are able to set SSO for Entra ID to login to Azure Virtual Desktop. If you have a Conditional Access Policy which is targeted to Azure Virtual Desktop, these changes are required before 26 June 2024.https://www.gettothe.cloud/azure-active-directory-cloud-only-administrative-accounts/Tue, 06 Jun 2023 09:00:00 +0200https://www.gettothe.cloud/azure-active-directory-cloud-only-administrative-accounts/Azure Active DirectoryCloudIdentitySecurityComing from an on-premises environment, it can be hard how to setup administrative accounts. On-premises was the default to have certain permissions. In Azure Active Directory that is a bit changed. This blog explains how to approach and why you should use Cloud-Only administrative accounts.https://www.gettothe.cloud/microsoft-entra-secure-azure-ad-tenant/Thu, 11 May 2023 08:00:00 +0200https://www.gettothe.cloud/microsoft-entra-secure-azure-ad-tenant/Azure Active DirectoryIdentitySecuritySecuring your Azure Active Directory is more needed than ever. Microsoft Entra is the new Admin center for this. Learn how to set it up and secure your tenant more.https://www.gettothe.cloud/azure-get-notified-when-break-glass-account-is-used/Thu, 04 May 2023 08:00:00 +0200https://www.gettothe.cloud/azure-get-notified-when-break-glass-account-is-used/AzureAzure Active DirectoryCloudIdentitySecurityA Break Glass Account is an emergency account that grants access to critical resources when regular credentials are unavailable. It plays a vital role in ensuring business continuity during a crisis and enables a response strategy for cybersecurity threats. Shared and privileged accounts are the two types of Break Glass Accounts, and their use must be controlled and monitored to avoid security …https://www.gettothe.cloud/azure-secure-azure-virtual-desktop-with-mfa/Tue, 18 Apr 2023 11:13:47 +0200https://www.gettothe.cloud/azure-secure-azure-virtual-desktop-with-mfa/AzureAzure Virtual DesktopIdentitySecurityLearn how to secure your Azure Virtual Desktop with conditional access and Azure MFA. Protect your organization from potential security attacks. Take steps now to create a powerful remote work environment for your users.https://www.gettothe.cloud/e-mail-mta-sts/Wed, 12 Apr 2023 16:12:39 +0200https://www.gettothe.cloud/e-mail-mta-sts/E-MailExchangeOnpremisesSecuritySecure email transmission is vital for everyone, and MTA-STS is here to solve the problem. Learn what MTA-STS is, how it works, and why domain should implement it now!https://www.gettothe.cloud/e-mail-security-setup-dmarc/Thu, 06 Apr 2023 12:38:20 +0200https://www.gettothe.cloud/e-mail-security-setup-dmarc/E-MailExchangeOnpremisesSecurityDMARC (Domain-based Message Authentication, Reporting, and Conformance) is a method of email authentication that builds upon the DKIM and SPF (Sender Policy Framework) protocols. DMARC allows domain owners to publish a policy in their DNS records that instructs email servers how to handle email messages that fail DKIM or SPF checks.https://www.gettothe.cloud/e-mail-security-setup-dkim/Thu, 06 Apr 2023 12:38:00 +0200https://www.gettothe.cloud/e-mail-security-setup-dkim/E-MailExchangeOnpremisesSecurityDKIM (DomainKeys Identified Mail) is a method of email authentication that uses public key cryptography to verify that an email message was sent by the legitimate sender and has not been modified in transit.https://www.gettothe.cloud/e-mail-security-setup-spf/Thu, 06 Apr 2023 12:37:34 +0200https://www.gettothe.cloud/e-mail-security-setup-spf/E-MailExchangeOnpremisesSecuritySPF (Sender Policy Framework) records is a standard to help your battle against spam. It is an email authentication standard that protects senders and recipients from spam, spoofing and phishing. By adding this record to your domain, you will provide a list of senders that are approved to send e-mail from your domain.https://www.gettothe.cloud/azure-active-directory-assessment-part-iii/Sat, 25 Feb 2023 12:00:00 +0100https://www.gettothe.cloud/azure-active-directory-assessment-part-iii/Azure Active DirectoryCloudIdentitySecurityStarting the assessment is to get all the users, groups and devices and their attributes.https://www.gettothe.cloud/azure-active-directory-assessment-part-ii/Fri, 24 Feb 2023 08:22:35 +0100https://www.gettothe.cloud/azure-active-directory-assessment-part-ii/Azure Active DirectoryCloudIdentitySecurityTo start the assessment, there is a need of an app registration with the correct permissions. Creating it through portal and with PowerShell and saving the connection details to an XML file.https://www.gettothe.cloud/azure-active-directory-assessment-part-i/Fri, 24 Feb 2023 08:22:02 +0100https://www.gettothe.cloud/azure-active-directory-assessment-part-i/Azure Active DirectoryCloudIdentitySecurityWith the use of Azure Active Directory and multiple administrator, the chance that it is going to be messy is big. To check if everything is correct created and managed, you can do an assessment.https://www.gettothe.cloud/azure-active-directory-cross-tenant-synchronization/Wed, 01 Feb 2023 09:30:36 +0100https://www.gettothe.cloud/azure-active-directory-cross-tenant-synchronization/Azure Active DirectoryIdentitySecurityThese days are more and more companies working in Azure Active Directory. They are using Azure AD Connect to synchronize those accounts from on-premises Active Directory to Azure Active Directory. When a company is acquiring a new company and they acquired company need to access the applications or data in the Target company, you could create guest users in Azure Active Directory for those users. …https://www.gettothe.cloud/azure-active-directory-authentication-policies/Tue, 24 Jan 2023 09:19:51 +0100https://www.gettothe.cloud/azure-active-directory-authentication-policies/Azure Active DirectoryCloudIdentitySecuritySSPR and MFA policies are changing. Security levels must increase. Microsoft has announced that legacy multifactor authentication and self-service password reset policies will be deprecated in January 2024. The new Microsoft Entra Admin center will provide with a wizard to migrate the legacy policies to the new Authentication methods policies.