Tag
31 posts
Every control in this series is only real if something fires when it drifts. This post gives you twelve Azure Monitor alert rules as deployable Bicep, each mapped to a step in the attack chain, with the queries written out so you can test them before you trust …
Part I of a three-part series on securing Azure Virtual Desktop. The trust boundary, the attack chain, and the takeaways worth acting on before you touch a single setting.
Part II of the AVD security series – closing the identity and operating system gaps, from RBAC and Conditional Access through Trusted Launch, local admin, Defender and the image pipeline.
Part III of the AVD security series – the network path, the session boundary, profile data protection, and building detection that somebody actually reads.
The 2024 post made sure the data was there. This one makes it useful. A free Azure Monitor workbook for AVD session hosts with seven tabs, a supplemental Data Collection Rule in Bicep, the KQL behind …
As AVD environments grow, documentation often falls behind—becoming outdated, incomplete, or missing entirely. Documenter for Azure Virtual Desktop solves this by automatically inventorying your AVD …
This DevOps pipeline automates the replication of images from the Azure Compute Gallery to Azure Local. It validates the environment, imports the latest image version, cleans up temporary resources, …
This DevOps pipeline automates the full lifecycle of images in an Azure Local environment. It analyzes existing versions, applies retention rules, and identifies outdated images for cleanup. Temporary …
Using Azure Compute Gallery simplifies managing and distributing standardized VM images across hybrid environments. By leveraging centrally curated, versioned images, organizations can seamlessly copy …
FSLogix simplifies user profile management for Azure Virtual Desktop by storing profiles in VHD(X) containers, ensuring fast logins and consistent experiences across sessions. By redirecting profiles …
Alex ter Neuzen