Tag
15 posts
Every control in this series is only real if something fires when it drifts. This post gives you twelve Azure Monitor alert rules as deployable Bicep, each mapped to a step in the attack chain, with the queries written out so you can test them before you trust …
Part I of a three-part series on securing Azure Virtual Desktop. The trust boundary, the attack chain, and the takeaways worth acting on before you touch a single setting.
Part II of the AVD security series – closing the identity and operating system gaps, from RBAC and Conditional Access through Trusted Launch, local admin, Defender and the image pipeline.
Part III of the AVD security series – the network path, the session boundary, profile data protection, and building detection that somebody actually reads.
Since my last post in 2023 there is something changed. You are able to set SSO for Entra ID to login to Azure Virtual Desktop. If you have a Conditional Access Policy which is targeted to Azure …
Coming from an on-premises environment, it can be hard how to setup administrative accounts. On-premises was the default to have certain permissions. In Azure Active Directory that is a bit changed. …
Securing your Azure Active Directory is more needed than ever. Microsoft Entra is the new Admin center for this. Learn how to set it up and secure your tenant more.
A Break Glass Account is an emergency account that grants access to critical resources when regular credentials are unavailable. It plays a vital role in ensuring business continuity during a crisis …
Learn how to secure your Azure Virtual Desktop with conditional access and Azure MFA. Protect your organization from potential security attacks. Take steps now to create a powerful remote work …
Secure email transmission is vital for everyone, and MTA-STS is here to solve the problem. Learn what MTA-STS is, how it works, and why domain should implement it now!
Alex ter Neuzen