https://www.gettothe.cloud/tag/security/Latest Security posts on GetToTheCloudHugoenTue, 27 Oct 2026 09:57:00 +0100https://www.gettothe.cloud/azure-virtual-desktop-security-alert-rules/Tue, 27 Oct 2026 09:57:00 +0100https://www.gettothe.cloud/azure-virtual-desktop-security-alert-rules/AzureAzure Virtual DesktopSecurityEvery control in this series is only real if something fires when it drifts. This post gives you twelve Azure Monitor alert rules as deployable Bicep, each mapped to a step in the attack chain, with the queries written out so you can test them before you trust them. Two ship deliberately disabled, and I explain…https://www.gettothe.cloud/azure-virtual-desktop-security-give-aways/Thu, 22 Oct 2026 10:00:00 +0200https://www.gettothe.cloud/azure-virtual-desktop-security-give-aways/AzureAzure Virtual DesktopSecurityPart I of a three-part series on securing Azure Virtual Desktop. The trust boundary, the attack chain, and the takeaways worth acting on before you touch a single setting.https://www.gettothe.cloud/azure-virtual-desktop-security-give-aways-part-ii/Thu, 22 Oct 2026 09:59:00 +0200https://www.gettothe.cloud/azure-virtual-desktop-security-give-aways-part-ii/AzureAzure Virtual DesktopSecurityPart II of the AVD security series – closing the identity and operating system gaps, from RBAC and Conditional Access through Trusted Launch, local admin, Defender and the image pipeline.https://www.gettothe.cloud/azure-virtual-desktop-security-give-aways-part-iii/Thu, 22 Oct 2026 09:58:00 +0200https://www.gettothe.cloud/azure-virtual-desktop-security-give-aways-part-iii/AzureAzure Virtual DesktopSecurityPart III of the AVD security series – the network path, the session boundary, profile data protection, and building detection that somebody actually reads.https://www.gettothe.cloud/azure-secure-azure-virtual-desktop-with-mfa-update/Thu, 13 Jun 2024 14:50:57 +0200https://www.gettothe.cloud/azure-secure-azure-virtual-desktop-with-mfa-update/AzureAzure Active DirectoryAzure Virtual DesktopCloudSecuritySince my last post in 2023 there is something changed. You are able to set SSO for Entra ID to login to Azure Virtual Desktop. If you have a Conditional Access Policy which is targeted to Azure Virtual Desktop, these changes are required before 26 June 2024.https://www.gettothe.cloud/azure-active-directory-cloud-only-administrative-accounts/Tue, 06 Jun 2023 09:00:00 +0200https://www.gettothe.cloud/azure-active-directory-cloud-only-administrative-accounts/Azure Active DirectoryCloudIdentitySecurityComing from an on-premises environment, it can be hard how to setup administrative accounts. On-premises was the default to have certain permissions. In Azure Active Directory that is a bit changed. This blog explains how to approach and why you should use Cloud-Only administrative accounts.https://www.gettothe.cloud/microsoft-entra-secure-azure-ad-tenant/Thu, 11 May 2023 08:00:00 +0200https://www.gettothe.cloud/microsoft-entra-secure-azure-ad-tenant/Azure Active DirectoryIdentitySecuritySecuring your Azure Active Directory is more needed than ever. Microsoft Entra is the new Admin center for this. Learn how to set it up and secure your tenant more.https://www.gettothe.cloud/azure-get-notified-when-break-glass-account-is-used/Thu, 04 May 2023 08:00:00 +0200https://www.gettothe.cloud/azure-get-notified-when-break-glass-account-is-used/AzureAzure Active DirectoryCloudIdentitySecurityA Break Glass Account is an emergency account that grants access to critical resources when regular credentials are unavailable. It plays a vital role in ensuring business continuity during a crisis and enables a response strategy for cybersecurity threats. Shared and privileged accounts are the two types of Break Glass Accounts, and their use must be controlled and monitored to avoid security …https://www.gettothe.cloud/azure-secure-azure-virtual-desktop-with-mfa/Tue, 18 Apr 2023 11:13:47 +0200https://www.gettothe.cloud/azure-secure-azure-virtual-desktop-with-mfa/AzureAzure Virtual DesktopIdentitySecurityLearn how to secure your Azure Virtual Desktop with conditional access and Azure MFA. Protect your organization from potential security attacks. Take steps now to create a powerful remote work environment for your users.https://www.gettothe.cloud/e-mail-mta-sts/Wed, 12 Apr 2023 16:12:39 +0200https://www.gettothe.cloud/e-mail-mta-sts/E-MailExchangeOnpremisesSecuritySecure email transmission is vital for everyone, and MTA-STS is here to solve the problem. Learn what MTA-STS is, how it works, and why domain should implement it now!https://www.gettothe.cloud/e-mail-security-setup-dmarc/Thu, 06 Apr 2023 12:38:20 +0200https://www.gettothe.cloud/e-mail-security-setup-dmarc/E-MailExchangeOnpremisesSecurityDMARC (Domain-based Message Authentication, Reporting, and Conformance) is a method of email authentication that builds upon the DKIM and SPF (Sender Policy Framework) protocols. DMARC allows domain owners to publish a policy in their DNS records that instructs email servers how to handle email messages that fail DKIM or SPF checks.https://www.gettothe.cloud/e-mail-security-setup-dkim/Thu, 06 Apr 2023 12:38:00 +0200https://www.gettothe.cloud/e-mail-security-setup-dkim/E-MailExchangeOnpremisesSecurityDKIM (DomainKeys Identified Mail) is a method of email authentication that uses public key cryptography to verify that an email message was sent by the legitimate sender and has not been modified in transit.https://www.gettothe.cloud/e-mail-security-setup-spf/Thu, 06 Apr 2023 12:37:34 +0200https://www.gettothe.cloud/e-mail-security-setup-spf/E-MailExchangeOnpremisesSecuritySPF (Sender Policy Framework) records is a standard to help your battle against spam. It is an email authentication standard that protects senders and recipients from spam, spoofing and phishing. By adding this record to your domain, you will provide a list of senders that are approved to send e-mail from your domain.https://www.gettothe.cloud/azure-active-directory-assessment-part-v/Sun, 05 Mar 2023 12:00:00 +0100https://www.gettothe.cloud/azure-active-directory-assessment-part-v/Azure Active DirectoryCloudIdentityMicrosoft Graph APIPowerShellIn this part we will get an export of the Conditional Access Policies and App Regsitrations and Enterprise Applications with there API permissions. Also the client secret or certificate information will be exported to get a good sight on it.https://www.gettothe.cloud/azure-active-directory-authentication-policies/Tue, 24 Jan 2023 09:19:51 +0100https://www.gettothe.cloud/azure-active-directory-authentication-policies/Azure Active DirectoryCloudIdentitySecuritySSPR and MFA policies are changing. Security levels must increase. Microsoft has announced that legacy multifactor authentication and self-service password reset policies will be deprecated in January 2024. The new Microsoft Entra Admin center will provide with a wizard to migrate the legacy policies to the new Authentication methods policies.