New video: Defender for Containers - Demo in a Multi-Cloud Environment Lab
“Defender for Containers” is the plan in Microsoft Defender for Cloud protecting Kubernetes clusters running on premises or in the cloud.
Posts by Year
2022
Security Posture for Azure Key Vault Managed HSM with Azure Policies
In my previous blog post I described how to monitor, from a security perspective, the events occurring on an Azure Key Vault Managed HSM (Hardware Security M...
Security Monitoring Azure Key Vault Managed HSM with Microsoft Sentinel
Azure Key Vault Managed HSM (Hardware Security Module) - in the rest of this post abbreviated as MHSM - is a fully managed, highly available, single-tenant, ...
New video: Microsoft Defender for IoT raw data in Microsoft Sentinel
Microsoft Sentinel has a specific Data Connector which allows to collect the alerts comining from Microsoft Defender for IoT. This data ingestion is free of ...
How to estimate the cost of Microsoft 365 Defender raw data ingestion in Microsoft Sentinel
Recently a few customers asked me to estimate the increase of costs that they would see by enabling “raw data” (Advanced Hunting data) ingestion from Microso...
How to verify the effective use of Customer Managed Keys
All customers data in Azure is encrypted “at rest” on the Microsoft datacenters. By default, the keys used in the cryptographic operations are totally manage...
How to call Microsoft 365 Defender API from a Logic App
Recently I needed to create an automation for executing periodically a specific Kusto query against the Advanced Hunting tables of Microsoft Defender for Ide...
How to get notified for new users added as Domain Admins
Recently, I read this interesting official blog post: Track changes to sensitive groups with Advanced Hunting in Microsoft 365 Defender: it clearly explains ...