Kategori: Ukategorisert
-
Learning PowerShell with GitHub Copilot: Building a Hub–Spoke Networking Test

I wanted a project that would ensure that I keep my PowerShell skills and continued to learn new stuff. I chose to build a hub–spoke networking test with an Azure Firewall in the middle. It was complex enough to be interesting and a topic that I’m very familiar with. My PowerShell skills are somewhere in…
-
Deploy Maester with Terraform: A Simple Guide

Maester is a PowerShell-based framework for automating security testing within Microsoft environments, developed by Merill Fernando, Faben Bader, and Thomas Naunheim. This blog post discusses an easy approach to deploying Maester using Terraform for managing Microsoft tenant security settings. The configuration enables monthly security checks and email notifications for any issues. The tool is set…
-
Mastering Azure Virtual Network Manager for Security and Efficiency

The Azure Virtual Network Manager (AVNM) transforms the task of altering network infrastructure into a simplified process. It enables users to configure network topologies, change hubs, and implement security rules efficiently. The interface allows for quick modifications. AVNM manages security admin rules centrally, ensuring network owners cannot override them. Additionally, it deploys User-Defined Routes (UDR)…
-
Staying Updated on Tech: My Weekly Tools

I often get asked how to stay updated on major tech updates. The simple answer is you can’t. It’s not possible to stay updated on all areas all the time. You need to focus on areas that interest you the most and use some effective tools. Tools I use the following tools every week: For…
-
Azure Virtual WAN: Personal Experiences and Key Considerations

Are you intrigued by Azure Virtual WAN? If so, continue reading. I’ve been working with this technology for several months and I’m eager to share my firsthand experiences from multiple implementations. However, before you delve deeper, please note that this article will not delve into the intricate details of how routing works internally within Azure…
-
Analyzing User Privileges in Azure based on activity

Maintaining control over users with directory roles is a challenge in itself. However, a more informed approach involves examining their usage based on activity logs. This provides a comprehensive view of how these roles are being utilized by the respective users. Executing this script offers an overview of the users and their activities over the…
-
Empowering user workflow with Entra ID Lifecycle Workflow (LCW)

TLDR; Microsoft Entra ID, previously Azure AD, has introduced a new feature called Lifecycle Management. This tool automates user lifecycle management tasks, allows customization of workflow templates, and integrates with external systems. It also provides audit logs, workflow history, and reporting features for monitoring and troubleshooting. When combined with Access Packages, Lifecycle Workflows (LCW) can…
-
Increase your security in Azure DevOps

This past week, a lot of crucial updates were released for Azure DevOps, aimed at enhancing security. In this blog post, we’ll explore how these new features can be implemented to improve the security in your Azure DevOps project. This will be a concise guide, demonstrating how you can quickly and efficiently implement these security…
-
Ensuring Success with Azure VPN: Verification Elements for Hub-Spoke Topology

Introduction If you’re working with Azure VPN, you may have encountered some challenges or issues when configuring your network. In this article, we’ll go over a checklist of important elements to verify when working with Azure VPN in a hub-spoke topology. This information can save you time and help ensure that your configuration is correct.…
-
Protecting Your Organization’s Resources with Microsoft Entra’s (Azure AD’s) Powerful Tools

In today’s digital age, protecting your organization’s resources is more important than ever. With the rise of cyber threats and data breaches, it’s crucial to have the right tools in place to manage access and enforce security policies. Microsoft Entra ID (Azure Active Directory (Azure AD)) offers a range of powerful features to help you…
-
Tips and tricks when using the ALZ terraform module

I have been playing around with the terraform module from Microsoft for the Azure Landing Zone (ALZ) for some time now. It is one of the technical implementation option for the ALZ under the CAF framework. While the module offers commendable features, its utilization and reverse engineering process can be intricate at time. I have…