Opinions, tips, and news orbiting Microsoft
Following on from the announcement in 2020 of Azure Resource Mover I’m pleased to release another episode of Azure Unblogged, where I am chatting to Kaza Sriram, Senior Program Manager on the Azure Resource Mover team.
Kaza walked me … Continue reading Azure Unblogged – Azure Resource Mover
Updated 01/20/2021
We recently had a case escalation and wanted to provide a few more details on a Windows 10 certificate issue. Windows has documented the behavior and resolution. There’s been additional blog posts describing this scenario by s… Continue reading Intune MDM enrollment certificate not present after updating to a newer version of Windows
Azure Sentinel provides multiple ways to import threat intelligence into the product. The threat intelligence imported into Azure Sentinel makes it to the ThreatIntelligenceIndicator log analytics table and is also made available on the Threat Intellig… Continue reading Bring Threat Intelligence from IntSights Using TAXII Data Connector
If you ingest over 1Tb per day into your Azure Sentinel workspace and/or have multiple Azure Sentinel workspaces in your Azure enrolment, you may want to consider migrating to a dedicated cluster, a recent addition to the deployment options for Azure S… Continue reading What’s new: Dedicated clusters for Azure Sentinel
Win32 APIs provide powerful functionality that let you get the most out of Windows in your applications. While these APIs are readily accessible to C and C++ developers, other languages like C# and Rust require wrappers or bindi
The post Making Win32 APIs More Accessible to More Languages appeared first on Windows Blog.
Continue reading Making Win32 APIs More Accessible to More Languages
One missing link in the complex Solorigate attack chain is the handover from the Solorigate DLL backdoor to the Cobalt Strike loader. How exactly does the jump from the Solorigate backdoor (SUNBURST) to the Cobalt Strike loader (TEARDROP, Raindrop, and… Continue reading Deep dive into the Solorigate second-stage activation: From SUNBURST to TEARDROP and Raindrop
MSTIC has released a number of new hunting and detection queries for Azure Sentinel based on additional observations as well as research released by partners and the wider community. In addition, the SolarWinds post compromise hunting workbook has been… Continue reading SolarWinds Post-Compromise Hunting with Azure Sentinel
There is a growing need for virtual meetings, consults, and appointments but also an increase in the amount of time people are dedicating to try to schedule those appointments. Back and forth phone calls, emails, text messages. Bookings can make it eas… Continue reading Best Practices Using Microsoft Bookings on Solutions Demanding Large Volumes