Azure Archives | Ammar Hasayen

P1: Microsoft Defender for Endpoint – Archit...

Cloud Reference Architecture – Virtual Data ...

Azure Advanced Threat Protection or Azure ATP

Microsoft Defender API

Learn how to access valuable insights from Microsoft Defender for Endpoint using the documented Microsoft Defender API and automate workflows beyond just simple administration.

Microsoft Defender – Indicator of Compromise IOC

n this blog post, we are going to talk about extending the Microsoft Defender for Endpoint detection Indicator of Compromise IOC. Mainly we are going to talk about the product’s prevention capabilities with additional external source of information. What if you want to block a specific IP address or a suspicious file as a result of investigating an attack you were investigating recently?

P7: Microsoft Defender Device Groups

assign right security controls. Device Groups are must to have and failing to configure them properly puts your deployment at risk.

P6: Microsoft Defender Endpoint Detection & Response (EDR)

Let’s link this blog post with the previous one (Next Generation Protection with Microsoft...

P5: Microsoft Defender Antivirus Internal Mechanics

Learn about the hidden components of Microsoft Defender Antivirus or Next Generation Protection, and How it works better with Microsoft Defender for Endpoint. Might be confusing at first, but I will help you figure it out. Read more here…

P4: MS Defender for Endpoint – Attack Surface Reduction ASR

Microsoft Defender for Endpoint Attack Surface Reduction or ASR for short is all about prevention and endpoint hardening. It is hardening the places where a threat is likely to attack and closing the gaps to reduce the risks. In fact, you can consider ASR as some sort of Host Intrusion Prevention System (HIPS).

P3: MS Defender for Endpoint – Threat and Vulnerability Management (TVM)

In the blog post you get introduced to the threat and vulnerability management capabilities in Microsoft Defender for Endpoint and how it helps you increase your security posture and remediate risks by following security recommendations with dynamic threat and business context.

P2: MS Defender for Security Strategy & Role of AI

Machine learning and AI 9supervised and unsupervised models) play big role in the Microsoft Defender for Endpoint security story. However, we should pause and think about our overall security strategy. Read more about MS defender for endpoint machine learning

P1: Microsoft Defender for Endpoint – Architecture

Deep Dive into the Microsoft Defender for Endpoint Architecture and internal mechanics. Lean how the product thinks and breathe and master the dark art of Microsoft security

Cloud Reference Architecture – Virtual Data Center (VDC)

The Virtual Data Center VDC is part of any Cloud Reference Architecture CRA and promotes for a balance between governance and developer agility, separation of duties and more. In this blog, you learn why to architect your data center in Azure with best practices and recommendation from Cloud Security Alliance CSA. Read more..

Cloud Reference Architecture CRA P3 – Enterprise Structure

The CRA Enterprise Structure: Learn how to drive your organizational financial accountability in the cloud by carefully planning your Enterprise Enrolment Hierarchy to roll-up and isolate cost at different levels, and how to design both your Azure Subscription Models and your Management Group Hierarchy.

CRA Cloud Financial Governance

Establishing a cloud financial government in the cloud is the basis of establishing a cloud reference architecture and it helps you manage cost of your cloud spending and plan your budget by establishing accountability and cost monitoring measures. Read more in this blog series.