Monitoring Brute Force Attacks in Entra ID

A brute-force attack is simply explained as an attacker attempting to authenticate to a user account using multiple passwords, as opposed to a password spray. I recently assisted a small client who doesn’t yet have the budget to invest in a SIEM/SOAR solution like Sentinel but is concerned about brute force attacks and account lockouts.… Continue reading Monitoring Brute Force Attacks in Entra ID

Monitoring your Azure resource deployments

As part of your FinOps practice, some IT departments require additional proactive notifications whenever any Azure resources are upgraded or deployed in their tenant. This proactive approach helps manage cloud sprawl by reducing unwanted security risks and avoiding bill shock at the end of the month. In this blog, I have provisioned an Azure Logic… Continue reading Monitoring your Azure resource deployments

Automated monitoring Azure App Registration secrets using using Logic Apps

When provisioning App Registrations, their secrets are set to a maximum of 24 months. Currently, Azure does not provide a notification platform to proactively alert you when secrets are nearing expiration, which can result in business disruption. We are often asked by clients to implement automated monitoring and alerting platforms especially with regards to secrets… Continue reading Automated monitoring Azure App Registration secrets using using Logic Apps

Backup your Azure Firewall using Logic Apps

I have chatted to several clients who believe that because their Azure Firewall is a FWaaS offering, Azure is actively backing up their Azure Firewall and their associated Azure Firewall Policy configurations. However, this assumption is incorrect. Azure Firewall is Microsoft Azure’s cloud-native firewall-as-a-service (FWaaS) solution, operating within the Shared Responsibility Model (SRM). As per… Continue reading Backup your Azure Firewall using Logic Apps