How to recognize an ssh login attempt on a Linux machine with Sentinel
In this post I show how to build a scheduled query rule in Azure Sentinel that recognize an ssh login attempt on a Linux machine.
Recent posts
How to deploy Angular app to Azure App Service running Linux from GitHub
This sample demonstrates how to deploy, from GitHub, an Angular single page application (SPA) to Azure App Service running Node.js on Linux. A continuous del...
NICOLTIP032 - How can I authorize someone to turn on-off a Virtual Machine on Azure?
This walktrough demonstrates how to create a custom role in azure to allow a specific user or group to Start/Stop a Virtual Machine on Azure.
Microsoft Identity Platform which OAuth flow should I use?
Microsoft Identity Platform: which OAuth2 flow should I use? My non-prescriptive one-page guide in choosing the right auth flow for every situation :-)
Use Azure Key Vault as TDE with Azure PaaS Services
For one of my customers I have had the need to collect if and how Azure Key Vault can be used for Transparent Data Encryption. The result is the following ta...