Category: Cloud Security

  • Understanding NIST Security Controls: A Comprehensive Guide

    NIST stands for the National Institute of Standards and Technology, which is a non-regulatory agency of the United States Department of Commerce. NIST is responsible for developing and maintaining a variety of technical standards and guidelines, including those related to information technology and cybersecurity. In the context of Azure cloud, NIST has provided a framework…

  • Basics of cloud security control framework

    In this post, we will discuss about basics of cloud security control framework. Here is a general framework that you could consider: Identity and Access Management: Establish controls to manage user identities and control access to Azure and Office 365 resources. This could include implementing multi-factor authentication, using role-based access control, and regularly reviewing and…

  • Basics of DDoS Attacks

    What is a DDoS Attack? A Distributed Denial of Service (DDoS) attack is a type of cyber attack that aims to disrupt the normal functioning of a website, server, or network by overwhelming it with traffic from multiple sources. In a DDoS attack, a large number of devices, usually compromised by malware, are coordinated to…

  • Microsoft Defender Ninja Training: Strengthening Your Security Skills

    Microsoft Defender is a comprehensive suite of security tools that provides protection for a wide range of threats across multiple platforms. To help users get the most out of these tools, Microsoft offers a series of free online training courses called “Ninja Training.” These courses provide in-depth, hands-on instruction on how to use Defender to…

  • Azure Sentinel: What is difference between rules, runbooks and playbook?

    Here’s an overview of runbooks, playbooks, and rules in Azure Sentinel: Runbooks: Runbooks are automated workflows that can be triggered by security incidents or other events in Azure Sentinel. They can perform a wide range of tasks, such as running scripts, sending notifications, or initiating remediation actions. Runbooks can be created using Azure Automation, Logic…

  • What is OWASP?

    OWASP stands for the Open Web Application Security Project, a non-profit organization focused on improving the security of software and web applications. A WAF, or web application firewall, is a security tool designed to protect web applications from a variety of attacks, including those outlined by the OWASP Top Ten Project. The OWASP Top Ten…

  • Unifying Security: Microsoft Rebrands its Defender Technologies for Better Protection

    In recent times, Microsoft has been working on unifying its security offerings under the Microsoft Defender brand. As part of this effort, Microsoft has rebranded some of its popular security technologies to better reflect the multi-platform capabilities of these products. The following are some of the rebrandings that Microsoft has made to its security technologies:…

  • Getting started with Azure Sentinel: Where to start?

    Azure Sentinel is a cloud-native security information and event management (SIEM) solution that helps organizations detect and respond to threats across their entire enterprise. It provides a centralized view of security data across multiple sources, including on-premises and cloud environments, and uses artificial intelligence (AI) and machine learning (ML) to detect and investigate potential threats.…