Check reservation flexibility groups before matching different VM sizes
DSE recommends recording each running VM’s exact size, its current flexibility group, and the applicable ratio before calculating coverage.
Read the guideDSE security knowledge hubSecurity knowledge,
Security knowledge,
without the noise.
Page 22 of the DSE Security Knowledge Hub, with source-backed guidance, checklists, explainers, and playbooks.
DSE-authoredOfficial sourcesReviewed guidance
Search the library DSE post stream
2,626 articlesGuidance and analysis from DSE
Distinguish the stored public SSH key from the downloaded private key
DSE recommends recording the Azure key resource identifier, intended operator, and approved VM access purpose without placing private key material in the change record.
Read the guide
Choose restore-point consistency before capturing an Azure VM
DSE recommends documenting the intended consistency mode before scheduling the capture.
Read the guide
Record threads per core separately from an Azure VM’s available vCPUs
DSE recommends writing both requested settings into the deployment specification alongside the exact VM size.
Read the guide
Check a pinned gallery image version when a VM deployment stops finding its source
DSE recommends recording the failed request’s full image-version identifier and intended region before changing the deployment.
Read the guide
Review Azure control-plane implications before a Windows Server in-place upgrade
DSE recommends documenting the update capabilities the workload needs before selecting an upgrade method.
Read the guide
Respect the country boundary when testing Cloud Apps impossible-travel detection
Why might geographically distant activity produce no Defender for Cloud Apps impossible-travel alert?
Read the guide
Build Intune log consumers for variable export times and duplicate records
What timing and duplication assumptions should an Intune diagnostic-log consumer avoid?
Read the guide
Choose Android assistant-sharing controls with their screenshot impact in view
How do Android assistant-content restrictions differ from blocking all screen captures?
Read the guide
Check where a saved Log Analytics query lives before claiming customer-key protection
Distinguish query packs from the linked-storage route for customer-managed encryption.
Read the guide