Scope diagnostic-destination ListKeys permission to the monitoring resource
Review the destination permission required when creating a diagnostic setting.
Read the guideDSE security knowledge hubSecurity knowledge,
Security knowledge,
without the noise.
Page 27 of the DSE Security Knowledge Hub, with source-backed guidance, checklists, explainers, and playbooks.
DSE-authoredOfficial sourcesReviewed guidance
Search the library DSE post stream
2,626 articlesGuidance and analysis from DSE
Specify the NFS Kerberos protection mode in an Azure NetApp Files mount review
DSE recommends having the data owner define the required authentication, integrity, and traffic-protection outcome before the mount is approved.
Read the guide
Review Bastion's subnet size before planning host scaling
Do not infer expansion readiness from an older Bastion deployment that still works.
Read the guide
Avoid modifying a virtual-network flow-log blob while Azure is writing it
Preserve the active log artifact when collecting evidence for investigation.
Read the guide
Tie Route Server anycast advertisements to application health
Verify route withdrawal when a regional application becomes unavailable.
Read the guide
Use Queue peek operations for observation without changing message visibility
DSE recommends classifying the operation before running the queue client method.
Read the guide
Distinguish blocked campaign clicks from Safe Links overrides
How should an analyst interpret different URL-click outcomes in a Defender email campaign?
Read the guide
Separate Defender synthetic device registration from full Entra join
Why can a Defender-managed device appear in Entra and Intune without a full join record?
Read the guide
Edit the Prometheus rule group after creating recommended Kubernetes alerts
Use the correct management object when changing an already created alert set.
Read the guide
Distinguish Azure metric retention from the maximum chart time range
A single chart's time limit is smaller than the retained platform-metric history.
Read the guide