Check next-hop selection before troubleshooting the appliance application path
Use the selected route to identify where a VM's traffic is being sent.
Read the guideDSE security knowledge hubSecurity knowledge,
Security knowledge,
without the noise.
Page 29 of the DSE Security Knowledge Hub, with source-backed guidance, checklists, explainers, and playbooks.
DSE-authoredOfficial sourcesReviewed guidance
Search the library DSE post stream
2,626 articlesGuidance and analysis from DSE
Include the private endpoint in an Azure Files site-to-site VPN plan
DSE recommends drawing the complete client-to-share path before treating the VPN as ready.
Read the guide
Review VM-extension authority before granting Log Analytics Contributor
A monitoring-role assignment can include operational control beyond reading logs.
Read the guide
Declare a global workbook time parameter before synchronizing chart brushing
Make the scope of an interactive time selection explicit.
Read the guide
Investigate reference-based changes in ARM what-if output before treating them as real differences
An unresolved expression can produce a predicted property change.
Read the guide
Check provider Metro support when Standard ExpressRoute resiliency is unavailable
The selected provider and location can constrain which resiliency option is offered.
Read the guide
Reconcile Traffic Analytics table names when moving to VNet flow logs
Check the source table behind saved queries and alerts.
Read the guide
Apply a Queue access-time condition to every relevant role assignment
DSE recommends recording the queue, principal, intended UTC boundary, and relevant read grants before editing the condition.
Read the guide
Choose the table-level RBAC scope before granting application access
DSE recommends listing the tables and operations the principal needs before selecting an assignment scope.
Read the guide
Document the temporary ExpressRoute transit path during a Virtual WAN migration
Treat staged-migration connectivity as its own acceptance case.
Read the guide