Check retained machine identity before reusing an Azure Windows OS disk
Which identity assumptions need review when a replacement Azure VM is built from a specialized Windows disk?
Read the guideDSE security knowledge hubSecurity knowledge,
Security knowledge,
without the noise.
Page 41 of the DSE Security Knowledge Hub, with source-backed guidance, checklists, explainers, and playbooks.
DSE-authoredOfficial sourcesReviewed guidance
Search the library DSE post stream
2,626 articlesGuidance and analysis from DSE
Separate extension install-time version selection from ongoing Azure upgrades
Why are AutoUpgradeMinorVersion and EnableAutomaticUpgrade separate decisions for an Azure VM extension?
Read the explainer
Read the Windows VM creation flag before planning a patch-mode transition
Can an existing Azure Windows VM switch freely between AutomaticByOS and Manual patch modes?
Read the guide
Plan the one-way boundary of availability-set migration to Flexible scale sets
What does cancellation preserve during the preview migration from an availability set to a Flexible scale set?
Read the playbook
Record the selected MPI environment alongside an Azure HPC image version
What software evidence should accompany an HPC result when an image contains several MPI libraries?
Read the guide
Keep VM watch process CPU percentages tied to their denominator
Why can two VM watch process CPU metrics report different percentages for the same process?
Read the guide
Test boot-diagnostics capture separately from an operator's ability to view it
Which storage paths should be checked when Azure boot diagnostics are missing or inaccessible?
Read the guide
Include the attestation endpoint in Trusted Launch integrity-monitoring checks
What should be checked when a Trusted Launch VM's Guest Attestation extension fails behind network controls?
Read the guide
Choose the correct allocation path when associating an existing VM with reserved capacity
How does associating an existing regional Azure VM differ from the preview path for an existing zonal VM?
Read the guide
Reconcile physical zones before using a shared capacity reservation
Why can matching zone numbers in two subscriptions still select different physical locations for shared reserved capacity?
Read the guide